Arbitrary File Write via Archive Extraction (Zip Slip)

Overview calipso is a Calipso is a simple NodeJS content management system based on Express, Connect & Mongoose. Affected versions of this package are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip. It is possible for a malicious module to overwrite files on an arbitrary file...

Arbitrary File Write

apport:devel is vulnerable to arbitrary file write. It is possible because of a flaw in processreport...

CVE-2020-36008

OBottle 2.0 in \c\t.php contains an arbitrary file write vulnerability...

CVE-2020-36008

OBottle 2.0 in \c\t.php contains an arbitrary file write vulnerability...

CVE-2020-36008

OBottle 2.0 is affected by an arbitrary file write vulnerability in ct.php (CVE-2020-36008). The connected records confirm the vulnerability exists in OBottle 2.0 and describe an arbitrary file write in ct.php, but do not provide root-cause details, affected version ranges beyond 2.0, exploit sta...

CVE-2020-36008

OBottle 2.0 in \c\t.php contains an arbitrary file write vulnerability...

PT-2021-11904

Name of the Vulnerable Software and Affected Versions: OBottle version 2.0 Description: The issue is related to an arbitrary file write vulnerability in the ct.php file of OBottle. Recommendations: For OBottle version 2.0, consider restricting access to the ct.php file until a patch is available...

CVE-2020-36008: Undefined Security Weakness

OBottle 2.0 in \c\t.php contains an arbitrary file write vulnerability...

OBottle 安全漏洞

OBottle is a lighter, database-free blog. An arbitrary file write vulnerability exists in ct.php in OBottle version 2.0. No details of the vulnerability are provided at this time...

Synology Docker Path Traversal Vulnerability

Docker is an open source application container engine. It supports creating a container lightweight virtual machine and deploying and running applications on a Linux system, as well as automating the installation, deployment, and upgrading of applications through configuration files. A path...

CVE-2021-29091: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to write arbitrary files via unspecified vectors...

Exploit for Argument Injection in Dragonfly_Project Dragonfly

CVE-2021-33564 PoC Exploit script for CVE-2021-33564 Argument...

ytnef 路径遍历漏洞

ytnef is a TNEF Transport Neutral Encapsulation Format stream reader for winmail.dat files. YTNEF suffers from a security vulnerability that stems from. An attacker could use a crafted email to cause these applications to write data to an arbitrary location on the file system, crash, or execute...

Exploit for Argument Injection in Dragonfly_Project Dragonfly

CVE-2021-33564 PoC Exploit script for CVE-2021-33564 Argument...

CVE-2020-9452: Improper Link Resolution Before File Access

An issue was discovered in Acronis True Image 2020 24.5.22510. antiransomwareservice.exe includes functionality to quarantine files by copying a suspected ransomware file from one directory to another using SYSTEM privileges. Because unprivileged users have write permissions in the quarantine...

Plone Arbitrary File Write Vulnerability

Plone is an open source content management system CMS built on the Zope application server. An arbitrary file write vulnerability exists in Plone 5.2.4 and earlier versions. A remote attacker can exploit this vulnerability to perform disk I/O via specially crafted keyword arguments converted by...

Plone 安全漏洞

Plone is an open source content management system CMS built on the Zope application server. An arbitrary file write vulnerability exists in Plone 5.2.4 and earlier versions. A remote attacker can exploit this vulnerability to perform disk I/O via specially crafted keyword arguments converted by...

Microsoft Exchange 2019 - Unauthenticated Email Download Exploit

Exploit Title: Microsoft Exchange 2019 - Unauthenticated Email Download Metasploit Exploit Author: RAMELLA Sébastien Vendor Homepage: https://microsoft.com Version: This vulnerability affects Exchange 2013 Versions 'Microsoft Exchange ProxyLogon Collector', 'Description' = %q This module scan for...

Vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are caused by privilege management errors, allowing attackers to write arbitrary files to the device’s file system.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are due to privilege management errors. Exploiting these vulnerabilities can allow an attacker to remotely write arbitrary files...

Cisco 多款产品安全漏洞

Cisco Prime Infrastructure is a software application from Cisco USA. It is used to simplify the management of wireless and wired networks. A security vulnerability exists in several Cisco products, which can be exploited by an attacker to identify directories and write arbitrary files to the file...