CVE-2023-6407

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause arbitrary file deletion upon service restart when accessed by a local and low-privileged attacker...

CVE-2023-44251

UNSUPPORTED WHEN ASSIGNED A improper limitation of a pathname to a restricted directory 'path traversal' vulnerability CWE-22 in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1. through 5.1.2 may allow an authenticated attacker to read and delete arbitrary file of the system via...

Path traversal

UNSUPPORTED WHEN ASSIGNED A improper limitation of a pathname to a restricted directory 'path traversal' vulnerability CWE-22 in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1. through 5.1.2 may allow an authenticated attacker to read and delete arbitrary file of the system via...

CVE-2023-44251

FortiWAN path traversal vulnerability (CVE-2023-44251) affects Fortinet FortiWAN versions 5.1.1–5.1.2 and 5.2.0–5.2.1. The issue is an improper limitation of a pathname to a restricted directory, enabling an authenticated attacker to read and delete arbitrary files via crafted HTTP/HTTPS requests...

CVE-2023-44251

UNSUPPORTED WHEN ASSIGNED A improper limitation of a pathname to a restricted directory 'path traversal' vulnerability CWE-22 in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1. through 5.1.2 may allow an authenticated attacker to read and delete arbitrary file of the system via...

PT-2023-30508 · Relyum · Rely-Pcie

Name of the Vulnerable Software and Affected Versions: Relyum RELY-PCIe version 22.2.1 Description: An issue was discovered in the Relyum RELY-PCIe device, where the authorization mechanism is not enforced in the web interface. This allows a low-privileged user to execute administrative functions...

CVE-2023-32841

creationtimestamp| type| source ---|---|--- 2023-12-11 18:30:06+00:00| published-proof-of-concept| https://t.me/truesecator/5188 2023-12-22 09:51:45+00:00| seen| https://t.me/ctinow/158283...

CVE-2023-32846

creationtimestamp| type| source ---|---|--- 2023-12-11 18:30:06+00:00| published-proof-of-concept| https://t.me/truesecator/5188 2023-12-22 10:21:57+00:00| seen| https://t.me/ctinow/158292...

About the security content of Safari 17.2

About the security content of Safari 17.2 This document describes the security content of Safari 17.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

JVN#46895889: RakRak Document Plus vulnerable to path traversal

RakRak Document Plus provided by Sumitomo Electric Information Systems Co., Ltd. contains a path traversal vulnerability CWE-22. Impact Arbitrary files on the server may be obtained or deleted by a user of the product with specific privileges. Solution Update the Software Update the software to t...

CVE-2023-49093

creationtimestamp| type| source ---|---|--- 2023-12-03 09:26:42+00:00| published-proof-of-concept| https://github.com/HtmlUnit/htmlunit/security/advisories/GHSA-37vq-hr2f-g7h7 2023-12-22 09:51:44+00:00| seen| https://t.me/ctinow/158282 2024-02-09 02:51:50+00:00| seen| https://t.me/ctinow/181774...

CISA Removes One Known Exploited Vulnerability From Catalog

CISA is continually collaborating with partners across government and the private sector. As a result of this collaboration, CISA has concluded that there is insufficient evidence to keep the following CVE in the catalog and has removed it: CVE-2022-28958 DIR-816L Remote Code Execution...

CVE-2023-40454

creationtimestamp| type| source ---|---|--- 2023-11-22 16:25:26+00:00| seen| https://t.me/arpsyndicate/355...

javierortiz.net Cross Site Scripting vulnerability OBB-3790562

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-40409

creationtimestamp| type| source ---|---|--- 2023-11-22 11:10:10+00:00| seen| https://t.me/arpsyndicate/346...

melpublisher.com Cross Site Scripting vulnerability OBB-3790364

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2019-2890

creationtimestamp| type| source ---|---|--- 2023-11-17 09:22:11+00:00| seen| https://t.me/arpsyndicate/247 2024-01-09 15:46:59+00:00| seen| https://t.me/ctinow/165075...

VMware Cloud Director Authentication Bypass (VMSA-2023-0026)

VMware Cloud Director Appliance contains an authentication bypass vulnerability in case VMware Cloud Director Appliance was upgraded to 10.5 from an older version. On an upgraded version of VMware Cloud Director Appliance 10.5, a malicious actor with network access to the appliance can bypass log...

CVE-2019-2997

creationtimestamp| type| source ---|---|--- 2023-11-15 16:53:22+00:00| seen| https://t.me/BABATATASASA/5989 2024-01-15 10:06:42+00:00| seen| https://t.me/ctinow/168236...

CVE-2023-6032

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause a file system enumeration and file download when an attacker navigates to the Network Management Card via HTTPS...