Pallets Werkzeug 0.15.4 - Path Traversal Exploit

Exploit Title: Pallets Werkzeug 0.15.4 - Path Traversal Original Author: Emre ÖVÜNÇ Exploit Author: faisalfs10x https://github.com/faisalfs10x Vendor Homepage: https://palletsprojects.com/ Software Link: https://github.com/pallets/werkzeug Version: Prior to 0.15.5 Tested on: Windows Server CVE:...

Arbitrary File Download Vulnerability in ZengCMS

ZengCMS is a backend management system based on the latest TP6.0.x framework and Layui 2.5.x. ZengCMS suffers from an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive information...

Arbitrary File Download Vulnerability in Mccms

Mccms is a comic + novel system developed using the Ci framework as its core. Mccms has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

RawSpeed Buffer Overflow Vulnerability

RawSpeed is a full-line solution for Internet users to upload and download large files. A buffer overflow vulnerability exists in RawSpeed, which stems from an out-of-bounds read/write operation occurring due to a failure to validate memory boundaries during a call to the TableLookUp::setTable...

ES File Explorer 4.1.9.7.4 Arbitrary File Read

Exploit Title: ES File Explorer 4.1.9.7.4 - Arbitrary File Read Date: 29/06/2021 Exploit Author: Nehal Zaman Version: ES File Explorer v4.1.9.7.4 Tested on: Android CVE : CVE-2019-6447 import requests import json import ast import sys if lensys.argv file to download" sys.exit1 url = 'http://' +...

CVE-2020-23715

Directory Traversal vulnerability in Webport CMS 1.19.10.17121 via the file parameter to file/download...

CVE-2020-23715: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in Webport CMS 1.19.10.17121 via the file parameter to file/download...

PT-2021-10935

Name of the Vulnerable Software and Affected Versions Webport CMS version 1.19.10.17121 Description The issue is related to a Directory Traversal vulnerability. It can be exploited via the file parameter to the "file/download" endpoint. Recommendations For Webport CMS version 1.19.10.17121, as a...

Arbitrary File Download Vulnerability in Extreme CMS of Langfang Extreme Networks Technology Co. Ltd (CNVD-2021-46798)

Extreme CMS hereinafter referred to as: JIZHICMS is a free and open source PHP station building CMS system. JIZHICMS has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

Arbitrary File Download Vulnerability in e-cology 8 of Shanghai Panmicro Network Technology Co.

Ltd. was founded in 2001, headquartered in Shanghai, focusing on the field of collaborative management software, and is committed to collaborative OA as the core to help enterprises build a unified mobile office platform. Ltd. e-cology 8 arbitrary file download vulnerability, an attacker can use...

Arbitrary File Download Vulnerability in Web Management Platform of Time Attendance Machine of China Control

CCTC Intelligent Technology Co., Ltd. generally refers to Entropy Base Technology Co., Ltd. which is a globally recognized company with biometrics as its core technology. An arbitrary file download vulnerability exists in the web management platform of ZhongControl Attendance Machine, which can b...

Arbitrary File Download Vulnerability in Intelligent Desktop Management System of Changsha Tongxun Computer Technology Co.

Changsha Tongxun Computer Technology Co., Ltd. is a company specializing in software development, sales and maintenance. An arbitrary file download vulnerability exists in the Intelligent Desktop Management System of Changsha Tongxun Computer Technology Co. An attacker can exploit the vulnerabili...

samsung WLAN AP suffers from an arbitrary file download vulnerability

Samsung China Investment Co., Ltd. is the headquarters of Samsung Group in China. By the end of 2008, 20 out of more than 30 companies under Samsung have invested in China, including Samsung Electronics, Samsung SDI, Samsung SDS and Samsung Electro-Mechanics. Samsung WLAN AP arbitrary file downlo...

Arbitrary File Download Vulnerability in Built-in Reports of Renton Network Security Management System (CNVD-2021-47145)

Renzi Network Technology Co., Ltd. was founded in May 2000, and its business covers network security, information security, public security, network resource security, industrial internet security and many other fields, etc. etc. An arbitrary file download vulnerability exists in the built-in...

OpenEMR 5.0.1.7 - 'fileName' Path Traversal (Authenticated)

Exploit Title: OpenEMR 5.0.1.7 - 'fileName' Path Traversal Authenticated Date 16.06.2021 Exploit Author: Ron Jost Hacker5preme Vendor Homepage: https://www.open-emr.org/ Software Link: https://github.com/openemr/openemr/archive/refs/tags/v5017.zip Version: All versions prior to 5.0.2 Tested on:...

OpenEMR 5.0.1.7 - (fileName) Path Traversal (Authenticated) Exploit

Exploit Title: OpenEMR 5.0.1.7 - 'fileName' Path Traversal Authenticated Exploit Author: Ron Jost Hacker5preme Vendor Homepage: https://www.open-emr.org/ Software Link: https://github.com/openemr/openemr/archive/refs/tags/v5017.zip Version: All versions prior to 5.0.2 Tested on: Ubuntu 18.04 CVE:...

Arbitrary File Download Vulnerability in Zhuozheng Software PageOffice

PageOffice is an online office editing software. An arbitrary file download vulnerability exists in Zhuozheng Software PageOffice, which can be exploited by attackers to obtain sensitive information...

in kalcaddle/kodexplorer

💥 BUG any user can download any file 💥 IMPACT download any kodexplorer uploaded file 💥 STEP TO REPRODUCE 1. First goto your kodexplorer admin account and visit desktop .\ Now upload a txt file called a.txt to desktop .\ 2. Now open another browser and visit...

Arbitrary File Download Vulnerability in Internet Behavior Management System of Tianrongxin Technology Group

Founded on August 30, 1985, Skyrise Technology Group, or "Skyrise" for short, is a leading provider of network security, big data and security cloud services in China. An arbitrary file download vulnerability exists in the Internet behavior management system of Tianrongxin Technology Group. An...

Arbitrary File Download Vulnerability in Built-in Reports of Renton Network Security Management System

Renzi Network Technology Co., Ltd. was founded in May 2000, and its business covers network security, information security, public security, network resource security, industrial internet security and many other fields, etc. etc. An arbitrary file download vulnerability exists in the built-in...