CVE-2024-57727

SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing...

PT-2025-1273

Name of the Vulnerable Software and Affected Versions SimpleHelp versions 5.5.7 and earlier Description SimpleHelp remote support software is affected by multiple path traversal vulnerabilities. These flaws allow unauthenticated remote attackers to download arbitrary files from the SimpleHelp hos...

CVE-2024-57727

CVE-2024-57727 affects SimpleHelp RMM

Description of the security update for SharePoint Server 2019: January 14, 2025 (KB5002666)

None None...

Description of the security update for Office 2016: January 14, 2025 (KB5002675)

None None...

Description of the security update for Excel 2016: January 14, 2025 (KB5002673)

None None...

Description of the security update for the remote code execution vulnerability in Visual Studio 2015 Update 3: February 11, 2025 (KB5049688)

None None...

February 4, 2025, update for Access 2016 (KB5002688)

None None...

Description of the security update for Access 2016: January 14, 2025 (KB5002670)

None None...

WordPress Zarinpal Paid Download Plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Zarinpal Paid Download versions = 2.3...

The vulnerability of the Drupal CMS system’s “Download All Files” module, related to the lack of authentication, allows attackers to bypass security restrictions and execute a forced browsing attack.

The vulnerability of the “Download All Files” module in Drupal systems is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute a Forceful Browsing attack...

CVE-2024-57767

MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery SSRF via the component /file/download...

Mysiteforme 安全漏洞

Mysiteforme is a permissions management system for wangl1989 individual developers. A security vulnerability exists in Mysiteforme versions prior to 2025.01.01, which stems from a discovery via the component /file/download that contains a server-side request forgery vulnerability...

CVE-2023-42225

Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via the Attachment/DownloadTempFile function...

CVE-2024-12274 BookingPress < 1.1.23 - Unauthenticated Export File Download

The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.1.23 export settings functionality exports data to a public folder, with an easily guessable file name, allowing unauthenticated attackers to access the exported files if they exist...

CVE-2025-0401

A vulnerability classified as critical has been found in 1902756969 reggie 1.0. Affected is the function download of the file src/main/java/com/itheima/reggie/controller/CommonController.java. The manipulation of the argument name leads to path traversal. It is possible to launch the attack...

PT-2025-1451 · Pat Infinite Solutions · Helpdeskadvanced

Name of the Vulnerable Software and Affected Versions: Pat Infinite Solutions HelpdeskAdvanced versions = 11.0.33 Description: The issue is related to a Directory Traversal vulnerability via the Attachment/DownloadTempFile function. This allows unauthorized access to sensitive files and...

Pat Infinite Solutions HelpdeskAdvanced 安全漏洞

Pat Infinite Solutions HelpdeskAdvanced is an automated solution for strategic governance of Service Management activities from Pat Infinite Solutions. A security vulnerability exists in Pat Infinite Solutions HelpdeskAdvanced version 11.0.33 and earlier. An attacker can exploit this vulnerabilit...

PT-2025-3872 · Reggie · Reggie

Name of the Vulnerable Software and Affected Versions: reggie version 1.0 Description: A critical vulnerability has been found in the function download of the file src/main/java/com/itheima/reggie/controller/CommonController.java. The manipulation of the name argument leads to path traversal. It ...

CVE-2024-13303 Download All Files - Critical - Access bypass - SA-CONTRIB-2024-069

Missing Authorization vulnerability in Drupal Download All Files allows Forceful Browsing.This issue affects Download All Files: from 0.0.0 before 2.0.2...