Pandoc 安全漏洞

Pandoc is a Haskell library for converting from one markup format to another, as well as command line tools that use the library. A security vulnerability exists in Pandoc versions prior to 3.1.6, which stems from an arbitrary file write vulnerability in the extract-media function...

CVE-2023-38745

Pandoc before 3.1.6 allows arbitrary file write: this can be triggered by providing a crafted image element in the input when generating files via the --extract-media option or outputting to PDF format. This allows an attacker to create or overwrite arbitrary files, depending on the privileges of...

CVE-2023-38745

Pandoc before 3.1.6 allows arbitrary file write: this can be triggered by providing a crafted image element in the input when generating files via the --extract-media option or outputting to PDF format. This allows an attacker to create or overwrite arbitrary files, depending on the privileges of...

Debian dla-3507 : libghc-pandoc-dev - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3507 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3507-1 [email protected]...

CVE-2023-38745

Pandoc before 3.1.6 allows arbitrary file write: this can be triggered by providing a crafted image element in the input when generating files via the --extract-media option or outputting to PDF format. This allows an attacker to create or overwrite arbitrary files, depending on the privileges of...

PT-2023-25976

Name of the Vulnerable Software and Affected Versions Metersphere versions prior to 2.10.3 Description Metersphere is an open-source testing framework. Files uploaded to Metersphere may define a belongType value with a relative path like ../../../../ which may cause Metersphere to attempt to...

Exploit for CVE-2023-21746

It is an exploit module/toolkit targeting a vulnerability in a s...

Directory Traversal

Overview rswag is a package for generating beautiful API documentation directly from rspec integration tests Affected versions of this package are vulnerable to Directory Traversal in api/middleware.rb, which is accessible via the rswag-api component. JSON and YAML other than the OpenAPI or Swagg...

Exploit for Code Injection in Apache Rocketmq

CVE-2023-37582EXPLOIT Apache RocketMQ Arbitrary File Write Vu...

CVE-2023-1183 Arbitrary file write

A flaw was found in the Libreoffice package. An attacker can craft an odb containing a "database/script" file with a SCRIPT command where the contents of the file could be written to a new file whose location was determined by the attacker...

CVE-2023-1183

A flaw was found in the Libreoffice package. An attacker can craft an odb containing a "database/script" file with a SCRIPT command where the contents of the file could be written to a new file whose location was determined by the attacker...

CVE-2023-1208: Undefined Security Weakness

This HTTP Headers WordPress plugin before 1.18.11 allows arbitrary data to be written to arbitrary files, leading to a Remote Code Execution vulnerability...

Mageia: Security Advisory (MGASA-2023-0225)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated libreoffice packages fix security vulnerability

Arbitrary File Write in hsqldb 1.8.0. CVE-2023-1183...

MGASA-2023-0225 Updated libreoffice packages fix security vulnerability

Arbitrary File Write in hsqldb 1.8.0. CVE-2023-1183...

SUSE CVE-2023-35936

Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library. Starting in version 1.13 and prior to version 3.1.4, Pandoc is susceptible to an arbitrary file write vulnerability, which can be triggered by providing a specially crafte...

SAMSUNG Calendar 路径遍历漏洞

SAMSUNG Calendar is a calendar module from the South Korean company Samsung SAMSUNG. A security vulnerability exists in Samsung Calendar versions prior to 12.4.07.15, which stems from a potential zip path traversal vulnerability that could allow an attacker to write to arbitrary files...

PT-2023-22875 · Google · Android

Name of the Vulnerable Software and Affected Versions: Calendar application versions prior to 12.4.07.15 Description: The issue allows attackers to write arbitrary files due to a potential zip path traversal vulnerability in the Calendar application. This vulnerability is present in Android 13...

CVE-2023-30678: Improper Limitation of a Pathname to a Restricted Directory

Potential zip path traversal vulnerability in Calendar application prior to version 12.4.07.15 in Android 13 allows attackers to write arbitrary file...

Format string

Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library. Starting in version 1.13 and prior to version 3.1.4, Pandoc is susceptible to an arbitrary file write vulnerability, which can be triggered by providing a specially crafte...