4142 matches found
Path traversal
Multiple relative path traversal vulnerabilities CWE-23 in FortiDeceptor management interface 1.0.0 through 3.2.x, 3.3.0 through 3.3.2, 4.0.0 through 4.0.1 may allow a remote and authenticated attacker to retrieve and delete arbitrary files from the underlying filesystem via specially crafted web...
CVE-2021-41031
A relative path traversal vulnerability CWE-23 in FortiClient for Windows versions 7.0.2 and prior, 6.4.6 and prior and 6.2.9 and below may allow a local unprivileged attacker to escalate their privileges to SYSTEM via the named pipe responsible for FortiESNAC service...
Path traversal
A relative path traversal vulnerability CWE-23 in FortiClient for Windows versions 7.0.2 and prior, 6.4.6 and prior and 6.2.9 and below may allow a local unprivileged attacker to escalate their privileges to SYSTEM via the named pipe responsible for FortiESNAC service...
CVE-2022-30302
FortiDeceptor management interface (versions 1.0.0–3.2.x, 3.3.0–3.3.2, 4.0.0–4.0.1) is affected by CVE-2022-30302 due to a path traversal issue (input validation) that could allow a remote, authenticated attacker to retrieve and delete arbitrary files on the underlying filesystem via specially cr...
CVE-2021-41031
A relative path traversal vulnerability CWE-23 in FortiClient for Windows versions 7.0.2 and prior, 6.4.6 and prior and 6.2.9 and below may allow a local unprivileged attacker to escalate their privileges to SYSTEM via the named pipe responsible for FortiESNAC service...
CVE-2021-41031
CVE-2021-41031 concerns FortiClient for Windows (versions 7.0.2 and prior, 6.4.6 and prior, 6.2.9 and below). A relative path traversal via the FortiESNAC service named pipe allows a local unprivileged attacker to escalate to SYSTEM. Connected sources (Fortinet FG-IR-21-190, Red Hat advisory, NVD...
CVE-2022-31157
creationtimestamp| type| source ---|---|--- 2022-07-15 22:20:33+00:00| seen| https://t.me/cibsecurity/46369 2025-04-23 18:05:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13092...
Insecure password leads to Mangatoon data breach
The hugely popular Manga comics platform Mangatoon has fallen victim to a data breach. No fewer than 23 million user accounts could be at risk, thanks to a poorly secured database. Worse still, Mangatoon doesnt seem to be responding to messages from the breacher, or people notifying it that the...
FortiClient (Windows) - Privilege Escalation via directory traversal attack
A relative path traversal vulnerability CWE-23 in FortiClient for Windows may allow a local unprivileged attacker to escalate their privileges to SYSTEM via the named pipe responsible for FortiESNAC service...
CVE-2022-33037
creationtimestamp| type| source ---|---|--- 2022-06-29 17:23:25+00:00| seen| https://t.me/cibsecurity/45358...
SUSE SLES12 Security Update : kernel (Live Patch 23 for SLE 12 SP4) (SUSE-SU-2022:2217-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2022:2217-1 advisory. - A flaw in Linux Kernel found in nfcmrvlnciunregisterdev in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non...
CVE-2018-4344
creationtimestamp| type| source ---|---|--- 2022-06-24 19:34:31+00:00| seen| https://t.me/truesecator/3099 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:32:31+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971664 2025-02-23 02:10:20+00:00| see...
CVE-2022-26862
creationtimestamp| type| source ---|---|--- 2022-06-23 22:36:00+00:00| seen| Telegram/MyB8WHr2Z5XALvDXWsuWdTY5Z8-D37UeamXvfo-k3NCkgqk...
CVE-2022-34208
creationtimestamp| type| source ---|---|--- 2022-06-23 20:45:52+00:00| seen| https://t.me/cibsecurity/45040...
CVE-2022-32126
creationtimestamp| type| source ---|---|--- 2022-06-23 20:45:50+00:00| seen| https://t.me/cibsecurity/45039...
CVE-2022-34173
creationtimestamp| type| source ---|---|--- 2022-06-23 20:42:53+00:00| seen| https://t.me/cibsecurity/45035...
CVE-2022-33027
creationtimestamp| type| source ---|---|--- 2022-06-23 20:42:49+00:00| seen| https://t.me/cibsecurity/45032...
CVE-2022-34296
creationtimestamp| type| source ---|---|--- 2022-06-23 20:42:48+00:00| seen| https://t.me/cibsecurity/45031...