CVE-2021-38146: Improper Limitation of a Pathname to a Restricted Directory

The File Download API in Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to read arbitrary files via absolute path traversal in the SearchString JSON field in /home/download POST data...

CVE-2020-7999

The Intellian Aptus application 1.0.2 for Android has hardcoded values for DOWNLOADAPIKEY and FILEDOWNLOADAPIKEY...

PT-2020-19910

Name of the Vulnerable Software and Affected Versions Intellian Aptus application version 1.0.2 Description The issue concerns hardcoded values for DOWNLOAD API KEY and FILE DOWNLOAD API KEY in the application. Recommendations For Intellian Aptus application version 1.0.2, consider restricting...

PT-2017-7391

Name of the Vulnerable Software and Affected Versions Cherry Music versions prior to 0.36.0 Description A directory traversal issue allows remote authenticated users to read arbitrary files. This is achieved via the value parameter to the "download" API endpoint. Recommendations For versions prio...