Arbitrary file deletion

A Remote Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 was found...

Design/Logic Flaw

A remote arbitrary file download and disclosure of information vulnerability in HPE Intelligent Management Center iMC Service Operation Management SOM version IMC SOM 7.3 E0501 was found...

CVE-2017-12555

A remote arbitrary file download and disclosure of information vulnerability in HPE Intelligent Management Center iMC Service Operation Management SOM version IMC SOM 7.3 E0501 was found...

CVE-2015-1000007

Remote file download vulnerability in wptf-image-gallery v1.03...

CVE-2015-1000006

Remote file download vulnerability in recent-backups v0.7 wordpress plugin...

CVE-2015-1000005

Remote file download vulnerability in candidate-application-form v1.0 wordpress plugin...

CVE-2015-1000005

CVE-2015-1000005 affects the WordPress plugin Candidate Application Form (v1.0;

CVE-2015-1000010

Remote file download in simple-image-manipulator v1.0 wordpress plugin...

CVE-2015-1000006

CVE-2015-1000006 corresponds to a remote file download vulnerability in the WordPress plugin recent-backups v0.7. Connected sources confirm a file‑download flaw in the plugin, with OpenVAS and WPVulnDB noting directory traversal/file download risk and WPEX exploit notes that download-file.php doe...

CVE-2015-1000007

Remote file download vulnerability in wptf-image-gallery v1.03...

CVE-2015-1000005

Remote file download vulnerability in candidate-application-form v1.0 wordpress plugin...

CVE-2015-1000006

Remote file download vulnerability in recent-backups v0.7 wordpress plugin...

CVE-2015-1000007

CVE-2015-1000007 corresponds to a remote file download vulnerability in the WordPress plugin “wptf-image-gallery” v1.03. The issue arises in the plugin’s file handling in lib-mbox/ajax_load.php, where user input is not properly sanitized and access control is not enforced, enabling an unauthentic...

DarkComet Server 3.2 Remote File Download

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'DarkComet Server Remote File Download Exploit', 'Description' = %q This module exploits an arbitrary file download vulnerabilit...

DarkComet Server - Arbitrary File Download (Metasploit)

DarkComet Server - Arbitrary File Download Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'DarkComet Server Remote File Download Exploit', 'Description' = %q This...

DarkComet Server - Remote File Download Exploit (Metasploit)

Exploit for windows platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'DarkComet Server Remote File Download Exploit', 'Description' = %q Thi...

DarkComet Server - Arbitrary File Download (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'DarkComet Server Remote File Download Exploit', 'Description' = %q This module exploits an arbitrary file download vulnerabilit...

WordPress Plugin Simple Backup 2.7.11 - Multiple Vulnerabilities

Meta information Exploit Title: Wordpress plugin simple-backup - Multiple vulnerabilities Date: 2016-06-02 Exploit Author: PizzaHatHacker A gmail . com Vendor Homepage: DEAD LINK https://wordpress.org/plugins/simple-backup/ Software Link: DEAD LINK...

Request Forgery Vulnerability in OurPHP Server Side

OurPHP 傲派建站系统 is a website content management system developed using PHP language, the developer is Harbin Weicheng Technology Co. The upload file management module under the "Global/Interface" module in the administration background of OurPHP has a hidden remote file download function. Since the...

SedSystems D3 Decimator - Multiple Vulnerabilities

SedSystems D3 Decimator - Multiple Vulnerabilities SedSystems D3 Decimator Multiple Vulnerabilities ================================================ Identification of the vulnerable device can be performed by scanning for TCP port 9784 which offers a default remote API. When connected to this...