CVE-2022-22995

The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code...

CVE-2022-22995

The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code...

Default configuration

The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code...

CVE-2022-22995

The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code...

CVE-2022-22995: Improper Link Resolution Before File Access

The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code...

CVE-2022-22995

The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code...

CVE-2022-22995

The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code...

CVE-2022-22995

Netatalk (Apple Filing Protocol server) is affected by CVE-2022-22995. The vulnerability arises from a flaw in the interaction between SMB and AFP primitives in default configurations, enabling arbitrary file writes and potentially remote code execution. Demonstrations and advisories reference an...

Feds Secretly Ran a Fake Encrypted Chat App and Busted Over 800 Criminals

In an unprecedented sting operation, the U.S. Federal Bureau of Investigation FBI and Australian Federal Police AFP ran an encrypted chat service called ANoM for nearly three years to intercept 27 million messages exchanged between criminal gang members globally. Dubbed Operation Ironside AFP,...

Western Digital MyCloud PR4100 Link Resolution Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Western Digital MyCloud PR4100. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SMB and AFP services. By creating a symbolic link, an attacke...

CVE-2021-3310

Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure by reading local files...

Information disclosure

Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure by reading local files...

CVE-2021-3310

CVE-2021-3310 affects Western Digital My Cloud OS 5 devices prior to firmware 5.10.122. The flaw arises from mishandling Symbolic Link Following on SMB/AFP shares, enabling either local or remote attackers to achieve information disclosure and, per sources, potential code execution by abusing sym...

CVE-2021-3310

Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure by reading local files...

CVE-2021-3310: Improper Link Resolution Before File Access

Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure by reading local files...

PT-2021-2435

Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud OS 5 versions prior to 5.10.122 Description: The issue is related to the mishandling of Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure by reading local files...

About the security content of macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Security Bulletin: IBM i Access for Windows affected by vulnerability CVE-2015-7416.

Summary IBM i Access for Windows is affected by vulnerability CVE-2015-7416. This vulnerability affects the Windows system running the IBM i Access for Windows product. Vulnerability Details CVEID: CVE-2015-7416 DESCRIPTION: IBM i Access for Windows AFP Workbench Viewer contains a vulnerability...

PT-2019-7421

Name of the Vulnerable Software and Affected Versions awesome-filterable-portfolio plugin versions prior to 1.9 Description The issue is related to SQL injection via the cat id parameter in the afp get new category page function. This allows for potential exploitation. No information is provided...

PT-2019-7420

Name of the Vulnerable Software and Affected Versions awesome-filterable-portfolio plugin versions prior to 1.9 Description The issue is related to a SQL injection vulnerability via the item id parameter in the afp get new portfolio item page function. This allows for potential exploitation...