GHSA-279P-PC38-XX4P JFinal file validation vulnerability

In JFinal cos before 2019-08-13, as used in JFinal 4.4, there is a vulnerability that can bypass the isSafeFile function: one can upload any type of file. For example, a .jsp file may be stored and almost immediately deleted, but this deletion step does not occur for certain exceptions...

CVE-2012-6713

creationtimestamp| type| source ---|---|--- 2019-08-13 20:38:18+00:00| seen| https://t.me/cibsecurity/6105...

CVE-2015-9296

creationtimestamp| type| source ---|---|--- 2019-08-13 20:38:14+00:00| seen| https://t.me/cibsecurity/6100...

CVE-2015-9298

creationtimestamp| type| source ---|---|--- 2019-08-13 20:38:12+00:00| seen| https://t.me/cibsecurity/6098...

CVE-2015-9299

creationtimestamp| type| source ---|---|--- 2019-08-13 20:38:11+00:00| seen| https://t.me/cibsecurity/6097...

CVE-2015-9302

creationtimestamp| type| source ---|---|--- 2019-08-13 20:28:42+00:00| seen| https://t.me/cibsecurity/6094...

TortoiseSVN 1.12.1 Remote Code Execution

Document Title: =============== TortoiseSVN v1.12.1 - Remote Code Execution Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2188 Product:...