Cisco IOS Software Cisco Application-Hosting Framework HTTP Header Injection Vulnerability (cisco-sa-20160921-caf1)

A vulnerability in the Cisco Application-hosting Framework CAF component for Cisco IOS Software with the IOx feature set could allow an unauthenticated, remote attacker to cause a CAF user to download a file controlled by the attacker. SPDX-FileCopyrightText: 2016 Greenbone AG Some text...

Cisco Application-Hosting Framework HTTP Header Injection Vulnerability

A vulnerability in the Cisco Application-hosting Framework CAF component for Cisco IOS and IOS XE Software with the IOx feature set could allow an unauthenticated, remote attacker to cause a CAF user to download a file controlled by the attacker. The vulnerability is due to insufficient input...

BageCms content management system background arbitrary file download vulnerability

BageCMS is a multi-functional open source web content management system based on php5+mysql5 development. BageCms content management system backend arbitrary file download vulnerability , allowing attackers to exploit the vulnerability can download any file in the server...

Arbitrary File Download and Weak Password Vulnerability in DVR Access Gateway of Suzhou Kedar Technology Co.

DVR digital video recorder is a set of computer system for image storage and processing, with the function of long time video/voice recording, audio recording, remote monitoring and control. The DVR access gateway of Suzhou Kodak Technology Co., Ltd. suffers from arbitrary file download and weak...

Siemens IP Camera 0.1.69 Arbitrary File Download

Exploit Title: Siemens IP Camera :: Arbitrary file download Date: 14-september-2016 Exploit Author: vuppala.Dhanunjaya Vendor Homepage: www.siemens.com Version: V0.1.69 Tested on: Windows 10,ubuntu 14.04 LTS Email : [email protected] ======================================== TEAM...

Internet Explorer help

None None...

CVE-2016-5166

The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file:// URL that is referenced by an http:// URL, which makes it easier for user-assisted remote attackers to discover NetNTLM hashes and condu...

Wordpress timthumb-config. php arbitrary File Download

No description provided by source...

Arbitrary File Download Vulnerability in Beijing Zhiqingweiye Submission System

Beijing Zhiqingweiye Submission System is a CMS system for all kinds of topics or magazines, which can be submitted remotely. The product has an arbitrary file download vulnerability, the vulnerability URL is: /Admin/Upload/Index?path=%2Fweb.config&fileName=%E9%99%84%E5%9B%BE&Browser=IE, an...

ESPCMS File Download information disclosure vulnerability

No description provided by source...

File Containment Vulnerability in Minyou Website Builder System

Minyou web site building system is developed by java content management system is mostly used in government, school management system. The product's download.jsp page pathfile parameter exists arbitrary file download vulnerability, poc for: http://host/download.jsp?pathfile=/... /... /... /... /...

File Download Vulnerability in New Windward Technology's Online Learning Test System

New Windward Technology Online Learning Exam System is built based on enterprise-level database platform, the system architecture using a three-tier structure, B/S mode development can be used for online training and examination system. The product exists arbitrary file download vulnerability,...

Joomla component com_joomanager parameter path arbitrary file download vulnerability

Joomla! is a content management system. An arbitrary file download vulnerability exists in the parameter path of the Joomla component joomanagerde. Allows an attacker to exploit the vulnerability to download sensitive information such as configuration files...

Wordpress Multi Themes arbitrary File Download vulnerability

No description provided by source...

WebNMS Framework 5.2SP1 Information Disclosure

Summary WebNMS is an industry-leading used to build network management applications architecture. Storage of the password using a vulnerable confused with the encryption algorithm, combined with File Download vulnerability to obtain the password in plain text. Vulnerability details ./...

Arbitrary File Download Vulnerability in Wando OA Professional Edition

Wando OA Professional is a comprehensive office system that combines the functions of collaboration software, portal, ERP, CRM, HR, finance, e-mail and video conferencing. The product has an arbitrary file download vulnerability, which can be exploited by an attacker to download any system file,...

WordPress dl-skin.php Arbitrary File Download

An arbitrary file download vulnerability exists in dl-skin.php file. A remote attacker might gain access to arbitrary files using a specially crafted HTTP request...

Traps Endpoint Server Management Core Arbitrary File Download Vulnerability

Palo Alto Networks Traps Endpoint Server Management Core is a suite of server endpoint management core software from Palo Alto Networks, USA. An arbitrary file download vulnerability exists in Traps Endpoint Server Management Core 3.3.3 and earlier versions, which could be exploited by an attacke...

WordPress Bonkersbeat-theme Arbitrary File Download Vulnerability

No description provided by source...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Roundcube Webmail before 1.1.5 allows remote attackers to hijack the authentication of users for requests that download attachments and cause a denial of service disk consumption via unspecified vectors...