WordPress Product Input Fields for WooCommerce plugin <= 1.2.6 - Unauthenticated Arbitrary File Download vulnerability

Unauthenticated Arbitrary File Download vulnerability discovered by NinTechNet in WordPress Product Input Fields for WooCommerce plugin versions = 1.2.6. Solution Update the WordPress Product Input Fields for WooCommerce plugin to the latest available version at least 1.2.7...

Product Input Fields for WooCommerce < 1.2.7 - Unauthenticated File Download

The lack of authorisation checks in the handledownloads function, hooked to admininit could allow unauthenticated users to download arbitrary files from the blog using a path traversal payload. /wp-admin/admin-post.php?algwcpifdownloadfile=../../../../../wp-config.php...

CVE-2020-16136

In tgstation-server 4.4.0 and 4.4.1, an authenticated user with permission to download logs can download any file on the server machine accessible by the owner of the server process via directory traversal ../ sequences in /Administration/Logs/ requests. The attacker is unable to enumerate files,...

CVE-2020-16136

In tgstation-server 4.4.0 and 4.4.1, an authenticated user with permission to download logs can download any file on the server machine accessible by the owner of the server process via directory traversal ../ sequences in /Administration/Logs/ requests. The attacker is unable to enumerate files,...

CVE-2020-16136

In tgstation-server 4.4.0 and 4.4.1, an authenticated user with permission to download logs can download any file on the server machine accessible by the owner of the server process via directory traversal ../ sequences in /Administration/Logs/ requests. The attacker is unable to enumerate files,...

CVE-2020-16136

In tgstation-server 4.4.0 and 4.4.1, an authenticated user with permission to download logs can access any file on the server machine (accessible by the server process owner) via directory traversal ../ sequences in /Administration/Logs/. The vulnerability enables directory traversal but does not...

NETGEAR R6700 Trust Management Issue Vulnerability

The NETGEAR R6700 is a wireless router from NETGEAR. A trust management issue vulnerability exists in File Download HTTPS in the NETGEAR R6700 version V1.0.4.8410.0.58, which originates when the program fails to properly validate the server's certificate. An attacker could exploit this...

CVE-2017-18923

beroNet VoIP Gateways before 3.0.16 have a PHP script that allows downloading arbitrary files, including ones with credentials...

CVE-2017-18923

beroNet VoIP Gateways before 3.0.16 have a PHP script that allows downloading arbitrary files, including ones with credentials...

CVE-2017-18923

The vulnerability CVE-2017-18923 affects beroNet VoIP Gateways prior to 3.0.16, where a PHP script can download arbitrary files, including files containing credentials. Sources in connected documents confirm the issue exists across multiple feeds (NVD/NVD-duplicate entries and Red Hat advisory). ...

CVE-2020-15658

The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file type being downloaded than shown in the dialog. This vulnerability affects Firefox ESR 78.1, Firefox...

PT-2020-8468

Name of the Vulnerable Software and Affected Versions: beroNet VoIP Gateways versions prior to 3.0.16 Description: The issue allows downloading arbitrary files, including ones with credentials, due to a PHP script. Recommendations: For versions prior to 3.0.16, update to version 3.0.16 or later t...

CVE-2017-18923: Improper Neutralization of Special Elements in Output Used by a Downstream Component

beroNet VoIP Gateways before 3.0.16 have a PHP script that allows downloading arbitrary files, including ones with credentials...

CVE-2020-15658

The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file type being downloaded than shown in the dialog. This vulnerability affects Firefox ESR 78.1, Firefox...

PT-2020-12426

Name of the Vulnerable Software and Affected Versions NETGEAR R6700 version 1.0.4.84 10.0.58 Description This issue allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700 routers. Authentication is not required to exploit...

PT-2020-14574

Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 78.1 Firefox versions prior to 79 Thunderbird versions prior to 78.1 Description The issue arises from improper handling of special characters in the file download code, allowing an attacker to alter the file type...

Security Vulnerabilities fixed in Thunderbird 78.1 — Mozilla

By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script. WebRTC used the memory address of a class instance as a connection identifier. Unfortunately, this value is...

Command Execution Vulnerability in Deepsix VPN Upgrade Maintenance Tool

SSL VPN is a kind of VPN technology provided by SZSS to solve the problem of remote users accessing sensitive company data to realize remote access. A command execution vulnerability exists in the Deepsix VPN Upgrade and Maintenance Tool, which can be exploited by an attacker to remotely upload a...

WordPress Email Subscribers & Newsletters 4.2.2 Plugin - Unauthenticated File Download Vulnerabi

Exploit for php platform in category web applications Exploit Title: WordPress Plugin Email Subscribers & Newsletters 4.2.2 - Unauthenticated File Download Google Dork: "Stable tag" inurl:wp-content/plugins/email-subscribers/readme.txt Exploit Author: email protectedESEC Vendor Homepage:...

WordPress Plugin Email Subscribers & Newsletters 4.2.2 - Unauthenticated File Download

Exploit Title: WordPress Plugin Email Subscribers & Newsletters 4.2.2 - Unauthenticated File Download Google Dork: "Stable tag" inurl:wp-content/plugins/email-subscribers/readme.txt Date: 2020-07-20 Exploit Author: KBA@SOGETIESEC Vendor Homepage: https://www.icegram.com/email-subscribers/ Softwar...