CVE-2024-30851-jasmin-ransomware-path-traversal-poc

Jasmin ransomware web panel path traversal PoC EducationalPurposes https://github.com/codesiddhant/Jasmin-Ransomware I discovered a pre-auth path traversal vulnerability in the Jasmin Ransomware web panel CVE-2024-30851, allowing an attacker to deanonymize panel operators and dump decryption keys...

CVE-2026-7879: Missing Authorization

In Concrete CMS 9.5.0 and below, the submitpassword method in concrete/controllers/singlepage/downloadfile.php allows unauthorized file access since downloading permission-restricted files bypasses the viewfile permission check. Files without passwords can be downloaded and any user who knows a...

CVE-2024-30851

Directory Traversal vulnerability in codesiddhant Jasmin Ransomware v.1.0.1 allows an attacker to obtain sensitive information via the downloadfile.php component...

CVE-2024-30851: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in codesiddhant Jasmin Ransomware v.1.0.1 allows an attacker to obtain sensitive information via the downloadfile.php component...

CVE-2019-15314

tiki/tiki-uploadfile.php in Tiki 18.4 allows remote attackers to upload JavaScript code that is executed upon visiting a tiki/tiki-downloadfile.php?display&fileId= URI...

CVE-2019-15314: Improper Neutralization of Input During Web Page Generation

tiki/tiki-uploadfile.php in Tiki 18.4 allows remote attackers to upload JavaScript code that is executed upon visiting a tiki/tiki-downloadfile.php?display&fileId= URI...

LifeSize Room 5.0.9 - Multiple Vulnerabilities

LifeSize Room 5.0.9 - Multiple Vulnerabilities Source: https://github.com/XiphosResearch/exploits/tree/master/deathsize LifeSize Room 5.0.9, remote config disclosure, code execution & local privilege escalation Ultimately the Lifesize Room products have fundamentally flawed firmware, many similar...

Cross site scripting

Cross-site scripting XSS vulnerability in singlepages\downloadfile.php in concrete5 before 5.6.3 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header to index.php/downloadfile...

CVE-2014-5108

Cross-site scripting XSS vulnerability in singlepages\downloadfile.php in concrete5 before 5.6.3 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header to index.php/downloadfile...

CVE-2014-5108: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in singlepages\downloadfile.php in concrete5 before 5.6.3 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header to index.php/downloadfile...

Portal Web Services CRLF Injection / XSS

Exploit Title: Portal Web Services Cms CRLF injection + Cross Site Scripting Vulnerability + Exploit Author: Ashiyane Digital Security Team + Home : www.Ashiyane.org + Vendor Homepage: www.portalwebservices.com + Tested on: Windows 7 + Dork: intext:"Powered By : Portal Web Services"...

CVE-2008-6420: Exposure of Sensitive Information to an Unauthorized Actor

Social Site Generator SSG 2.0 allows remote attackers to read arbitrary files via the file parameter to 1 filedload.php, 2 webadmin/download.php, and 3 webadmin/downloadfile.php...

Directory traversal

Directory traversal vulnerability in downloadfile.php in PHP-Daily allows remote attackers to read arbitrary local files via a .. dot dot in the fichier parameter...

CVE-2008-4758: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in downloadfile.php in PHP-Daily allows remote attackers to read arbitrary local files via a .. dot dot in the fichier parameter...

CVE-2008-4758

Technical details of CVE-2008-4758 are not publicly provided in the connected documents. No explicit affected product/version, root cause, or remediation is available here; monitor for updates.

CVE-2007-6400: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in downloadfile.php in PolDoc CMS aka PDDMS 0.96 allows remote attackers to read arbitrary files via a .. dot dot or absolute pathname in the filename parameter...

PolDoc CMS 0.96 (download_file.php) File Disclosure Vulnerability

No description provided by source. PolDoc CMS 0.96 downloadfile.php filename Remote File Disclosure Vulnerability D . Script : http://sourceforge.net/project/showfiles.php?groupid=100272 POC : /downloadfile.php?filename=../../../../../../../../etc/passwd milw0rm.com 2007-12-08...

poldoccms-disclose.txt

PolDoc CMS 0.96 downloadfile.php filename Remote File Disclosure Vulnerability D . Script : http://sourceforge.net/project/showfiles.php?groupid=100272 POC : /downloadfile.php?filename=../../../../../../../../etc/passwd...

PolDoc CMS 0.96 (download_file.php) File Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================= PolDoc CMS 0.96 downloadfile.php File Disclosure Vulnerability ================================================================= PolDoc CMS 0.96 downloadfile.php filename...

PolDoc CMS 0.96 - download_file.php File Disclosure

PolDoc CMS 0.96 - downloadfile.php File Disclosure PolDoc CMS 0.96 downloadfile.php filename Remote File Disclosure Vulnerability D . Script : http://sourceforge.net/project/showfiles.php?groupid=100272 POC : /downloadfile.php?filename=../../../../../../../../etc/passwd milw0rm.com 2007-12-08...