Freelancy 1.0.0 Remote Code Execution

Exploit Title: Freelancy - Freelance Management App v1.0.0 - RCE Authenticated Arbitrary File Download Date: 03-01-2019 Exploit Author: Ismail Tasdelen Vendor Homepage: https://vaaip.com/ Software Link: https://codecanyon.net/item/freelancy-freelance-project-management-application/25288636...

Arbitrary File Download Vulnerability in Cruise Cloud Light Forum System

Cruise Cloud Light Forum System is an open source web application based on JAVA + MYSQL architecture, including forums, Q&A modules. Patrol Cloud Light Forum system has an arbitrary file download vulnerability, attackers can use this vulnerability to download arbitrary files to obtain sensitive...

Arbitrary File Download Vulnerability in School Worry-Free Teacher Evaluation System

The Schoolfree Teacher Evaluation System is a school teaching management system. There is an arbitrary file download vulnerability in the System, which can be exploited by an attacker to download the website database and obtain sensitive information in the database...

CVE-2019-20354

The web application component of piSignage before 2.6.4 allows a remote attacker authenticated as a low-privilege user to download arbitrary files from the Raspberry Pi via api/settings/log?file=../ path traversal. In other words, this issue is in the player API for log download...

CVE-2019-20354

CVE-2019-20354 affects piSignage before 2.6.4: the web application’s player API (api/settings/log?file=..) allows authenticated, low-privilege users to perform directory traversal and download arbitrary files from the Raspberry Pi. Root cause is improper validation of the file parameter, enabling...

CVE-2019-20354: Improper Limitation of a Pathname to a Restricted Directory

The web application component of piSignage before 2.6.4 allows a remote attacker authenticated as a low-privilege user to download arbitrary files from the Raspberry Pi via api/settings/log?file=../ path traversal. In other words, this issue is in the player API for log download...

PT-2020-10393

Name of the Vulnerable Software and Affected Versions piSignage versions prior to 2.6.4 Description The issue allows a remote attacker, authenticated as a low-privilege user, to download arbitrary files from the Raspberry Pi. This is achieved through a path traversal vulnerability in the...

WordPress Email Subscribers Plugin < 4.2.3 Multiple Vulnerabilities

The WordPress plugin Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

Arbitrary File Download Vulnerability in Website Building System of Shanghai Zhongke Network Information Technology Co.

Ltd. is engaged in the information technology field of Internet network services and network business application research including e-commerce, commercial website planning and web design, etc.. Shanghai Zhongke Network Information Technology Co., Ltd. station building system exists arbitrary fil...

MoMoCMS has an arbitrary file read vulnerability

MoMoCMS is an enterprise building system developed by php+MySQL. MoMoCMS has an arbitrary file reading vulnerability that can be exploited by attackers to download arbitrary files...

SQLMap v1.4 - Automatic SQL Injection And Database Takeover Tool

SQLMap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...

EJU real estate system ejucms 1.3 has an arbitrary file download vulnerability

EJU real estate system ejucms is a set of localized O2O real estate website platform system. EJU Real Estate System ejucms 1.3 has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

Micro Focus AcuToWeb Information Disclosure Vulnerability

Micro Focus AcuToWeb is a suite of web and mobile deployment solutions for ACUCOBOL applications from Micro Focus UK. An information disclosure vulnerability exists in Micro Focus AcuToWeb all supported versions. An attacker could exploit this vulnerability to enumerate files on the file system...

Arbitrary file download vulnerability in Myucms frontend

MyuCMS open source content management system developed using ThinkPHP community mall. MyuCMS front-end arbitrary file download vulnerability , an attacker can exploit the vulnerability to download any file...

Arbitrary File Download Vulnerability in Shopping System of Beijing Liangjing Zhicheng Technology Co.

Liangjing Mall online store shopping system is a set of multi-functional online store system that can be suitable for different types of commodities, super flexible, three-tier distribution PC+mobile+micro-site, which provides a complete online store solution. There is an arbitrary file download...

CVE-2019-19985

The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclosure...

CVE-2019-19985

The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclosure...

Information disclosure

The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclosure...

CVE-2019-19985

The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclosure...

CVE-2019-19985

The Email Subscribers & Newsletters WordPress plugin, specifically versions prior to 4.2.3 , contains a flaw allowing unauthenticated file download and user information disclosure . An attacker can exploit this vulnerability to retrieve sensitive files from the server, potentially leading to data...