https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T14:53:32.078934+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-36899 CVE-2020-36899 — QiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File Disclosure 2026-10-07T14:53:32.094488+00:00

Affected: Shenzhen Xingmeng Qihang Media Co., Ltd. Guangzhou Hefeng Automation Technology Co., Ltd. QiHang Media Web Digital Signage

QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated file disclosure vulnerability that allows remote attackers to access sensitive files through unverified 'filename' and 'path' parameters. Attackers can exploit the QH.aspx endpoint to read arbitrary files and directory contents without authentication by manipulating download and getAll actions.