EUVD-2025-18867

Malicious code in bioql PyPI...

Bluebird 安全漏洞

Bluebird is an application from Bluebird South Korea that is used to lock a device into a dedicated mode, restricting a user's access to only specified features or applications. A security vulnerability exists in Bluebird version 1.4.4, which stems from the File Manager application exposing an...

Exploit for Link Following in Microsoft

Diffing cleanmgr.exe The new version of cleanmgr.exe inclu...

CVE-2022-30264

The Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem operations. They utilize the ROC protocol 4000/TCP, 5000/TCP for communications between a master terminal and RTUs. Opcode 203 of this protocol allows a master terminal to transfer files to and from the...

SecureAge Security Suite 安全漏洞

SecureAge Security Suite is a data-centric security solution from SecureAge. A security vulnerability exists in SecureAge Security Suite that stems from the presence of an elevation of privilege that allows arbitrary file creation, modification, and deletion. The following versions are affected:...

Hitachi JP1/Extensible SNMP Agent Security Vulnerability

Hitachi JP1/Extensible SNMP Agent is an agent program from Hitachi, Ltd Hitachi, Japan. A security vulnerability exists in Hitachi JP1/Extensible SNMP Agent that stems from incorrect default permissions and allows attackers to perform arbitrary file operations...

CVE-2023-32167

D-Link D-View uploadMib Directory Traversal Arbitrary File Creation or Deletion Vulnerability. This vulnerability allows remote attackers to create and delete arbitrary files on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability. The specific flaw...

The vulnerability of Websoft HCM’s automation software for HR processes lies in its ability to bypass a relative path, allowing attackers to perform arbitrary file operations outside of the directory.

The vulnerability of Websoft HCM’s automation software for HR processes involves exploiting a relative path. Exploiting this vulnerability allows an attacker to perform arbitrary file operations outside the directory...

PT-2023-8459 · Websoft · Websoft Hcm

Name of the Vulnerable Software and Affected Versions: Websoft HCM affected versions not specified Description: The issue is related to a path traversal vulnerability in the Websoft HCM software, which can be exploited by a remote attacker to perform arbitrary file operations outside the intended...

CVE-2022-30264

The Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem operations. They utilize the ROC protocol 4000/TCP, 5000/TCP for communications between a master terminal and RTUs. Opcode 203 of this protocol allows a master terminal to transfer files to and from the...

CVE-2018-20924

cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads SEC-378...

Design/Logic Flaw

The locale feature in cgi-bin/luci on TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allows remote authenticated users to test for the existence of arbitrary files by making an operation=write;locale=%0d request, and then making an operation=read request with a crafted Accept-Language HTTP heade...

Ubuntu 14.04 LTS : Exim vulnerabilities (USN-2933-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2933-1 advisory. It was discovered that Exim incorrectly filtered environment variables when used with the perlstartup configuration option. If the perlstartup option was...

WebSVN 2.0 - Cross-Site Scripting File Handling Code Execution

WebSVN 2.0 - Cross-Site Scripting File Handling Code Execution WebSVN alertdocument.cookie; A url like the one above would display a JavaScript alert window containing the cookie data of any set cookies for the domain. File Handling Issues: There are some file handling issues in the RSS...