CVE-2020-7803

IMGTech Co,Ltd ZInsX.ocx ActiveX Control in Zoneplayer 2.0.1.3, version 2.0.1.4 and prior versions on Windows. File Donwload vulnerability in ZInsX.ocx of IMGTech Co,Ltd Zoneplayer allows attacker to cause arbitrary code execution...

Arbitrary file deletion

IMGTech Co,Ltd ZInsX.ocx ActiveX Control in Zoneplayer 2.0.1.3, version 2.0.1.4 and prior versions on Windows. File Donwload vulnerability in ZInsX.ocx of IMGTech Co,Ltd Zoneplayer allows attacker to cause arbitrary code execution...

CVE-2020-7803 Zoneplayer ActiveX File Download Vulnerability

IMGTech Co,Ltd ZInsX.ocx ActiveX Control in Zoneplayer 2.0.1.3, version 2.0.1.4 and prior versions on Windows. File Donwload vulnerability in ZInsX.ocx of IMGTech Co,Ltd Zoneplayer allows attacker to cause arbitrary code execution...

CVE-2020-7803

CVE-2020-7803 affects IMGTech Zoneplayer ZInsX.ocx ActiveX Control on Windows (versions 2.0.1.3/2.0.1.4 and earlier). Described as a File Download vulnerability in ZInsX.ocx allowing arbitrary code execution. Connected Red Hat/CNVD/CVE records corroborate the vulnerability description; exploit de...

CVE-2019-18870

A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to download arbitrary files from the host machine...

CVE-2019-18870

CVE-2019-18870 concerns Blaauw Remote Kiln Control (v3.00r4) where a path traversal flaw exists in the iniFile parameter of excel.php. The underlying issue is a path traversal vulnerability that, when authenticated, allows an attacker to download arbitrary files from the host machine. The connect...

PT-2020-10001

Name of the Vulnerable Software and Affected Versions Blaauw Remote Kiln Control versions through v3.00r4 Description A path traversal issue via the iniFile parameter in excel.php allows an authenticated attacker to download arbitrary files from the host machine. Recommendations For versions...

PT-2020-6501

Name of the Vulnerable Software and Affected Versions IBM Data Risk Manager versions 2.0.1 through 2.0.4 Description The issue is related to insufficient path validation in the IBM Data Risk Manager application, allowing a remote attacker to traverse directories and download arbitrary files by...

CVE-2020-7803: Improper Input Validation

IMGTech Co,Ltd ZInsX.ocx ActiveX Control in Zoneplayer 2.0.1.3, version 2.0.1.4 and prior versions on Windows. File Donwload vulnerability in ZInsX.ocx of IMGTech Co,Ltd Zoneplayer allows attacker to cause arbitrary code execution...

MPC Sharj 3.11.1 - Arbitrary File Download Exploit

Exploit for php platform in category web applications Exploit title : MPC Sharj 3.11.1 - Arbitrary File Download Exploit Author : SajjadBnd Date : 2020-05-02 Software Link : http://dl.nuller.ir/mpc-sharj-vr3.11.1betawww.nuller.ir.zip Tested on : Ubuntu 19.10 Version : 3.11.1 Beta DESCRIPTION MPC...

CVE-2020-4430: Improper Limitation of a Pathname to a Restricted Directory

IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535...

CVE-2019-18870: Improper Limitation of a Pathname to a Restricted Directory

A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to download arbitrary files from the host machine...

PT-2020-19800

Name of the Vulnerable Software and Affected Versions Zoneplayer versions 2.0.1.3 and prior versions Zoneplayer version 2.0.1.4 Description The issue allows an attacker to cause arbitrary code execution due to a file download vulnerability in the ZInsX.ocx ActiveX Control of Zoneplayer on Windows...

Raonwiz Dext5.ocx ActiveX Arbitrary File Download Vulnerability

Raonwiz Dext5.ocx ActiveX is a control from Raonwiz Korea for use in the Dext5 Upload file transfer software development kit. A security vulnerability exists in Raonwiz Dext5.ocx ActiveX 5.0.0.116 and earlier versions. A remote attacker can exploit the vulnerability by setting the parameter to...

CVE-2019-19169

Dext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution...

CVE-2019-19169

Dext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution...

CVE-2019-19169

Dext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution...

CVE-2020-7806 Tobesoft Xplatform ActiveX File Download Vulnerability

Tobesoft Xplatform 9.2.2.250 and earlier version have an arbitrary code execution vulnerability by using method supported by Xplatform ActiveX Control. It allows attacker to cause remote code execution...

CVE-2019-19167 Tobesoft Nexacro14 ActiveX File Download Vulnerability

Tobesoft Nexacro v2019.9.25.1 and earlier version have an arbitrary code execution vulnerability by using method supported by Nexacro14 ActiveX Control. It allows attacker to cause remote code execution...

BMC Control-M/Agent Arbitrary File Download Vulnerability

Control-M is one of BMC's most important automation control products, and is the world's leading integrated business scheduling solution for cross-platform and cross-application job scheduling. A security vulnerability exists in BMC Control-M/Agent and Control-M/Server communication when using th...