CVE-2023-41044

Graylog exposes a partial path traversal vulnerability in its Support Bundle feature (requires valid Admin credentials). The issue stems from improper input validation in an HTTP API resource, allowing reading or deleting files under sibling directories of the support-bundle directory (data_dir d...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (=5.2.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (=5.1.2) +3 more potentially affected by CVE-2023-41044 via org.graylog2:graylog2-server (>=5.1.0 <=5.1.2)

org.graylog2:graylog2-server MAVEN version =5.1.0, =5.1.0, =5.1.0, =5.1.13 Source cves: CVE-2023-41044 Source advisory: OSV:GHSA-2Q4P-F6GF-MQR5...

CVE-2022-41044

creationtimestamp| type| source ---|---|--- 2022-11-10 00:42:33+00:00| seen| https://t.me/cibsecurity/52753...

CVE-2022-41044

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability...

CVE-2022-41044 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

...

CVE-2022-41044

CVE-2022-41044 is a Windows PPTP Remote Code Execution Vulnerability. The CVE entry describes it as affecting the Windows Point-to-Point Tunneling Protocol and documents a high-severity remote code execution risk with network attack vector. Connected sources reference Windows security updates (KB...