CVE-2024-7612

Insecure permissions in Ivanti EPMM before 12.1.0.4 allow a local authenticated attacker to modify sensitive application components...

Exploit for CVE-2024-42718

Welcome Hello!!! My name is Jacopo and I have been worki...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the LocalMode's openlocalfile method, which allows an authenticated user with adequate permissions to download any .txt via the ScreensControllershow on the web server. Details A Directory Traversal attack also...

ABB Cylon Aspect 3.07.02 Authenticated File Disclosure

ABB Cylon Aspect 3.07.02 downloadDb.php Authenticated File Disclosure Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.07.02 Summary: ASPECT is an award-winning scalable building energy...

CVE-2024-46327

An issue in the Httphandle object of VONETS VAP11G-300 v3.3.23.6.9 allows attackers to access sensitive files via a directory traversal...

CVE-2024-46327

An issue in the Httphandle object of VONETS VAP11G-300 v3.3.23.6.9 allows attackers to access sensitive files via a directory traversal...

PT-2024-31957 · Vonets · Vap11G-300

Name of the Vulnerable Software and Affected Versions: VONETS VAP11G-300 version 3.3.23.6.9 Description: An issue in the Http handle object allows attackers to access sensitive files via a directory traversal. This issue enables attackers to get sensitive files through a directory traversal...

Vonets VAP11G-300 安全漏洞

Vonets VAP11G-300 is a multi-functional wireless bridge and repeater device from China Houtian Vonets. It is based on the IEEE 802.11n standard and has a wireless rate of up to 300Mbps. A security vulnerability exists in the Vonets VAP11G-300 version 3.3.23.6.9, which originates from a...

CVE-2024-46327

The VONETS VAP11G-300 (version 3.3.23.6.9 ) is vulnerable to a directory traversal flaw within the Http_handle object. This security issue allows an attacker to access sensitive files on the device. While no patch version is currently available, it is recommended to restrict access to the Http_ha...

CVE-2024-21545

Proxmox Virtual Environment is an open-source server management platform for enterprise virtualization. Insufficient safeguards against malicious API response values allow authenticated attackers with 'Sys.Audit' or 'VM.Monitor' privileges to download arbitrary host files via the API. When handli...

Sensitive files disclosure in diagnostic logs download

...

PT-2024-31288

Name of the Vulnerable Software and Affected Versions phpok version 3.0 Description The issue is an arbitrary file read vulnerability via the component /autoload/file.php. This allows a local attacker to access sensitive files. There is no information provided about the estimated number of...

PT-2024-31220 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.1 Description: The issue is an arbitrary file read vulnerability. It affects the admin safe.php component. There is no information provided about the estimated number of potentially affected devices worldwide or real-world...

PT-2024-10148

Name of the Vulnerable Software and Affected Versions QTS versions prior to 5.1.8.2823 build 20240712 QTS versions prior to 5.2.0.2802 build 20240620 QuTS hero versions prior to h5.1.8.2823 build 20240712 QuTS hero versions prior to h5.2.0.2802 build 20240620 Description The issue is related to a...

Accellion FTA Statecode Cookie Arbitrary File Read

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Accellion FTA 'statecode' Cookie Arbitrary File Read", 'Description' = %q This module exploits a file disclosure vulnerability in the Accellion...

Linksys E1500 Directory Traversal

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Linksys E1500 Directory Traversal Vulnerability', 'Description' = %q This module exploits a directory traversal vulnerability which is present in...

Tomcat UTF-8 Directory Traversal

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Tomcat UTF-8 Directory Traversal Vulnerability', 'Description' = %q This module tests whether a directory traversal vulnerability is present in...

Android Mercury Browser Intent URI Scheme And Directory Traversal

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Android Mercury Browser Intent URI Scheme and Directory Traversal Vulnerability', 'Description' = %q This module exploits an unsafe intent URI...

Firefox PDF.js Browser File Theft

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Firefox PDF.js Browser File Theft', 'Description' = %q This module abuses an XSS vulnerability in versions prior to Firefox 39.0.3, Firefox ESR...

QNAP QTS and Photo Station Local File Inclusion

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'QNAP QTS and Photo Station Local File Inclusion', 'Description' = %q This module exploits a local file inclusion in QNAP QTS and Photo Station th...