CVE-2018-5725

CVE-2018-5725 affects MASTER IPCAMERA01 (firmware 3.3.4.2103). It enables unauthenticated configuration changes, demonstrated by changing the webserver port in the thttpd-based web interface. No official patch details are provided in the connected documents. Remediation status not specified; moni...

Moderate: Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.3 R5 security and bug fix update

An update is now available for Red Hat JBoss Fuse and Red Hat JBoss A-MQ. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

SUSE-SU-2017:0715-1 Security update for jsch

This update for jsch to version 0.1.54 fixes the following issues: Security issues fixed: - CVE-2016-5725: recursive sftp get client-side windows path traversal bsc997542. Bugfixes: - sftp-put may send the garbage data in some rare case. - fixed a deadlock bug in KnownHostsgetHostKey. -...

DEBIAN-CVE-2016-5725

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

CVE-2016-5725

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

CVE-2016-5725

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

CVE-2016-5725

CVE-2016-5725 is a directory traversal flaw in JSch (JSch-JCraft) before 0.1.54 on Windows when using ChannelSftp.OVERWRITE. An attacker could cause a remote SFTP server to write arbitrary files via ..\ in a response to a recursive GET. Connected IBM advisories note related fixes/upgrades (e.g., ...

Updated jsch packages fix security vulnerability

It was discovered that there was a path traversal vulnerability in jsch CVE-2016-5725...

CVE-2016-5725

creationtimestamp| type| source ---|---|--- 2016-09-21 20:06:17+00:00| published-proof-of-concept| https://t.me/FullDisclosure/81 2016-09-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40411...

CVE-2014-5725

CVE-2014-5725 affects the Android app Truecaller (com.truecaller) at version 4.32, where SSL/TLS certificates from servers are not verified. This allows a man-in-the-middle to spoof servers and access sensitive data via a crafted certificate, impacting confidentiality and integrity as described i...

Byword 2.x File Overwrite Vulnerability

The Metaclassy Byword app 2.x before 2.1 for iOS does not require confirmation of Replace file actions, which allows remote attackers to overwrite arbitrary files via the name and text parameters in a byword://replace URL. Affected Vendor: http://metaclassy.com/ - Affected Software: Byword for iO...

Byword 2.x File Overwrite

Affected Vendor: http://metaclassy.com/ - Affected Software: Byword for iOS - Affected Version: 2.x prior to 2.1 - Issue Type: Lack of validation/user confirmation leading to destruction of data - Release Date: 29 Sept 2013 - Discovered by: Guillaume Ross - CVE Identifier: CVE-2013-5725 - Issue...

SuSE 10 Security Update : Recommended update for Linux Kernel (x86) (ZYPP Patch Number 5725)

This update fixes lots of bugs in the SUSE Linux Enterprise 10 Service Pack 2 kernel. No security fixes are contained in this round. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CVE-2008-5725

The CVE affects the NT kernel-mode driver pstrip.sys (versions 5.0.1.1 and earlier) used by EnTech Taiwan PowerStrip (3.84 and earlier). The vulnerability arises from certain IRP parameters in an IOCTL sent to \Device\Powerstrip1, which can overwrite portions of memory and enable local privilege ...

CVE-2007-5725

CVE-2007-5725: Multiple cross-site scripting (XSS) vulnerabilities in Smart-Shop allow remote attackers to inject arbitrary web script or HTML via (1) the email parameter to index.php or (2) the command parameter to index.php in the default home page action, (3) a currencies action, or (4) a bask...