253 matches found
CVE-2019-9829
Maccms 10 allows remote attackers to execute arbitrary PHP code by entering this code in a template/defaultpc/html/art Edit action. This occurs because template rendering uses an include operation on a cache file, which bypasses the prohibition of .php files as templates...
WAGO PFC200 iocheckd service "I/O-Check" cache DNS code execution vulnerability
Summary An exploitable stack buffer overflow vulnerability exists in the iocheckd service “I/O-Check” functionality of WAGO PFC 200. A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An attacker can send...
The vulnerability of Astra Linux Directory service (ALD), a component of the Astra Linux operating system, allows a hacker to trigger a service failure.
The vulnerability of the Astra Linux Directory Service ALD in the Astra Linux operating system is related to an error in the command for accessing cache files of directory attributes. This error causes these files to be constantly recreated. Exploiting this vulnerability allows a malicious actor,...
Code injection
A code injection vulnerability in /type.php in PHPCMS 2008 allows attackers to write arbitrary content to a website cache file with a controllable filename, leading to arbitrary code execution. The PHP code is sent via the template parameter, and is written to a data/cachetemplate/.tpl.php file...
CVE-2018-19127
A code injection vulnerability in /type.php in PHPCMS 2008 allows attackers to write arbitrary content to a website cache file with a controllable filename, leading to arbitrary code execution. The PHP code is sent via the template parameter, and is written to a data/cachetemplate/.tpl.php file...
CVE-2018-19127
A code injection vulnerability in /type.php in PHPCMS 2008 allows attackers to write arbitrary content to a website cache file with a controllable filename, leading to arbitrary code execution. The PHP code is sent via the template parameter, and is written to a data/cachetemplate/.tpl.php file...
HDF5 Memory Leak Vulnerability
HDF5 is a free suite of tools for managing the storage of different types of data that can be managed, manipulated, viewed, analyzed, and generated in portable formats. A memory leak vulnerability exists in the 'H5Ochunkdeserialize' function of the H5Ocache.c file in HDF5 1.10.3 and earlier...
PHP7CMS suffers from information leakage vulnerability
PHP7 content management system referred to as PHP7CMS by Chunjie studio using PHP7 technology newly developed content management program. There is an information leakage vulnerability in PHP7CMS. The vulnerability is due to the program installation will write the database information into the cac...
Code Execution Vulnerability in PHPMyWind v5.4
PHPMyWind is a PHP MySQL-based development , W3C-compliant building engine . A code execution vulnerability exists in PHPMyWind v5.4. PHPMyWind can be exploited to execute arbitrary code when implementing the generation of cache configuration files...
$_SERVER[SCRIPT_NAME]variable to the value of the injected malicious code-vulnerability warning-the black bar safety net
$SERVER'SCRIPTNAME'variable in the route pass the parameters, can be introduced into the malicious code, which leads toxssas well as malicious code injection. PS: this article is only for technical discussion and sharing, it is forbidden for any illegal purposes. $SERVER'SCRIPTNAME'variables are...
Code Execution Vulnerability in Cicada Knowledge Enterprise Portal System
Cicada Knowledge Enterprise Portal System is a web content management system. A code execution vulnerability exists in the Cicada Knowledge Enterprise Portal System. The vulnerability is due to improper handling of writing to a cache file. An attacker can construct a malicious request to write...
Code execution vulnerability in DedeCMS backend cache files
Weaving dream content management system DedeCms is a PHP open source website management system. A code execution vulnerability exists in the DedeCMS backend cache file. The vulnerability is due to the system mishandling of input information , allowing an attacker to exploit the vulnerability...
Design/Logic Flaw
Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to a login command which allowed impersonating any Jenkins user. The login command available in the remoting-based CLI stored the encrypted user name of the successfully authenticated user in a cache file used to...
Low: nginx
Issue Overview: A flaw within the processing of ranged HTTP requests has been discovered in the range filter module of nginx. A remote attacker could possibly exploit this flaw to disclose parts of the cache file header, or, if used in combination with third party modules, disclose potentially...
Null pointer dereference
In ImageMagick 7.0.6-10, a NULL Pointer Dereference issue is present in the ReadCUTImage function in coders/cut.c that could allow an attacker to cause a Denial of Service in the QueueAuthenticPixelCacheNexus function within the MagickCore/cache.c file by submitting a malformed image file...
Low: Red Hat Security Advisory: rh-nginx110-nginx security update
An update for rh-nginx110-nginx is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
CVE-2017-7529
A flaw within the processing of ranged HTTP requests has been discovered in the range filter module of nginx. A remote attacker could possibly exploit this flaw to disclose parts of the cache file header, or, if used in combination with third party modules, disclose potentially sensitive memory b...
RuboCop Arbitrary Cache File Modification Vulnerability
RuboCop is a Ruby static code analyzer . With the ability to find and resolve code errors. A security vulnerability exists in RuboCop 0.48.1 and earlier versions. A local attacker can exploit the vulnerability to tamper with other users' cached files...
Phpcms V9. 6. 0 any file write getshell vulnerability analysis-vulnerability warning-the black bar safety net
1 Introduction: It is said to be one in the underground has been around for half a 0day, which has recently been broke to, in the membership registration page, that this vulnerability without the need to login you can use, or more powerful. 2 vulnerability analysis: Follow up on the registration...
