Tyto Sahi pro 7.x/8.x - Local File Inclusion Detection

Tyto Sahi Pro versions through 7.x.x and 8.0.0 are susceptible to a local file inclusion vulnerability in the web reports module which can allow an outside attacker to view contents of sensitive files. !/usr/bin/env python3 -- coding: utf-8 -- """Tyto Sahi Pro versions through 7.""" from...

Catalis CMS360 Security Breach

Catalis CMS360 is a content management system from Catalis, Inc. A security vulnerability exists in Catalis CMS360. An attacker could exploit the vulnerability to view sensitive files by modifying document and other identifiers in URLs...

CVE-2020-14946: Improper Limitation of a Pathname to a Restricted Directory

downloadFile.ashx in the Administrator section of the Surveillance module in Global RADAR BSA Radar 1.6.7234.24750 and earlier allows users to download transaction files. When downloading the files, a user is able to view local files on the web server by manipulating the FileName and FilePath...

PT-2020-19508

Name of the Vulnerable Software and Affected Versions McAfee Advanced Threat Defense ATD versions prior to 4.10.0 Description The issue is related to improper access control, allowing local users to view sensitive files by crafting a specific HTTP request parameter. Recommendations For versions...