CVE-2016-10710

Biscom Secure File Transfer (SFT) 5.0.1000 through 5.0.1048 does not validate the dataFieldId value, and uses sequential numbers, which allows remote authenticated users to overwrite or read files via crafted requests. Version 5.0.1050 contains the fix.

• CWE-20

• http://threat.tevora.com/biscom-secure-file-transfer-arbitrary-file-download/Exploit, Technical Description, Third Party Advisory
• http://threat.tevora.com/biscom-secure-file-transfer-arbitrary-file-download/Exploit, Technical Description, Third Party Advisory

Published

Jan 25, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-10705The Jetpack plugin before 4.0.4 for WordPress has XSS via th…
• CVE-2016-10706The Jetpack plugin before 4.0.3 for WordPress has XSS via a …
• CVE-2016-10707jQuery 3.0.0-rc.1 is vulnerable to Denial of Service (DoS) d…7.5
• CVE-2016-10708sshd in OpenSSH before 7.4 allows remote attackers to cause …7.5
• CVE-2016-10709pfSense before 2.3 allows remote authenticated users to exec…
• CVE-2016-1071Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat…
• CVE-2016-10711Apsis Pound before 2.8a allows request smuggling via crafted…
• CVE-2016-10712In PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.…
• CVE-2016-10713An issue was discovered in GNU patch before 2.7.6. Out-of-bo…
• CVE-2016-10714In zsh before 5.3, an off-by-one error resulted in undersize…
• CVE-2016-10715The Artezio Kanban Board plugin 1.4 revision 1914 for Atlass…
• CVE-2016-10716The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Ji…