25 matches found
Malicious code in CloudStore (npm)
The package CloudStore was found to contain malicious code. --- Credit: OpenSSF source...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the cloudstore.file.upload action. An attacker can write arbitrary files to the filesystem and potentially execute code by supplying crafted filenames that exploit path traversal and zip slip vulnerabilities...
Daptin has Unauthenticated Path Traversal and Zip Slip
Impact The cloudstore.file.upload action in server/actions/actioncloudstorefileupload.go writes user-supplied filenames directly to disk without proper validation. This allows unauthenticated attackers to perform path traversal and zip slip attacks, leading to arbitrary file write and potential...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the cloudstore.file.upload action. An attacker can write arbitrary files to the filesystem and potentially execute code by supplying crafted filenames that exploit path traversal and zip slip vulnerabilities...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the cloudstore.file.upload action. An attacker can write arbitrary files to the filesystem and potentially execute code by supplying crafted filenames that exploit path traversal and zip slip vulnerabilities...
GHSA-9CP7-J3F8-P5JX Daptin has Unauthenticated Path Traversal and Zip Slip
Impact The cloudstore.file.upload action in server/actions/actioncloudstorefileupload.go writes user-supplied filenames directly to disk without proper validation. This allows unauthenticated attackers to perform path traversal and zip slip attacks, leading to arbitrary file write and potential...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the cloudstore.file.upload action. An attacker can write arbitrary files to the filesystem and potentially execute code by supplying crafted filenames that exploit path traversal and zip slip vulnerabilities...
PT-2026-33892
Impact The cloudstore.file.upload action in server/actions/action cloudstore file upload.go writes user-supplied filenames directly to disk without proper validation. This allows unauthenticated attackers to perform path traversal and zip slip attacks, leading to arbitrary file write and potentia...
EUVD-2019-9880
Malware in sbrugna...
Malicious code in CloudStore (npm)
The package CloudStore was found to contain malicious code...
MAL-2025-17186 Malicious code in CloudStore (npm)
The package CloudStore was found to contain malicious code...
CVE-2019-1321
An elevation of privilege vulnerability exists when Windows CloudStore improperly handles file Discretionary Access Control List DACL, aka 'Microsoft Windows CloudStore Elevation of Privilege Vulnerability'...
CVE-2024-7704: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability was found in Weaver e-cology 8. It has been classified as problematic. Affected is an unknown function of the file /cloudstore/ecode/setup/ecologydev.zip of the component Source Code Handler. The manipulation leads to information disclosure. It is possible to launch the attack...
PT-2024-38524 · Unknown · Weaver E-Cology
Name of the Vulnerable Software and Affected Versions: Weaver e-cology version 8 Description: A vulnerability was found in the Source Code Handler component of Weaver e-cology, affecting an unknown function of the file /cloudstore/ecode/setup/ecology dev.zip. This issue leads to information...
Windows CloudStore Privilege Escalation
The vulnerability of the Windows CloudStore storage service on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
CVE-2019-1321
An elevation of privilege vulnerability exists when Windows CloudStore improperly handles file Discretionary Access Control List DACL, aka 'Microsoft Windows CloudStore Elevation of Privilege Vulnerability'...
CVE-2019-1321
An elevation of privilege vulnerability exists when Windows CloudStore improperly handles file Discretionary Access Control List DACL, aka 'Microsoft Windows CloudStore Elevation of Privilege Vulnerability'...
Privilege escalation
An elevation of privilege vulnerability exists when Windows CloudStore improperly handles file Discretionary Access Control List DACL, aka 'Microsoft Windows CloudStore Elevation of Privilege Vulnerability'...
CVE-2019-1321
CVE-2019-1321 : An elevation-of-privilege flaw in Windows CloudStore occurs when a Discretionary Access Control List (DACL) is mishandled. Technical description across connected documents confirms the issue is a local-elevation vulnerability in Windows CloudStore. The NVD entry lists CVSS results...
CVE-2019-1321
An elevation of privilege vulnerability exists when Windows CloudStore improperly handles file Discretionary Access Control List DACL, aka 'Microsoft Windows CloudStore Elevation of Privilege Vulnerability'...