6574 matches found
CVE-2018-5105
WebExtensions can bypass user prompts to first save and then open an arbitrarily downloaded file. This can result in an executable file running with local user privileges without explicit user consent. This vulnerability affects Firefox 58...
CVE-2017-7821
A vulnerability where WebExtensions can download and attempt to open a file of some non-executable file types. This can be triggered without specific user interaction for the file download and open actions. This could be used to trigger known vulnerabilities in the programs that handle those...
CVE-2017-7814
This CVE (CVE-2017-7814) affects Mozilla products (Firefox < 56, Firefox ESR < 52.4, Thunderbird
CVE-2017-7821
CVE-2017-7821 : A vulnerability in Firefox (WebExtensions) allows downloading and attempting to open certain non-executable file types without user interaction, potentially triggering vulnerabilities in handlers for those document types. The issue affects Firefox versions older than 56 (per mfsa2...
cscms V4.1.8 version exists arbitrary file download vulnerability
Cscms is a diversified content management system developed using PHP5+MYSQL as the technical basis. cscms V4.1.8 version of the existence of arbitrary file download vulnerability, attackers can use the vulnerability to download arbitrary files, resulting in system information leakage...
Moodle File Download Vulnerability
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security vulnerability exists in the Moodle 3.x version. The vulnerability can be...
Moodle File Download Vulnerability (CNVD-2018-10649)
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security vulnerability exists in the Moodle 3.x version. The vulnerability can be...
JDA Warehouse Management System Buffer Overflow / SQL Injection / XML Injection
Introduction ========= Multiple critical vulnerabilities were identified in JDA Warehouse management system WMS. The vulnerabilities were discovered during a black box security assessment and therefore the vulnerability list should not be considered exhaustive. Affected Software and Versions...
CVE-2018-1135
An issue was discovered in Moodle 3.x. Students who posted on forums and exported the posts to portfolios can download any stored Moodle file by changing the download URL...
CVE-2018-1134
An issue was discovered in Moodle 3.x. Students who submitted assignments and exported them to portfolios can download any stored Moodle file by changing the download URL...
UBUNTU-CVE-2018-1134
An issue was discovered in Moodle 3.x. Students who submitted assignments and exported them to portfolios can download any stored Moodle file by changing the download URL...
CVE-2018-1134
An issue was discovered in Moodle 3.x. Students who submitted assignments and exported them to portfolios can download any stored Moodle file by changing the download URL...
CVE-2018-1135
An issue was discovered in Moodle 3.x. Students who posted on forums and exported the posts to portfolios can download any stored Moodle file by changing the download URL...
CVE-2018-1135
CVE-2018-1135 affects Moodle 3.x: an issue where students posting on forums and exporting posts to portfolios can download any stored Moodle file by altering the download URL. The vulnerability concerns the file download mechanism within Moodle’s portfolio integration (no explicit root cause deta...
CVE-2018-1135
An issue was discovered in Moodle 3.x. Students who posted on forums and exported the posts to portfolios can download any stored Moodle file by changing the download URL...
CVE-2018-1134
Moodle 3.x contains an authentication/authorization flaw where students who export assignments to portfolios can download any stored Moodle file by altering the download URL. This vulnerability affects Moodle 3.x installations and arises from insufficient access controls around file downloads. Th...
BearAdmin Arbitrary File Download Vulnerability
BearAdmin is a backend management system based on ThinkPHP5 and AdminLTE. A security vulnerability exists in BearAdmin version 0.5. A remote attacker can exploit the vulnerability by sending the 'name' parameter with a directory traversal sequence to the /admin/databack/download.html page to...
Directory traversal
An issue was discovered in BearAdmin 0.5. Remote attackers can download arbitrary files via /admin/databack/download.html?name= directory traversal sequences, as demonstrated by name=../application/database.php to read the MySQL credentials in the configuration...
Honeywell Scada System Information Disclosure
Exploit Title: Honeywell Scada System - Information Disclosure Date: 2018-05-23 Exploit Author: t4rkd3vilz Vendor Homepage: https://www.honeywell.com Version: WebVersion : 3.2.1.294365 - DeviceType : IPC-HFW2320R-ZS Tested on: Linux To be written after the destination IP address...