52 matches found
Unauthorized File Download
thorsten/phpmyfaq is vulnerable to Unauthorized File Download. The vulnerability is due to improper validation in the FAQ Record component, allowing a privileged attacker to embed a file download in an element and exploit it without user interaction or explicit consent...
FreeBSD : element-web -- several vulnerabilities (ab4e6f65-a142-11ef-84e9-901b0e9408dc)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ab4e6f65-a142-11ef-84e9-901b0e9408dc advisory. Element team reports: Versions of Element Web and Desktop earlier than 1.11.85 do not check if...
Remote Code Execution (RCE)
pyloadng is vulnerable to Remote Code Execution RCE. The vulnerability is due to insufficient restrictions on the /.pyload/scripts folder, allowing executable files to run automatically when certain actions, like completing a download, are triggered. Attackers can exploit this by downloading an...
Alkacon OpenCMS Absolute Path Traversal via pathname in filePath parameter
Absolute path traversal vulnerability in downloadTrigger.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to download arbitrary files via an absolute pathname in the filePath parameter...
Exploit for Download of Code Without Integrity Check in Zzinc Keymouse_Firmware
CVE-2022-24644 ZZ Inc. KeyMouse 3.08 Windows Unauthenticat...
Directory Traversal Vulnerability in Easy Control World
Easy Control World is an automation monitoring and information system platform created by Beijing Jiushi Yi Automation Software Co. A directory traversal vulnerability exists in Easy Control World. An attacker can exploit the vulnerability to download arbitrary files from the program installation...
HCL Marketing Operations Information Disclosure Vulnerability
HCL Marketing Operations is a marketing management software from HCL India. The software supports streamlining of production processes, tracking of budgets and expenditures, improving team collaboration, etc. A security vulnerability exists in HCL Marketing Operations versions 9.1.2.4, 10.1.x, an...
Bludit Path Traversal Vulnerability
Bludit is an open source, lightweight blog content management system CMS. A path traversal vulnerability exists in Bludit version 3.12.0. An attacker can exploit this vulnerability to download arbitrary files with the help of the backup/plugin.php file...
GL-AR300M-Lite 2.27 - (Authenticated) Command Injection Arbitrary File Download Directory Traversal
GL-AR300M-Lite 2.27 - Authenticated Command Injection Arbitrary File Download Directory Traversal Exploit Title: GL-AR300M-Lite Authenticated Command injection - Arbitrary file download - Directory Traversal Date: 15/1/2019 Exploit Author: Pasquale Turi aka boombyte Vendor Homepage:...
CVE-2016-7048
The interactive installer in PostgreSQL before 9.3.15, 9.4.x before 9.4.10, and 9.5.x before 9.5.5 might allow remote attackers to execute arbitrary code by leveraging use of HTTP to download software...
DEBIAN-CVE-2018-1000500
Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download any file over HTTPS using "busybox wget https://compromised-domain.com/important-file"...
Joomla! K2 2.8.0 Arbitrary File Download
Exploit Title: Joomla! Component K2 2.8.0 - Arbitrary File Download Dork: N/A Date: 26.02.2018 Vendor Homepage: http://www.joomlaworks.net/ Software Link: https://extensions.joomla.org/extensions/extension/authoring-a-content/content-construction/k2/ Software Download:...
Flash ActiveX 18.0.0.194 - Code Execution
Flash ActiveX 18.0.0.194 - Code Execution CVE-2015-5112 Pop up a calculator - Requires Flash ActiveX 18.0.0.194 Download: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/44742.swf...
whirOA download. jsp arbitrary File Download
No description provided by source...
Easy to create think the CMS /Tools/stream/FlvStream. ashx File Download vulnerability
No description provided by source...
vlcms \Application\Media\Controller\DownController.class.php arbitrary File Download
No description provided by source...
Lezhixing cms /datacenter/getfile.do 任意文件下载漏洞
No description provided by source...
NS_ASG 6.3 /rproxy-diag.php 任意文件下载漏洞
No description provided by source...
NITC 3.21 /download.php 任意文件下载漏洞
No description provided by source...
PEC php calendars script SQL Injection
Exploit for php platform in category web applications ==================================================== php calendars script SQL Injection ==================================================== calendars script SQL Injection Author: Mr.MLL Published: 2011-12-3 Download Exploit Code Download N/A...