Arbitrary File Download Vulnerability in the Collaboration Office System of Beijing Zhiyuan Internet Software Co.

Beijing Zhiyuan Internet Software Co., Ltd Zhiyuan Internet was founded in March 2002, is a technology enterprise integrating product design, research and development, sales and service. An arbitrary file download vulnerability exists in the collaborative office system of Beijing Zhiyuan Internet...

CVE-2019-20484: Direct Request

An issue was discovered in Viki Vera 4.9.1.26180. A user without access to a project could download or upload project files by opening the Project URL directly in the browser after logging in...

CVE-2020-22550

Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to download sensitive files from the server...

Directory traversal

Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to download sensitive files from the server...

HGiga MailSherlock Arbitrary File Download Vulnerability

HGiga MailSherlock is an email archiving and auditing system that provides a complete email security solution. An arbitrary file download vulnerability exists in HGiga MailSherlock. The vulnerability stems from MailSherlock's View Source Code feature not validating specific characters. An attacke...

Arbitrary File Download Vulnerability in Ruoyi Management System

Ruoyi management system is a SpringBoot2.0 based on the use of Spring, MyBatis, Shiro rights management system . Ruoyi Management System has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2020-25850

The function, view the source code, of HGiga MailSherlock does not validate specific characters. Remote attackers can use this flaw to download arbitrary system files...

CVE-2020-25850 HGiga MailSherlock - Arbitrary File Download

The function, view the source code, of HGiga MailSherlock does not validate specific characters. Remote attackers can use this flaw to download arbitrary system files...

Hgiga MailSherlock: Input validation vulnerability

HGiga MailSherlock is an email archiving and auditing system that provides a complete email security solution. An arbitrary file download vulnerability exists in HGiga MailSherlock. The vulnerability stems from MailSherlock's View Source Code feature not validating specific characters. An attacke...

Arbitrary File Download Vulnerability in MTCEO Repository System

MTCEO library system using php + mysql, built by thinkphp underlying , Baidu library template style for the basic style . MTCEO library system exists arbitrary file download vulnerability, attackers can use the vulnerability to obtain sensitive information...

GateOne Arbitrary File Download Vulnerability

GateOne is a terminal emulator and SSH client based on HTML5 implementation. GateOne 1.1 suffers from an arbitrary file download vulnerability. An attacker can download arbitrary files via /downloads/... Directory traversal can be exploited to download arbitrary files...

Ship 100 online education system has an arbitrary file download vulnerability

Shipping 100 is a virtual goods automatic shipping system / article pay to read system, without human guards, customers can buy online to automatically complete the transaction. There is an arbitrary file download vulnerability in the Shipment 100 online education system. An attacker can exploit...

pikachu

It is an offensive tool for web application security training. The primary CVE ID is not explicitly mentioned, but the tool is designed to simulate various web application vulnerabilities, including but not limited to, Burt Force, XSS, CSRF, SQL-Inject, RCE, Files Inclusion, Unsafe file downloads...

CVE-2020-35736

GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused...

CVE-2020-35736

GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused...

Directory traversal

GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused...

CVE-2020-35736

GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused...

CVE-2020-35736

GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused...

CVE-2020-35736

GateOne 1.1 has a Local File Inclusion vulnerability: arbitrary file retrieval without authentication via /downloads/.. due to incorrect os.path.join usage. The issue enables directory traversal to read sensitive files. Confirmed in the Nuclei template and corroborated by multiple feeds; CVE-2020...

CVE-2020-35736: Improper Limitation of a Pathname to a Restricted Directory

GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused...