CVE-2025-25029 IBM Security Guardium information disclosure

IBM Security Guardium 12.0 could allow a privileged user to download any file on the system due to improper escaping of input...

PT-2024-31236 · Unknown · Nus-M9 Erp Management

Name of the Vulnerable Software and Affected Versions: NUS-M9 ERP Management Software version 3.0.0 Description: An arbitrary file download issue in the /Basics/DownloadInpFile component allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-8778

OMFLOW from The SYSCOM Group does not properly validate user input of the download functionality, allowing remote attackers with regular privileges to read arbitrary system files...

Simple E-Learning System 安全漏洞

Simple E-Learning System is a simple e-learning system by Carlo Montero's personal developer. simple E-Learning System is vulnerable to an arbitrary file download vulnerability, which stems from a lack of validation of external input data in the downloadFiles.php parameter download. validation. A...