6573 matches found
Horde Gollem Module Unauthorized File Download Vulnerability - Linux
Horde Groupware is prone to an unauthorized file download vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Intelligent high-definition network dome camera of Changzhou Shuoxin Electronic Technology Co.
Intelligent high-definition network dome camera is a surveillance equipment of Changzhou ShuoXin Electronic Technology Co. Intelligent HD Network Dome Camera of Changzhou ShuoXin Electronic Technology Co., Ltd. suffers from an arbitrary file download vulnerability. An attacker can exploit this...
MGASA-2017-0429 Updated mediawiki packages fix security vulnerabilities
XSS when $wgShowExceptionDetails = false and browser sends non-standard url escaping CVE-2017-8808. Reflected File Download from api.php CVE-2017-8809. On private wikis, login form shouldn't distinguish between login failure due to bad username and bad password CVE-2017-8810. It's possible to...
Updated mediawiki packages fix security vulnerabilities
XSS when $wgShowExceptionDetails = false and browser sends non-standard url escaping CVE-2017-8808. Reflected File Download from api.php CVE-2017-8809. On private wikis, login form shouldn't distinguish between login failure due to bad username and bad password CVE-2017-8810. It's possible to...
BlueTech Enterprise Website Management System (PHP version) front-end arbitrary file download vulnerability
BlueTech Enterprise Website Management System PHP version is developed with PHP+MYSQL technology and MVC mode. Support pseudo-static function, can generate google and baidu map, support custom url, keywords and description, in line with SEO standards. BlueTech enterprise website management system...
Arbitrary File Download Vulnerability in the Pelco Sarix Pro Webcam ssldownload.cgi Program
pelco Sarix Professional is a video camera. An arbitrary file download vulnerability exists in the pelco Sarix Pro network camera ssldownload.cgi program. The vulnerability is caused due to the program failing to properly check the path and name of the downloaded file, allowing an attacker to...
CVE-2017-8136
HedEx Earlier than V200R006C00 versions has an arbitrary file download vulnerability. An attacker could exploit it to download arbitrary files on a target device to cause information leak...
CVE-2017-8136
HedEx Earlier than V200R006C00 versions has an arbitrary file download vulnerability. An attacker could exploit it to download arbitrary files on a target device to cause information leak...
Arbitrary file deletion
HedEx Earlier than V200R006C00 versions has an arbitrary file download vulnerability. An attacker could exploit it to download arbitrary files on a target device to cause information leak...
CVE-2017-8136
Huawei HedEx/HedEx Lite (pre-V200R006C00) contains an arbitrary file download vulnerability (CVE-2017-8136) that could disclose arbitrary files on the target device, per the Huawei advisory and NVD entry. No exploitation details are provided in the documents beyond the vulnerability description. ...
CVE-2017-8136
HedEx Earlier than V200R006C00 versions has an arbitrary file download vulnerability. An attacker could exploit it to download arbitrary files on a target device to cause information leak...
SNVR IE client web server suffers from an arbitrary file download vulnerability
SNVR IE Client is a high definition digital surveillance storage platform. An arbitrary file download vulnerability exists in the SNVR IE Client web server. The vulnerability allows attackers to download arbitrary files from the system...
SSRF vulnerability in APPCMS admin\download_frame.php file
APPCMS is a professional APP content management system that provides a variety of extension modules, such as information, recommended positions, topics, friendly links, body internal links and so on, to help webmasters better personalize their own websites. An SSRF vulnerability exists in the...
OnionShare - Securely and anonymously share a file of any size
OnionShare lets you securely and anonymously share files of any size. It works by starting a web server, making it accessible as a Tor onion service, and generating an unguessable URL to access and download the files. It doesn't require setting up a server on the internet somewhere or using a thi...
FreeBSD : mediawiki -- multiple vulnerabilities (298829e2-ccce-11e7-92e4-000c29649f92)
mediawiki reports : security fixes : T128209: Reflected File Download from api.php. Reported by Abdullah Hussam. T165846: BotPasswords doesn't throttle login attempts. T134100: On private wikis, login form shouldn't distinguish between login failure due to bad username and bad password. T178451:...
Mail.ru: XSS on account.mail.ru/login
Уязвимость на станице https://account.mail.ru/login и подготовка файлов для атаки --------------------- В процессе исследования заметил, что на странице https://account.mail.ru/login не валидируется значение параметра v. Значение выводится на странице как есть и используется в пути до скрипта...
MediaWiki File Download Vulnerability
MediaWiki is a free and free web-based Wiki engine developed and maintained by the Wikimedia Foundation and MediaWiki volunteers, which can be used to deploy in-house knowledge management and content management systems. A file download vulnerability exists in the api.php file in MediaWiki version...
Debian DSA-4036-1 : mediawiki - security update
Multiple security vulnerabilities have been discovered in MediaWiki, a website engine for collaborative work : - CVE-2017-8808 Cross-site-scripting with non-standard URL escaping and $wgShowExceptionDetails disabled. - CVE-2017-8809 Reflected file download in API. - CVE-2017-8810 On private wikis...
MediaWiki Multiple Vulnerabilities (Nov 2017) - Windows
MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; if...
