VMSA-2023-0018:VMware Aria Operations for Networks updates address multiple vulnerabilities.

Advisory ID: VMSA-2023-0018.1 CVSSv3 Range: 7.2 - 9.8 Issue Date:2023-08-29 Updated On: 2023-08-31 CVEs: CVE-2023-34039, CVE-2023-20890 Synopsis: VMware Aria Operations for Networks updates address multiple vulnerabilities. CVE-2023-34039, CVE-2023-20890 RSS Feed Download PDF Download Text File...

Cisco FXOS Software Arbitrary File Write Vulnerability

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to create a file or overwrite any file on the filesystem of an affected device, including system files. The vulnerability occurs because there is no validation of parameters when a specific CLI command ...

Cisco FXOS Software 安全漏洞

Cisco FXOS Software is a suite of firewall software from Cisco that runs in Cisco security appliances. A security vulnerability exists in Cisco FXOS Software that stems from a failure to validate the parameters of a CLI command, resulting in an arbitrary file write vulnerability. An attacker coul...

SUSE-RU-2023:3370-1 Recommended update for rsync

This update for rsync fixes the following issues: - Update to version 3.2.3 jscSLE-21252, jscPED-3146 - Add support for using --atimes to preserve atime of files in destination sync jscPED-3145 - Remove SuSEfirewall2 service as this was replaced by firewalld which already provides a rsyncd servic...

Arbitrary File Write

github.com/1panel-dev/1panel is vulnerable to Arbitrary File Write. The vulnerability exists in SaveContent function at file.go due to lack of parameter filtering which allows an attacker to perform arbitrary file writes in the system...

CVE-2023-28483: Undefined Security Weakness

An issue was discovered in Tigergraph Enterprise 3.7.0. The GSQL query language provides users with the ability to write data to files on a remote TigerGraph server. The locations that a query is allowed to write to are configurable via the GSQL.FileOutputPolicy configuration setting. GSQL querie...

CVE-2023-39398: Improper Authorization

Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization...

The vulnerability of the Base Internals component in the Google Chrome browser allows a hacker to read and write arbitrary files.

The vulnerability of Google Chrome’s Base Internals component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to read and write arbitrary files using a specially crafted HTML page...

1Panel arbitrary file write vulnerability

Summary An arbitrary file write vulnerability could lead to direct control of the server Details Arbitrary file creation In the api/v1/file.go file, there is a function called SaveContentthat,It recieves JSON data sent by users in the form of a POST request. And the lack of parameter filtering...

GHSA-HF7J-XJ3W-87G4 1Panel arbitrary file write vulnerability

Summary An arbitrary file write vulnerability could lead to direct control of the server Details Arbitrary file creation In the api/v1/file.go file, there is a function called SaveContentthat,It recieves JSON data sent by users in the form of a POST request. And the lack of parameter filtering...

Design/Logic Flaw

1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, an arbitrary file write vulnerability could lead to direct control of the server. In the api/v1/file.go file, there is a function called SaveContentthat,It recieves JSON data sent by users in the...

CVE-2023-39966 1Panel arbitrary file write vulnerability exists in the background

1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, an arbitrary file write vulnerability could lead to direct control of the server. In the api/v1/file.go file, there is a function called SaveContentthat,It recieves JSON data sent by users in the...

CVE-2023-39966

1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, an arbitrary file write vulnerability could lead to direct control of the server. In the "api/v1/file.go" file, there is a function called "SaveContentthat,It "recieves JSON data sent by users in t...

CVE-2023-39966 1Panel arbitrary file write vulnerability exists in the background

1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, an arbitrary file write vulnerability could lead to direct control of the server. In the api/v1/file.go file, there is a function called SaveContentthat,It recieves JSON data sent by users in the...

Missing Authorization

1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, an arbitrary file write vulnerability could lead to direct control of the server. In the api/v1/file.go file, there is a function called SaveContentthat,It recieves JSON data sent by users in the...

CVE-2023-39966: Missing Authorization

1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, an arbitrary file write vulnerability could lead to direct control of the server. In the api/v1/file.go file, there is a function called SaveContentthat,It recieves JSON data sent by users in the...

PT-2023-27178 · 1Panel · 1Panel

Name of the Vulnerable Software and Affected Versions: 1Panel versions 1.4.3 Description: An arbitrary file write vulnerability could lead to direct control of the server. In the api/v1/file.go file, there is a function called SaveContentthat,It that receives JSON data sent by users in the form o...

GHSA-GF46-PRM4-56PC PrestaShop SQL manager vulnerability

Impact Remote code execution through SQL injection and arbitrary file write in back office Patches 1.7.8.10 8.0.5 8.1.1 Found by Truff via yeswehack Workarounds none References none...

PrestaShop SQL manager vulnerability

Impact Remote code execution through SQL injection and arbitrary file write in back office Patches 1.7.8.10 8.0.5 8.1.1 Found by Truff via yeswehack Workarounds none References none...

CVE-2023-37373: Missing Authentication for Critical Function

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.4. The affected applications accept unauthenticated file write messages. An unauthenticated remote attacker could write arbitrary files to the affected application's file system...