Vulnerability Spotlight: Multiple vulnerabilities in Shimo VPN's helper tool

Discovered by Tyler Bohan of Cisco Talos. Overview Cisco Talos is disclosing a series of vulnerabilities found in the Shimo VPN Helper Tool. Shimo VPN is a popular VPN client for MacOS that can be used to connect multiple VPN accounts to one application. These specific vulnerabilities were found ...

RubyGems Path Traversal Vulnerability

RubyGems is a Ruby package manager from the RubyGems organization. The product is mainly used for publishing and managing Ruby packages. A directory traversal vulnerability exists in RubyGems versions 2.7.6 through 3.0.2. An attacker can exploit this vulnerability to delete arbitrary files on a...

Directory traversal

admin/dldata.php in zzcms 2018 2018-10-19 allows remote attackers to delete arbitrary files via action=del&filename=../ directory traversal...

CVE-2018-19013

An attacker could inject commands to delete files and/or delete the contents of a file on CX-Supervisor Versions 3.42 and prior through a specially crafted project file...

Omron CX-Supervisor Command Injection Vulnerability

Omron CX-Supervisor is a powerful and advanced machine visualization software package that provides a very flexible PC-based HMI environment. A command injection vulnerability exists in Omron CX-Supervisor 3.42 and earlier versions, which can be exploited by an attacker to inject commands via a...

MailEnable Path Traversal Vulnerability

MailEnable is a suite of POP3 and SMTP mail servers from MailEnable Australia. A directory traversal vulnerability exists in MailEnable versions prior to 8.60, which stems from the program incorrectly handling '/... /' and '/... /' sequences. An attacker could exploit this vulnerability to read...

CVE-2018-0704

Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via Keitai Screen...

Directory traversal

Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via Keitai Screen...

A Dozen Flaws in Popular Mac Clean-Up Software Allow Local Root Access

A passel of privilege-escalation vulnerabilities in MacPaw’s CleanMyMac X software would allow a local attacker to gain root access to an Apple machine in various ways. CleanMyMac X is a cleanup application for MacOS that optimizes the drives and frees up space by scanning for unused, redundant o...

Arbitrary File Deletion Vulnerability in ESPCMS

ESPCMS is developed by PHP+MySQL and is able to run major mainstream cloud platforms. ESPCMS has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files...

IBM Integration Bus Override Access Vulnerability

IBM Integration Bus formerly known as IBM WebSphere Message Broker is an enterprise service bus ESB product from IBM. The product provides connectivity and common data transformations for Service Oriented Architecture SOA environments and non-SOA environments. A security vulnerability exists in I...

Cybozu Mailwise Directory Traversal Vulnerability

Cybozu Mailwise is a web-based e-mail system. A directory traversal vulnerability exists in Cybozu Mailwise, which can be exploited by a remote attacker to delete arbitrary files on the server...

Cybozu Office Directory Traversal Vulnerability (CNVD-2018-23137)

Cybozu Office is a web-based cross-platform collaborative office solution. A directory traversal vulnerability exists in Cybozu Office, which can be exploited by remote attackers to delete arbitrary files on the server...

Cybozu Dezie Directory Traversal Vulnerability

Cybozu Dezie is a Web-based database system from Cybozu. A directory traversal vulnerability exists in Cybozu Dezie, which can be exploited by a remote attacker to delete arbitrary files on the server...

CVE-2018-19143

Open Ticket Request System OTRS 4.0.x before 4.0.33, 5.0.x before 5.0.31, and 6.0.x before 6.0.13 allows an authenticated user to delete files via a modified submission form because upload caching is mishandled...

CVE-2018-19143

Open Ticket Request System OTRS 4.0.x before 4.0.33, 5.0.x before 5.0.31, and 6.0.x before 6.0.13 allows an authenticated user to delete files via a modified submission form because upload caching is mishandled...

DEBIAN-CVE-2018-19143

Open Ticket Request System OTRS 4.0.x before 4.0.33, 5.0.x before 5.0.31, and 6.0.x before 6.0.13 allows an authenticated user to delete files via a modified submission form because upload caching is mishandled...

CVE-2018-19143

Removed by vendor...

CVE-2018-19143

Open Ticket Request System OTRS 4.0.x before 4.0.33, 5.0.x before 5.0.31, and 6.0.x before 6.0.13 allows an authenticated user to delete files via a modified submission form because upload caching is mishandled...

glusterfs: "features/index" translator can create arbitrary, empty files

A flaw was found in the way glusterfs server handles client requests. A remote, authenticated attacker could set arbitrary values for the GFXATTROPENTRYINKEY and GFXATTROPENTRYOUTKEY during xattrop file operation resulting in creation and deletion of arbitrary files on glusterfs server node...