CVE-2021-39316

CVE-2021-39316 affects WordPress ZoomSounds plugin (versions <= 6.45/6.50 per sources). The entailed issue is a Local File Inclusion via the dzsap_download action using directory traversal in the link parameter, allowing download of arbitrary files such as wp-config.php. Nuclei templates descr...

DZS Zoomsounds < 6.50 - Unauthenticated Arbitrary File Download

The plugin allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the dzsapdownload action using directory traversal in the link parameter...

PT-2021-22525 · WordPress · Zoomsounds

Name of the Vulnerable Software and Affected Versions: Zoomsounds plugin versions = 6.45 for WordPress Description: The issue allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the dzsap download action using directory traversal in the link...

CVE-2021-39316: Improper Limitation of a Pathname to a Restricted Directory

The Zoomsounds plugin = 6.45 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the dzsapdownload action using directory traversal in the link parameter...

Wsh - Web Shell Generator And Command Line Interface

wsh pronounced woosh is a web shell generator and command line interface. This started off as just an http client since interacting with webshells is a pain. There's a form, to send a command you have to type in an input box and press a button. I wanted something that fits into my workflow better...

Jeecms background exists arbitrary file download vulnerability

jeecms is a content management system developed by Jiangxi Jinlei Technology Development Co., Ltd. that supports WeChat applets, WeChat public/service numbers, column models, content model cross-customization, and content e-commerce with payment and financial settlement. jeecms background exists...

CVE-2021-22922

When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink XML file points out to the client how to get the same contentfrom a set of different URLs, potentially hosted by different servers and...

CVE-2021-22922: Improper Handling of Exceptional Conditions

When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink XML file points out to the client how to get the same contentfrom a set of different URLs, potentially hosted by different servers and...

CVE-2021-35326: Undefined Security Weakness

A vulnerability in TOTOLINK A720R router with firmware v4.1.5cu.470B20200911 allows attackers to download the configuration file via sending a crafted HTTP request...

Longjing Technology BEMS API 1.21 Remote Arbitrary File Download

Longjing Technology BEMS API 1.21 Remote Arbitrary File Download Vendor: Longjing Technology Product web page: http://www.ljkj2012.com Affected version: 1.21 Summary: Battery Energy Management System. Desc: The application suffers from an unauthenticated arbitrary file download vulnerability. Inp...

Longjing Technology BEMS API 1.21 - Remote Arbitrary File Download Vulnerability

Exploit Title: Longjing Technology BEMS API 1.21 - Remote Arbitrary File Download Exploit Author: LiquidWorm Vendor Homepage: http://www.ljkj2012.com Longjing Technology BEMS API 1.21 Remote Arbitrary File Download Vendor: Longjing Technology Product web page: http://www.ljkj2012.com Affected...

GO-2021-0108 CRLF vulnerability in Fiber in github.com/gofiber/fiber

Due to improper input sanitization, a maliciously constructed filename could cause a file download to use an attacker controlled filename, as well as injecting additional headers into an HTTP response...

Longjing Technology BEMS API 1.21 Remote Arbitrary File Download

Summary Battery Energy Management System. Description The application suffers from an unauthenticated arbitrary file download vulnerability. Input passed through the fileName parameter through downloads endpoint is not properly verified before being used to download files. This can be exploited t...

Eclipse Jetty has an arbitrary file download vulnerability

Jetty is a lightweight and highly scalable Java-based web server and servlet engine. Eclipse Jetty has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

Arbitrary File Download Vulnerability in Goldie SMS Middleware Web Edition

Kindi SMS middleware Web Edition is designed to build a hardware device-based SMS data exchange platform. An arbitrary file download vulnerability exists in Kindi SMS Middleware Web Edition, which can be exploited by an attacker to download arbitrary files...

Arbitrary File Download Vulnerability in Taibo Cloud Platform of Xiamen Taibo Technology Co.

TabTech Ltd. is a software company focusing on the informationization of senior universities. Xiamen Taibo Technology Co., Ltd. Taibo Cloud Platform has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

Arbitrary File Download Vulnerability in PatrolFlow Multi-service Security Gateway Intelligent Management Platform of Beijing Byzoro Network Technology Co.

Beijing Byzoro Network Technology Co., Ltd. is a high-tech enterprise dedicated to building the next-generation secure Internet. PatrolFlow Multi-service Security Gateway Intelligent Management Platform of Beijing Byzoro Networks Technology Co., Ltd. suffers from an arbitrary file download...

Eclipse Jetty security vulnerabilities

Jetty is a lightweight and highly scalable Java-based web server and servlet engine. Eclipse Jetty has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

Frontend File Manager < 18.3 - Unauthenticated Post Meta Change to Arbitrary File Download

The wpfmfilemetaupdate AJAX action of the plugin, available to unauthenticated users, was lacking CSRF and capability check, allowing unauthenticated users to change arbitrary post metadata which could lead to arbitrary file download...

WordPress Frontend File Manager plugin <= 18.2 - Unauthenticated Post Meta Change and Arbitrary File Download vulnerability

Unauthenticated Post Meta Change and Arbitrary File Download vulnerability discovered by Jerome Bruandet NinTechNet in WordPress Frontend File Manager plugin versions = 18.2. Solution Update the WordPress Frontend File Manager plugin to the latest available version at least 18.3...