225 matches found
About the security content of macOS Big Sur 11.7.1
About the security content of macOS Big Sur 11.7.1 This document describes the security content of macOS Big Sur 11.7.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
PT-2022-20040 · Cms8000 · Cms8000
Name of the Vulnerable Software and Affected Versions: CMS8000 affected versions not specified Description: The CMS8000 device does not properly control or sanitize the SSID name of a new Wi-Fi access point. A threat actor could create an SSID with a malicious name, including non-standard...
Logic Flaw Vulnerability in Damon Database Management System (DM8)
Damon database management system DM8 is a new generation of large-scale general-purpose relational database. A logic flaw exists in DM8, which can be exploited by an attacker to write arbitrary files...
GO-2022-0346 Path traversal in github.com/quay/claircore
A maliciously crafted RPM file can cause the Scanner.Scan function to write files with arbitrary contents to arbitrary locations on the local filestem...
Jenkins Pipeline Plugin Arbitrary File Writing Vulnerability
Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application software.Jenkins Pipeline Plugin...
Jenkins Plugin Pipeline 路径遍历漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application software.Jenkins Pipeline Plugin...
Avast Premium Security Arbitrary File Writing Vulnerability
Avast Premium Security is an application from the Czech company Avast. Avast Premium Security has an arbitrary file writing vulnerability that can be exploited to cause a denial of service DoS via a specially crafted DLL file...
CVE-2022-22995
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code...
Avast Premium Security 代码问题漏洞
Avast Premium Security is an application from the Czech company Avast. Avast Premium Security has an arbitrary file writing vulnerability that can be exploited to cause a denial of service DoS via a specially crafted DLL file...
CVE-2022-22995
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code...
PT-2022-15765 · Afp +5 · Afp +5
Name of the Vulnerable Software and Affected Versions: SMB and AFP affected versions not specified Description: The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting this combination of primitives, an attacker can...
CVE-2022-22995
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code...
Delta Electronics DIAEnergie路径遍历漏洞
Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.A path traversal...
Luocms arbitrary file writing vulnerability
Luocms v2.0 is an article management system. Luocms v2.0 is vulnerable to an arbitrary file-writing vulnerability that results from insufficient validation of filecontent submissions and filenamede filenames, which can be exploited to write arbitrary shell files via /admin/templates/templatemanag...
CVE-2022-26520
In pgjdbc before 42.3.3, an attacker who controls the jdbc URL or properties can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection properties. An example situation is that an attacker could create an executable JSP file under a Tomcat...
CVE-2021-23521
This affects the package juce-framework/JUCE before 6.1.5. This vulnerability is triggered when a malicious archive is crafted with an entry containing a symbolic link. When extracted, the symbolic link is followed outside of the target dir allowing writing arbitrary files on the target host. In...
Design/Logic Flaw
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files...
Cobbler Arbitrary File Writing Vulnerability
Cobbler is a network installation server suite, which is mainly used to quickly set up Linux network installation environment.Cobbler in versions prior to 3.3.0 there is an arbitrary file writing vulnerability, the vulnerability originates from the system does not do effective filtering of user...
Microsoft Exchange ProxyShell Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'winrm' class MetasploitModule 'Microsoft Exchange ProxyShell RCE', 'Description' = %q This module exploit a vulnerability on Microsoft Exchange Server that allo...