CVE-2020-21480

An arbitrary file write vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2020-21480

An arbitrary file write vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2020-21480

An arbitrary file write vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2020-21480

CVE-2020-21480 affects RGCMS v1.06. The vulnerability is an arbitrary file write that allows an attacker to execute arbitrary code through a crafted PHP file. Impact is stated as high (CVE details mention potential code execution, with CVSSv3.1 vector indicating network access, low complexity, un...

USN-5078-1 squashfs-tools vulnerability

Richard Weinberger discovered that Squashfs-Tools mishandled certain malformed SQUASHFS files. An attacker could use this vulnerability to write arbitrary files to the filesystem...

PT-2021-10626

Name of the Vulnerable Software and Affected Versions: RGCMS version 1.06 Description: An arbitrary file write issue allows attackers to execute arbitrary code via a crafted PHP file. Recommendations: For RGCMS version 1.06, update to a version that fixes this issue to prevent arbitrary code...

CVE-2020-21480: Undefined Security Weakness

An arbitrary file write vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2021-39827

Adobe Digital Editions 4.5.11.187646 and earlier are affected by an arbitrary file write vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability to write an arbitrary file to the system. User interaction is required before product installation ...

Adobe Digital Editions 安全漏洞

Adobe Digital Editions software provides an engaging way to help you view and manage eBooks and other digital publications. Adobe Digital Editions 4.5.11.187646 and earlier versions are vulnerable to an arbitrary file system write vulnerability. The vulnerability stems from the creation of...

PT-2021-5065

Name of the Vulnerable Software and Affected Versions Adobe Digital Editions versions 4.5.11.187646 and earlier Description The issue is related to an arbitrary file write vulnerability in the Digital Editions installer, which could allow an authenticated attacker to write an arbitrary file to th...

Cisco IOS XR Software Arbitrary File Read and Write (cisco-sa-iosxr-scp-inject-QwZOCv2)

According to its self-reported version, Cisco IOS XR is affected by an arbitrary file read and write vulnerability in its SSH server process due to insufficient input validation of user supplied input. An authenticated, remote attacker can exploit this, by specifying specific SCP parameters when...

Cisco IOS XR 参数注入漏洞

Cisco IOS XR Software is an operating system developed by Cisco for its network devices.Cisco IOS XR Software is vulnerable to an arbitrary file read/write vulnerability that could be exploited by attackers to overwrite and read arbitrary files on local devices...

Huawei HarmonyOS 路径遍历漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. Huawei HarmonyOS has a security vulnerability. An attacker could exploit the vulnerability to write any content to any file...

CVE-2021-23427 Arbitrary File Write via Archive Extraction (Zip Slip)

This affects all versions of package elFinder.NetCore. The ExtractAsync function within the FileSystem is vulnerable to arbitrary extraction due to insufficient validation...

CVE-2021-39135

"@npmcli/arborist", the library that calculates dependency trees and manages the nodemodules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and the extraction of package contents will always be performed into the expected...

CVE-2021-39134

"@npmcli/arborist", the library that calculates dependency trees and manages the "nodemodules" folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and the extraction of package contents will always be performed into the expected...

37fis (>=1.0.0, <=1.0.2), 88slot-ap (1.0.0) +950 more potentially affected by CVE-2021-37712 via tar (>=3.0.0, <=4.4.15)

tar NPM version =3.0.0, =1.0.0, =0.1.3, =1.0.1, =1.0.1, =1.0.1, =1.0.0, =1.0.0, =1.1.0 - @adobe/commerce-cif-magento-graphql 1.0.0 and more Source cves: CVE-2021-37712 Source advisory: OSV:GHSA-QQ89-HQ3F-393P...

USN-5057-1 squashfs-tools vulnerability

Etienne Stalmans discovered that Squashfs-Tools mishandled certain malformed SQUASHFS files. An attacker could use this vulnerability to write arbitrary files to the filesystem...

Umbraco CMS 8.9.1 - Path traversal and Arbitrary File Write (Authenticated) Exploit

Exploit Title: Umbraco CMS 8.9.1 - Path traversal and Arbitrary File Write Authenticated Exploit Author: BitTheByte Description: Authenticated path traversal vulnerability. Exploit Research: https://www.tenable.com/security/research/tra-2020-59 Vendor Homepage: https://umbraco.com/ Version:...

Umbraco CMS 8.9.1 Traversal / Arbitrary File Write

Exploit Title: Umbraco CMS 8.9.1 - Path traversal and Arbitrary File Write Authenticated Exploit Author: BitTheByte Description: Authenticated path traversal vulnerability. Exploit Research: https://www.tenable.com/security/research/tra-2020-59 Vendor Homepage: https://umbraco.com/ Version:...