BMC Control-M/Agent Arbitrary File Download Vulnerability

Control-M is one of BMC's most important automation control products, and is the world's leading integrated business scheduling solution for cross-platform and cross-application job scheduling. A security vulnerability exists in BMC Control-M/Agent and Control-M/Server communication when using th...

CVE-2019-19169: Undefined Security Weakness

Dext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution...

MPC Sharj 3.11.1 Arbitrary File Download

Exploit title : MPC Sharj 3.11.1 - Arbitrary File Download Exploit Author : SajjadBnd Date : 2020-05-02 Software Link : http://dl.nuller.ir/mpc-sharj-vr3.11.1betawww.nuller.ir.zip Tested on : Ubuntu 19.10 Version : 3.11.1 Beta DESCRIPTION MPC Sharj is a free open source script for creating sim ca...

PT-2020-10074

Name of the Vulnerable Software and Affected Versions Dext5.ocx ActiveX versions 5.0.0.116 and earlier Description The issue allows a remote attacker to download arbitrary files by setting specific arguments to the ActiveX method, which can be leveraged for code execution. Recommendations For...

MPC Sharj 3.11.1 - Arbitrary File Download

Exploit title : MPC Sharj 3.11.1 - Arbitrary File Download Exploit Author : SajjadBnd Date : 2020-05-02 Software Link : http://dl.nuller.ir/mpc-sharj-vr3.11.1betawww.nuller.ir.zip Tested on : Ubuntu 19.10 Version : 3.11.1 Beta DESCRIPTION MPC Sharj is a free open source script for creating sim ca...

Haozitong Video Conferencing Enterprise Edition Server Administration Background Exists Arbitrary File Download Vulnerability

Shenzhen Yinpeng Cloud Computing Co., Ltd. is a cloud computing product and service provider. Arbitrary file download vulnerability exists in the server management background of GoodView Video Conference Enterprise Edition, which can be exploited by attackers to obtain sensitive information...

CVE-2019-19219

BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download...

CVE-2019-19219

BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download...

Arbitrary file deletion

BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download...

CVE-2019-19219

CVE-2019-19219 affects BMC Control-M/Agent 7.0.00.000. The CNVD entry describes a vulnerability in Control-M/Agent–Control-M/Server communication over TCP that lets remote attackers submit a special request to download arbitrary files. The NVD entry similarly states Arbitrary File Download. No re...

CVE-2019-19219

BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download...

CVE-2019-19219: Undefined Security Weakness

BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download...

PT-2020-10099

Name of the Vulnerable Software and Affected Versions BMC Control-M/Agent version 7.0.00.000 Description The issue allows for arbitrary file download. Recommendations For version 7.0.00.000, at the moment, there is no information about a newer version that contains a fix for this vulnerability...

School ERP Pro 1.0 - Arbitrary File Read Vulnerability

Exploit for php platform in category web applications Exploit Title: School ERP Pro 1.0 - Arbitrary File Read Author: Besim ALTINOK Vendor Homepage: http://arox.in Software Link: https://sourceforge.net/projects/school-erp-ultimate/ Version: latest version Tested on: Xampp Credit: İsmail BOZKURT...

CVE-2019-19165

AxECM.cabActiveX Control in Inogard Ebiz4u contains a vulnerability that could allow remote files to be downloaded and executed by setting arguments to the activeX method. Download of Code Without Integrity Check vulnerability in ActiveX control of Inogard Co,,LTD Ebiz4u ActiveX of Inogard...

CVE-2019-19165

CVE-2019-19165 affects Inogard Ebiz4u AxECM.cab ActiveX control. Connected sources describe a remote code execution risk: by passing arguments to the ActiveX method, an attacker can cause a file to be downloaded to a Windows user’s folder and executed. Affected product: Inogard Ebiz4u ActiveX (Ax...

PT-2020-10070

Name of the Vulnerable Software and Affected Versions Inogard Ebiz4u ActiveX versions 1.0.5.0 and later Description The issue allows remote files to be downloaded and executed by setting arguments to the ActiveX method, specifically in the AxECM.cab ActiveX control. This enables an attacker to...

CVE-2019-19165: Download of Code Without Integrity Check

AxECM.cabActiveX Control in Inogard Ebiz4u contains a vulnerability that could allow remote files to be downloaded and executed by setting arguments to the activeX method. Download of Code Without Integrity Check vulnerability in ActiveX control of Inogard Co,,LTD Ebiz4u ActiveX of Inogard...

Arbitrary File Download Vulnerability in Website Building System of Shanghai Baoxin Software Co.

Shanghai Baoshin Software Co., Ltd Baoshin Software for short is a listed software enterprise actually controlled by China Baowu and held by Baosteel. Shanghai Baoshin Software Co., Ltd. website building system has an arbitrary file download vulnerability, which can be exploited by an attacker to...

ESPCMS suffers from an arbitrary file download vulnerability (CNVD-2020-29422)

ESPCMS is a content management system CMS based on PHP and MySQL. ESPCMS has an arbitrary file download vulnerability that can be exploited by an attacker to download arbitrary files...