CVE-2023-34007

Unrestricted Upload of File with Dangerous Type vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.8.3...

Unrestricted file upload

Unrestricted Upload of File with Dangerous Type vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.8.3...

CVE-2023-34007 WordPress Download Monitor Plugin <= 4.8.3 is vulnerable to Arbitrary File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.8.3...

CVE-2023-34007

The CVE-2023-34007 entry concerns the WPChill WordPress Download Monitor plugin. Affected software is WordPress Download Monitor plugin versions

WordPress Plugin Download Monitor Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

The ICA file will be downloaded when launching resources in browser

The ICA file may be downloaded when launching the resource from a browser...

OneDrive backup job fails with "Download request retry timeout exceeded"

Challenge During a OneDrive backup, the following error may occur while downloading a OneNote file .one: Failed to backup item: %path%, Download request retry timeout exceeded. This error will only be displayed when using one of the following versions of Veeam Backup for Microsoft 365: v7 P202312...

CVE-2023-6930

EuroTel ETL3100 versions v01c01 and v01x37 suffer from an unauthenticated configuration and log download vulnerability. This enables the attacker to disclose sensitive information and assist in authentication bypass, privilege escalation, and full system access...

CVE-2023-6930

EuroTel ETL3100 versions v01c01 and v01x37 suffer from an unauthenticated configuration and log download vulnerability. This enables the attacker to disclose sensitive information and assist in authentication bypass, privilege escalation, and full system access...

Authentication flaw

EuroTel ETL3100 versions v01c01 and v01x37 suffer from an unauthenticated configuration and log download vulnerability. This enables the attacker to disclose sensitive information and assist in authentication bypass, privilege escalation, and full system access...

CVE-2023-6930

CVE-2023-6930 concerns EuroTel ETL3100 variants v01c01/v01x37, affected by an unauthenticated configuration and log download vulnerability (Insecure Access/Improper Access Control). The root cause is unauthenticated access to configuration and logs, enabling an attacker to disclose sensitive info...

CVE-2023-6940

with only one user interactiondownload a malicious config, attackers can gain full command execution on the victim system...

CVE-2023-6940 Command Injection

with only one user interactiondownload a malicious config, attackers can gain full command execution on the victim system...

PT-2023-8177 · Eurotel · Eurotel Etl3100

Name of the Vulnerable Software and Affected Versions: EuroTel ETL3100 versions v01c01 and v01x37 Description: The issue is related to an unauthenticated configuration and log download vulnerability. This vulnerability enables an attacker to disclose sensitive information, which can assist in...

KLA62519 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. Security vulnerability in Symlinks...

Design/Logic Flaw

Bazarr manages and downloads subtitles. Prior to 1.3.1, Bazarr contains an arbitrary file read in /system/backup/download/ endpoint in bazarr/app/ui.py does not validate the user-controlled filename variable and uses it in the sendfile function, which leads to an arbitrary file read on the system...

CVE-2023-50265 Bazarr Arbitrary file read in /api/swaggerui/static endpoint

Bazarr manages and downloads subtitles. Prior to 1.3.1, the /api/swaggerui/static endpoint in bazarr/app/ui.py does not validate the user-controlled filename variable and uses it in the sendfile function, which leads to an arbitrary file read on the system. This issue is fixed in version 1.3.1...

CVE-2023-50264

CVE-2023-50264 affects Bazarr prior to v1.3.1, where the /system/backup/download/ endpoint in bazarr/app/ui.py reads a user-controlled filename without validation and passes it to send_file, enabling arbitrary file read on the system. The issue is confirmed by multiple sources and is fixed in ver...

CVE-2023-50264 Bazarr Arbitrary file read in /system/backup/download/ endpoint

Bazarr manages and downloads subtitles. Prior to 1.3.1, Bazarr contains an arbitrary file read in /system/backup/download/ endpoint in bazarr/app/ui.py does not validate the user-controlled filename variable and uses it in the sendfile function, which leads to an arbitrary file read on the system...

CVE-2023-48389

Multisuns EasyLog web+ has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...