Seagate and LaCie Multiple Wireless Storage Products Direct Request Vulnerabilities

Seagate is the world's largest manufacturer of hard drives, disks and read/write heads, headquartered in California. A direct request vulnerability exists in several Seagate and LaCie wireless storage products, which can be exploited by an attacker to download arbitrary files directly from the fi...

American Internet Emergency Response Center CERT: Seagate wireless hard drive to a vulnerability-vulnerability warning-the black bar safety net

! American Internet emergency center released a on Seagate wireless hard drive with a warning, because the products were found to have multiple vulnerabilities could be exploited by attackers to download to disk all of the files. The default“root”login American Internet emergency center noted:...

MS15-100 Microsoft Windows Media Center MCL Vulnerability

This module exploits a vulnerability in Windows Media Center. By supplying an UNC path in the .mcl file, a remote file will be automatically downloaded, which can result in arbitrary code execution. Module Options msf use exploit/windows/fileformat/ms15/100mclexe msf undefined100mclexe show actio...

TerraMaster NAS 任意文件下载漏洞

No description provided by source...

WordPress History Collection Plugin 1.1.1 download.php 任意文件下载

eLouai's Download ScriptERROR: download file NOT SPECIFIED. USE force-download.php?file=filepath"; exit; elseif ! fileexists $filename echo "eLouai's Download ScriptERROR: File not found. USE force-download.php?file=filepath"; exit; ; switch $fileextension case "pdf": $ctype="application/pdf";...

Joomla HD FLV Player < 2.1.0.1 - Arbitrary File Download Vulnerability

No description provided by source...

yuyou hudongpingtai /Components/news/FileDown.aspx 任意文件下载

No description provided by source...

SiteFactory CMS 5.5.9 任意文件下载漏洞

漏洞详情：SiteFactory CMS 5.5.9 存在任意文件下载漏洞。问题链接：sitefactory/assets/download.aspx?file=测试链接：/sitefactory/assets/download.aspx?file=c%3a\windows\win.ini影响版本：SiteFactory CMS 5.5.9...

金蝶EAS /portal/logoImgServlet 任意文件下载

No description provided by source...

YesWiki 0.2 - squelette Directory Traversal

YesWiki 0.2 - squelette Directory Traversal Exploit Title: YESWIKI 0.2 - Path Traversal Date: 2015-09-02 Exploit Author: HaHwul Exploit Author Blog: http://www.codeblack.net Vendor Homepage: http://yeswiki.net Software Link: https://github.com/YesWiki/yeswiki Version: yeswiki 0.2 Tested on: Debia...

Seagate and LaCie wireless storage products contain multiple vulnerabilities

Overview Multiple Seagate wireless storage products contain multiple vulnerabilities. Description CWE-798: Use of Hard-coded Credentials - CVE-2015-2874 Some Seagate wireless storage products provide undocumented Telnet services accessible by using the default credentials of 'root' as username an...

WordPress Swim Team Plugin 1.44.10777 - Arbitrary File Download

The code in ./wp-swimteam/include/user/download.php doesn't sanitize user input from downloading sensitive system files: 50 $file = urldecode$args'file' ; 51 $fh = fopen$file, 'r' or die'Unable to load file, something bad has happened.' ; 52 53 while !feof$fh 54 $txt .= fread$fh, 1024 ; 55 56 //...

BusyBox Download and Execute

This module will be applied on a session connected to a BusyBox shell. It will use wget to download and execute a file from the device running BusyBox. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

Beijing Jinhe C6 Collaborative Management Platform Arbitrary File Download Vulnerability

Jinhe OA is developed with asp.net and sqlserver technology and is used by many users. OA system/JHSoft.Web.CustomQuery/FileDownLoad.aspx page due to the FilePath parameter did not do ... /filter, can download any file in any directory, resulting in arbitrary file download vulnerability...

Panmicro e-office Collaboration Management Platform File Download Vulnerability

Panmicro e-office's /inc/attach.php page has no filter on the file download name ATTACHMENTNAME passed in by the url... /, which can be used ... / to traverse the directory so that any file in any directory can be downloaded, leading to the formation of an arbitrary file download problem...

Gkplugins Picasaweb - Download File Vulnerability

Exploit for php platform in category web applications Exploit Title: Gkplugins Picasaweb Download File Date : 2015-08-13 Exploit Author : TMT VNhgroup Vendor Homepage: https://gkplugins.com/ Tested on: Windows 7 File ------------------------ $fileout = $GET'f'; -- can you download file $filelengt...

Online Training Management System Generalized Arbitrary File Download Vulnerability of Beijing Jianfeng Hexun Technology Co.

Peak Hutchinson's Online Training Management System is a software system that provides full-process management of training activities for learning organizations. There is a generic arbitrary file download vulnerability in the online training management system of Beijing Summit Hexun Technology Co...

Polycom RealPresence Resource Manager Arbitrary File Download Vulnerability

RealPresence Resource Manager software is a key component of the Polycom RealPresence platform, a robust device and software optimized for virtual environments. An arbitrary file download vulnerability exists in Polycom RealPresence Resource Manager, which could be exploited by an attacker to...

WordPress Plugin WPTF Image Gallery 1.03 - Arbitrary File Download

WordPress Plugin WPTF Image Gallery 1.03 - Arbitrary File Download Title: Remote file download vulnerability in wptf-image-gallery v1.03 Author: Larry W. Cashdollar, @larry0 Date: 2015-07-17 Download Site: https://wordpress.org/plugins/wptf-image-gallery Vendor:...

WordPress Plugin Simple Image Manipulator 1.0 - Arbitrary File Download

WordPress Plugin Simple Image Manipulator 1.0 - Arbitrary File Download Title: Remote file download in simple-image-manipulator v1.0 wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-07-16 Download Site: https://wordpress.org/plugins/simple-image-manipulator Vendor:...