7925 matches found
Server side request forgery (ssrf)
A SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which can remotely download arbitrary files on the server and remotely execute arbitrary code...
CVE-2020-25466
A SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which can remotely download arbitrary files on the server and remotely execute arbitrary code...
PT-2020-16089
Name of the Vulnerable Software and Affected Versions CRMEB version 3.0 Description A SSRF issue exists in the downloadimage interface, allowing remote download of arbitrary files on the server and potentially enabling remote execution of arbitrary code. Recommendations For CRMEB version 3.0,...
ForceControl Technology ForceControl Web Service Directory Arbitrary File Download Vulnerability
Forcecontrol is a monitoring and configuration software, mainly used for data acquisition and monitoring control. An arbitrary file download vulnerability exists in the ForceControl Web Services directory, which can be exploited by attackers to obtain sensitive information...
Forcecontrol Technology Forcecontrol Web Directory Arbitrary File Download Vulnerability
Forcecontrol is a monitoring and configuration software, mainly used for data acquisition and monitoring control. An arbitrary file download vulnerability exists in the Forcecontrol Web directory, which can be exploited by attackers to obtain sensitive information...
CVE-2020-25466: Server-Side Request Forgery (SSRF)
A SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which can remotely download arbitrary files on the server and remotely execute arbitrary code...
Hrsale 2.0.0 Local File Inclusion
Exploit Title: Hrsale 2.0.0 - Local File Inclusion Date: 10/21/2020 Exploit Author: Sosecure Vendor Homepage: https://hrsale.com/index.php Version: version 2.0.0 Description: This exploit allow you to download any readable file from server with out permission and login session. Payload :...
Arbitrary File Download Vulnerability in HRSALE Management System
HRSALE is a human resource management system. An arbitrary file download vulnerability exists in the HRSALE management system. An attacker can exploit the vulnerability to download arbitrary sensitive files...
Cisco ASA and FTD 9.6.4.42 - Path Traversal
Exploit Title: Cisco ASA and FTD 9.6.4.42 - Path Traversal Date: 2020-10-10 Exploit Author: 3ndG4me Vendor: www.cisco.com Product: https://www.cisco.com/c/en/us/products/security/asa-firepower-services/index.html CVE : CVE-2020-3452 TARGET=$1 CISCOKNOWNFILES="logo.gif httpauth.html userdialog.htm...
Design/Logic Flaw
Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP configuration files /filemanager/php/connector.php from Web Admin...
CVE-2020-15677
By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the download file dialog to show the original site the one suffering from the open redirect rather than the site the file was actually downloaded from. This vulnerability affects Firefo...
CVE-2020-25781
An issue was discovered in filedownload.php in MantisBT before 2.24.3. Users without access to view private issue notes are able to download the supposedly private attachments linked to these notes by accessing the corresponding file download URL directly...
CVE-2020-25781
An issue was discovered in filedownload.php in MantisBT before 2.24.3. Users without access to view private issue notes are able to download the supposedly private attachments linked to these notes by accessing the corresponding file download URL directly...
Design/Logic Flaw
An issue was discovered in filedownload.php in MantisBT before 2.24.3. Users without access to view private issue notes are able to download the supposedly private attachments linked to these notes by accessing the corresponding file download URL directly...
CVE-2020-25781
An issue was discovered in filedownload.php in MantisBT before 2.24.3. Users without access to view private issue notes are able to download the supposedly private attachments linked to these notes by accessing the corresponding file download URL directly...
CVE-2020-25781
Summary: The CVE-2020-25781 issue affects MantisBT prior to 2.24.3, specifically the file_download.php path. What is affected : the ability to download private issue note attachments without proper permissions. The underlying problem is improper authorization for accessing file download URLs link...
CVE-2020-13953
In Apache Tapestry from 5.4.0 to 5.5.0, crafting specific URLs, an attacker can download files inside the WEB-INF folder of the WAR being run...
Code injection
In Apache Tapestry from 5.4.0 to 5.5.0, crafting specific URLs, an attacker can download files inside the WEB-INF folder of the WAR being run...