CVE-2023-30639

Archer Platform is affected by a stored XSS vulnerability (CVE-2023-30639) in versions 6.8 through 6.12 P6 before HF1 (6.12.0.6.1). A remote authenticated Archer user could store malicious HTML/JavaScript in a trusted data store, which would be executed by other users’ browsers in the context of ...

HYPR 安全漏洞

HYPR is a security application that implements passwordless security from HYPR, Inc. A security vulnerability exists in HYPR Workforce Access versions 6.12 through prior to 8.1, which stems from an issue with misassigned permissions for critical resources...

Satellite 6.12 Release

An update is available for libdb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Rocky Enterprise Software Foundation Satellite is a systems management tool for...

GHSA-FF4W-8CHR-W2X9 SiteServer CMS RCE via unsafe file upload

A issue was discovered in SiteServer CMS prior to version 6.12. It allows remote attackers to execute arbitrary code because an administrator can add the permitted file extension .aassp, which is converted to .asp because the "as" substring is deleted...

Arbitrary File Upload

Overview Affected versions of this package are vulnerable to Arbitrary File Upload which allows an administrator to trigger remote code execution. Exploiting this vulnerability is possible by using file extension .aassp which is converted to .asp because the "as" substring is deleted. Remediation...

RARLAB UnRAR Directory Traversal Vulnerability

UnRAR is a command that decompresses files with an rar suffix.RARLAB A directory traversal vulnerability exists in versions of UnRAR prior to 6.12. The vulnerability stems from a lack of validity checks on paths when processing directory requests, and can be exploited by attackers to write files...

CVE-2022-30333

RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract aka unpack operation, as demonstrated by creating a /.ssh/authorizedkeys file. NOTE: WinRAR and Android RAR are unaffected...

UnRAR 路径遍历漏洞

UnRAR is a command that decompresses files with an rar suffix.RARLAB A directory traversal vulnerability exists in versions of UnRAR prior to 6.12. The vulnerability stems from a lack of validity checks on paths when processing directory requests, and can be exploited by attackers to write files...

PT-2022-2560

Name of the Vulnerable Software and Affected Versions UnRAR versions prior to 6.12 Description The issue allows directory traversal to write to files during an extract operation, as demonstrated by creating a /.ssh/authorized keys file. This can be exploited by remote attackers to execute arbitra...

Rapid7 AppSpider 6.12 - Local Privilege Escalation

Rapid7 AppSpider 6.12 - Local Privilege Escalation Rapid7 AppSpider 6.12 Web Application Vulnerability Scanner Elevation Of Privilege Vendor: Rapid7, Inc. Product web page: https://www.rapid7.com Affected version: 6.12.10.1 Summary: While today's malicious attackers pursue a variety of goals,...

Rapid7 AppSpider 6.12 Web Application Vulnerability Scanner Elevation Of Privilege

Summary While today's malicious attackers pursue a variety of goals, they share a preferred channel of attack - the millions of custom web, mobile, and cloud applications companies deploy to serve their customers. AppSpider dynamically scans these applications for vulnerabilities across all moder...

HP (OpenView Storage) Data Protector Media Management Daemon DoS Vulnerability

HP OpenView Storage Data Protector Manager is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

[Full-disclosure] Drupal 6.12 (core) User Module XSS Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Details of this disclosure have been posted at http://lampsecurity.org/drupal-role-xss-vulnerability Vendor Notified: 05/19/09 Vendor Response: Drupal security team responds that this vulnerability has been publicly disclosed since October 2, 2008 and...

Drupal 6.12 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Details of this disclosure have been posted at http://lampsecurity.org/drupal-role-xss-vulnerability Vendor Notified: 05/19/09 Vendor Response: Drupal security team responds that this vulnerability has been publicly disclosed since October 2, 2008 and...

CVE-2003-1508

CVE-2003-1508 affects mIRC 6.12. A buffer overflow occurs in the DCC get dialog: if the window is minimized and a long filename is opened, it may crash the application, enabling a remote denial-of-service. The available sources (NVD, CVE List) reiterate the same description without providing expl...

(Fw) : mIRC 6.12 (latest) DCC Exploit

this news was found on irchelp, DCC Exploit Affecting mIRC 6.12 : another exploit was identified which can crash even the recently released version 6.12. It only seems to affect people who minimize DCC get dialog windows manually or by default, and then open those windows to get a file with an...

[NT] mIRC Unspecified DCC Request Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...