CVE-2019-8389

CVE-2019-8389 - Musicloud for iOS v1.6 में मनमाना फ़ाइल पढ़ना CVE-2019-8389 Musicloud v1.6 iOS ऐप में स्थानीय फ़ाइल पढ़ने की भेद्यता का शोषण करने के लिए एक एक्सप्लॉइट कोड विवरण: Musicloud 1.6 की Wi-Fi ट्रांसफर सुविधा में एक फ़ाइल-रीड भेद्यता पाई गई। डिफ़ॉल्ट रूप से, ऐप पोर्ट 8080 पर एक ट्रांसफर...

EUVD-2019-17779

Malware in sbrugna...

CVE-2019-8389

A file-read vulnerability was identified in the Wi-Fi transfer feature of Musicloud 1.6. By default, the application runs a transfer service on port 8080, accessible by everyone on the same Wi-Fi network. An attacker can send the POST parameters downfiles and cur-folder with a crafted ../ payload...

Arbitrary file deletion

A file-read vulnerability was identified in the Wi-Fi transfer feature of Musicloud 1.6. By default, the application runs a transfer service on port 8080, accessible by everyone on the same Wi-Fi network. An attacker can send the POST parameters downfiles and cur-folder with a crafted ../ payload...

CVE-2019-8389

A file-read vulnerability was identified in the Wi-Fi transfer feature of Musicloud 1.6. By default, the application runs a transfer service on port 8080, accessible by everyone on the same Wi-Fi network. An attacker can send the POST parameters downfiles and cur-folder with a crafted ../ payload...

CVE-2019-8389

The CVE-2019-8389 issue affects Musicloud 1.6, where the Wi‑Fi transfer feature runs a service on port 8080 accessible to any device on the same network. Affected component is the download.script endpoint, which processes POST parameters downfiles and cur-folder. A crafted ../ payload enables an ...

CVE-2019-8389

A file-read vulnerability was identified in the Wi-Fi transfer feature of Musicloud 1.6. By default, the application runs a transfer service on port 8080, accessible by everyone on the same Wi-Fi network. An attacker can send the POST parameters downfiles and cur-folder with a crafted ../ payload...