evilarc

evilarc 用途 evilarc 允许你创建一个 zip 文件，其中包含在嵌入路径中带有目录遍历字符的文件。大多数商业 zip 程序（如 winzip 等）会阻止解压那些嵌入文件路径含有目录遍历字符的 zip 文件。然而，许多软件开发库并不包含同样的保护机制（例如 Java、PHP 等）。如果某个程序和/或库没有阻止目录遍历字符，那么 evilarc 就可以用来生成 zip 文件，一旦被解压，就会在目标系统上的任意位置放置一个文件。...

CVE-2023-4220-HTB-PermX

Chamilo-LMS-CVE-2023-4220-Exploit 説明 このエクスプロイトは、Chamilo-LMS における無制限ファイルアップロードの脆弱性を実証します。この脆弱性は、以下の場所にある big file upload 機能に影響します： root@kitploit: /main/inc/lib/javascript/bigupload/inc/bigUpload.php 影響を受けるバージョン : Chamilo LMS = v1.11.24 この脆弱性により、任意のファイルを以下の場所にアップロードできます： root@kitploit:...

CVE-2026-7791

CVE-2026-7791 concerns the Skylight Workspace Config Service in Amazon WorkSpaces for Windows prior to version 2.6.2034.0 . A flaw in log rotation privilege management lets a local non-admin authenticated user place arbitrary files in arbitrary locations, bypassing file system permissions and ena...

CVE-2026-39454

SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file access permission settings. A non-administrative user may manipulate and/or place arbitrary files within the installation folder of the product. As a result, arbitrary code may b...

CVE-2025-59485

Incorrect default permissions issue exists in Security Point Windows of MaLion prior to Ver.5.3.4. If this vulnerability is exploited, an arbitrary file could be placed in the specific folder by a user who can log in to the system where the product's Windows client is installed. If the file is a...

CVE-2025-59485

Incorrect default permissions issue exists in Security Point Windows of MaLion prior to Ver.5.3.4. If this vulnerability is exploited, an arbitrary file could be placed in the specific folder by a user who can log in to the system where the product's Windows client is installed. If the file is a...

EUVD-2019-10911

Malware in sbrugna...

EUVD-2020-0121

Malware in sbrugna...

CVE-2022-25511

An issue in the ?filename= argument of the route /DataPackageTable in FreeTAKServer-UI v1.9.8 allows attackers to place arbitrary files anywhere on the system...

CVE-2020-15141

In openapi-python-client before version 0.5.3, there is a path traversal vulnerability. If a user generated a client using a maliciously crafted OpenAPI document, it is possible for generated files to be placed in arbitrary locations on disk...

Toshiba e-STUDIO Security Vulnerability

Toshiba e-STUDIO is a line of high-end office multifunction printers from Toshiba Japan. A security vulnerability exists in Toshiba e-STUDIO that originates from the use of a Web-based management program TopAccess that can place any file in the multifunction device...

CVE-2024-21805

Improper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary file may be placed in the specific folder by a user who can log in to the PC where the product's Windows client is...

CVE-2024-21805

Improper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary file may be placed in the specific folder by a user who can log in to the PC where the product's Windows client is...

CVE-2024-21805

Improper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary file may be placed in the specific folder by a user who can log in to the PC where the product's Windows client is...

CVE-2024-21805

Improper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary file may be placed in the specific folder by a user who can log in to the PC where the product's Windows client is...

CVE-2023-0976

A command Injection Vulnerability in TA for mac-OS prior to version 5.7.9 allows local users to place an arbitrary file into the /Library/Trellix/Agent/bin/ folder. The malicious file is executed by running the TA deployment feature located in the System Tree...

CVE-2022-25511

An issue in the ?filename= argument of the route /DataPackageTable in FreeTAKServer-UI v1.9.8 allows attackers to place arbitrary files anywhere on the system...

Emulex Hba Manager 安全漏洞

Broadcom Emulex Hba Manager is used by Broadcom Corporation to provide powerful adapter configuration and diagnostic capabilities that help improve management efficiency and business agility. A security vulnerability exists in Broadcom Emulex HBA Manager/One Command Manager that stems from a flaw...

CVE-2020-1737

A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function from the winunzip module as the extracted files are not checked if they belong to the destination folder. An attacker could take advantage of this flaw by crafting an archive...

A vulnerability in the tmpreaper software exists due to the simultaneous execution using a shared resource with incorrect synchronization. This allows attackers to increase their privileges.

The vulnerability in the tmpreaper software is related to the behavior during mounting through the rename function. Exploiting this vulnerability can allow a hacker to enhance their privileges or place files in any arbitrary location within the file system hierarchy...