32924 matches found
CVE-2026-92533
A path traversal vulnerability exists in the BugTracker.NET file download component. The flaw stems from improper validation of user-supplied paths in the parameter used to specify file names. An authenticated remote attacker could provide a manipulated path to access files outside the intended d...
CVE-2017-8809_MediaWiki_RFD
CVE-2017-8809 - RFDReflected File Download for MediaWiki A remote user can create a specially crafted URL for the target site that, when loaded by the target user, will cause the 'api.php' script to download a file containing shell commands CVE-2017-8809. The file will be served by the target sit...
instaloader
.. image:: https://raw.githubusercontent.com/instaloader/instaloader/master/docs/logoheading.png .. badges-start |pypi| |pyversion| |license| |aur| |contributors| |downloads| .. |pypi| image:: https://img.shields.io/pypi/v/instaloader.svg :alt: Instaloader PyPI Project Page :target:...
CVE-2024-36837
README.md CVE-2024-36837 Disclaimer ZhiLianYunCai SRM2.0 runtimeLog/download interface has an arbitrary file read vulnerability. Unauthenticated attackers can read important system files such as database configuration files, system configuration files, database configuration files, etc. through...
hget
hget Ce projet est mon projet personnel pour apprendre Go à construire quelque chose d'utile. Statut de construction : Installer $ go get -d github.com/huydx/hget $ cd $GOPATH/src/github.com/huydx/hget $ make clean install Le fichier binaire sera construit dans ./bin/hget, vous pouvez le copier...
tiktok-scraper
TikTok Scraper & Téléchargeur Récupérez et téléchargez des informations utiles depuis TikTok. Aucun identifiant ou mot de passe requis Ceci n'est pas un support d'API officiel, etc. C'est simplement un scraper qui utilise l'API Web de TikTok pour récupérer des médias et les méta-informations...
PT-2026-107480
Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...
AOSP-DownloadProviderHeadersDumper
AOSP-DownloadProviderHeadersDumper PoC Exploiting Headers Disclosure in Android's Download Provider CVE-2018-9546 Security Advisory https://ioactive.com/wp-content/uploads/2019/04/IOActive-Security-Advisory-Androids-Download-Provider-Request-Headers-Disclosure-CVE-2018-9546.pdf More Information...
Sub-folderFetcher
Sub-folder Fetcher 🐣 A script to download specific Vulhub repository folder kibana/CVE-2018-17246 from GitHub. 🚀 Requirements curl unzip 🛠️ Usage chmod +x subfetcher.sh ./subfetcher.sh...
CVE-2026-106512
The CakeResponse::download method in lib/Cake/Network/CakeResponse.php constructs a Content-Disposition header by directly interpolating a caller-supplied filename into a quoted-string value without sanitization. Two distinct injection vectors exist in the unpatched code. First, if the filename...
CVE-2026-106512 MISP sachertortephp - CakeResponse::download() HTTP Response Splitting via Unsanitized Filename Enables Stored XSS
The CakeResponse::download method in lib/Cake/Network/CakeResponse.php constructs a Content-Disposition header by directly interpolating a caller-supplied filename into a quoted-string value without sanitization. Two distinct injection vectors exist in the unpatched code. First, if the filename...
EUVD-2026-93657
The CakeResponse::download method in lib/Cake/Network/CakeResponse.php constructs a Content-Disposition header by directly interpolating a caller-supplied filename into a quoted-string value without sanitization. Two distinct injection vectors exist in the unpatched code. First, if the filename...
CVE-2026-106512 MISP sachertortephp - CakeResponse::download() HTTP Response Splitting via Unsanitized Filename Enables Stored XSS
The CakeResponse::download method in lib/Cake/Network/CakeResponse.php constructs a Content-Disposition header by directly interpolating a caller-supplied filename into a quoted-string value without sanitization. Two distinct injection vectors exist in the unpatched code. First, if the filename...
CVE-2026-106512
The sachertortephp application contains a vulnerability in the CakeResponse::download() method located in lib/Cake/Network/CakeResponse.php. The root cause is the direct interpolation of unsanitized, caller-supplied filenames into a Content-Disposition header. Two injection vectors exist: using C...
CVE-2026-106512 MISP sachertortephp - CakeResponse::download() HTTP Response Splitting via Unsanitized Filename Enables Stored XSS
The CakeResponse::download method in lib/Cake/Network/CakeResponse.php constructs a Content-Disposition header by directly interpolating a caller-supplied filename into a quoted-string value without sanitization. Two distinct injection vectors exist in the unpatched code. First, if the filename...
waybackpack
waybackpack Waybackpack est un outil en ligne de commande qui vous permet de télécharger l'intégralité de l'archive Wayback Machine pour une URL donnée. Par exemple, pour télécharger chaque copie de la page d'accueil du Département du Travail à travers 1996 qui se trouve être la première année où...
Cve-2026-39676
Cve-2026-39676 Wordpress Version: Download Manager 3.3.5.2 Title: Missing Authorization - Unauthenticated IDOR Exploit...
CVE-2023-36144
CVE-2023-36144 PoC of CVE-2023-36144 - Intelbras Switch SG 2404 MR L2+ firmware 1.00.54 Download the backup file unauthenticated Steps to Reproduce: 1. Go to the following link http://127.0.0.1/cgi-bin/exportCfgwithpasswd replace 127.0.0.1 with the device IP 2. It will auto download the backup...
