Lucene search
+L

9913 matches found

osv_ghsa
osv_ghsa
•added 2020/09/01 4:58 p.m.•40 views

GHSA-QHF6-VQQ9-Q2P7 Directory Traversal in gaoxiaotingtingting

Affected versions of gaoxiaotingtingting resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system...

7.5CVSS7.4AI score0.01974EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2020/09/01 4:57 p.m.•41 views

Directory Traversal in wangguojing123

Affected versions of wangguojing123 resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system...

7.5CVSS7.1AI score0.01974EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
•added 2020/09/01 4:56 p.m.•48 views

Directory Traversal in zwserver

Affected versions of zwserver resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Example...

7.5CVSS7.1AI score0.01974EPSS
SaveExploits1References4Affected Software1
osv_ghsa
osv_ghsa
•added 2020/09/01 4:55 p.m.•38 views

GHSA-VHX6-CP8W-295M Directory Traversal in serverliujiayi1

Affected versions of serverliujiayi1 resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system...

7.5CVSS7.4AI score0.01974EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2020/09/01 4:54 p.m.•35 views

Directory Traversal in serverhuwenhui

Affected versions of serverhuwenhui resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system...

7.5CVSS7.1AI score0.01974EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
•added 2020/09/01 4:53 p.m.•39 views

Directory Traversal in serverlyr

Affected versions of serverlyr resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Example...

7.5CVSS7.1AI score0.01974EPSS
SaveExploits1References4Affected Software1
osv_ghsa
osv_ghsa
•added 2020/09/01 4:53 p.m.•40 views

GHSA-46Q2-93HM-52P5 Directory Traversal in serverlyr

Affected versions of serverlyr resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Example...

7.5CVSS7.4AI score0.01974EPSS
SaveExploits1References3
osv_ghsa
osv_ghsa
•added 2020/09/01 4:52 p.m.•43 views

GHSA-2F29-PMPX-VJ62 Directory Traversal in serverwg

serverwg is a simple http server. serverwg is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL. Example request: http GET /../../../../../../../../../../etc/passwd HTTP/1.1 host:foo and response: HTTP/1.1 200 OK Date: Wed, 17 May...

7.5CVSS7.5AI score0.01974EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2020/09/01 4:51 p.m.•39 views

Directory Traversal in serverwzl

Affected versions of serverwzl resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Example...

7.5CVSS7.1AI score0.01974EPSS
SaveExploits1References4Affected Software1
osv_ghsa
osv_ghsa
•added 2020/09/01 4:50 p.m.•46 views

GHSA-GQFV-G9F6-3V3M Directory Traversal in serveryaozeyan

Affected versions of serveryaozeyan resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system...

7.5CVSS7.4AI score0.01974EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2020/09/01 4:48 p.m.•41 views

Directory Traversal in serveryztyzt

Affected versions of serveryztyzt resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Examp...

7.5CVSS7.1AI score0.01974EPSS
SaveExploits1References4Affected Software1
osv_ghsa
osv_ghsa
•added 2020/09/01 4:48 p.m.•34 views

GHSA-Q4CQ-539C-3MMM Directory Traversal in serveryztyzt

Affected versions of serveryztyzt resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Examp...

7.5CVSS7.4AI score0.01974EPSS
SaveExploits1References3
osv_ghsa
osv_ghsa
•added 2020/09/01 4:47 p.m.•48 views

GHSA-C3HR-WWH3-QM54 Directory Traversal in fsk-server

Affected versions of fsk-server resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Example...

7.5CVSS7.4AI score0.01974EPSS
SaveExploits1References3
GoogleProjectZero
GoogleProjectZero
•added 2020/09/01 12:00 a.m.•142 views

JITSploitation I: A JIT Bug

By Samuel Groß, Project Zero This three-part series highlights the technical challenges involved in finding and exploiting JavaScript engine vulnerabilities in modern web browsers and evaluates current exploit mitigation technologies. The exploited vulnerability, CVE-2020-9802, was fixed in iOS...

8.8CVSS9.5AI score0.08273EPSS
SaveExploits4
Fedora
Fedora
•added 2020/08/31 3:50 p.m.•40 views

[SECURITY] Fedora 32 Update: univocity-parsers-2.8.4-5.fc32

uniVocity-parsers is a suite of extremely fast and reliable parsers for Java. It provides a consistent interface for handling different file formats, and a solid framework for the development of new parsers...

9.4CVSS2.9AI score0.11138EPSS
SaveExploits0
Fedora
Fedora
•added 2020/08/31 3:50 p.m.•43 views

[SECURITY] Fedora 32 Update: eclipse-cdt-9.11.1-8.fc32

Eclipse features and plugins that are useful for C and C++ development...

9.4CVSS1.3AI score0.11138EPSS
SaveExploits0
Fedora
Fedora
•added 2020/08/31 3:50 p.m.•38 views

[SECURITY] Fedora 32 Update: eclipse-4.16-11.fc32

The Eclipse platform is designed for building integrated development environments IDEs, server-side applications, desktop applications, and everything in between...

9.4CVSS2.3AI score0.11138EPSS
SaveExploits0
ThreatPost
ThreatPost
•added 2020/08/27 11:14 a.m.•62 views

Revamped Qbot Trojan Packs New Punch: Hijacks Email Threads

Attacks attributed to the Qbot trojan, known as the “Swiss Army knife” of malware, are on the uptick with a reported 100,000 recent infections, according to researchers. Qbot, an ever-evolving information-stealing trojan that’s been around since 2008, has shifted tactics again and adopted a bevy ...

SaveExploits0References8
BDU FSTEC
BDU FSTEC
•added 2020/08/26 12:00 a.m.•20 views

command-line interface of SUSE Privilege Escalation

The vulnerability of the command-line interface of SUSE Linux Enterprise Software Development Kit and SUSE Linux Enterprise Module for Development Tools relates to improper external management of file names or paths. Exploiting this vulnerability can allow a malicious actor to gain increased...

10CVSS6.7AI score0.01385EPSS
SaveExploits1References5Affected Software3
The Hacker News
The Hacker News
•added 2020/08/25 9:46 a.m.•50 views

Get Lifetime Access to 1000+ Premium Online Training Courses for Just $59

"In today's knowledge economy, continual learning is an imperative." — Those words from Aytekin Tank, the founder of JotForm, are particularly important for anyone working in IT or development. With over 1,000 premium courses complete list from top instructors, StackSkills Unlimited provides...

0.3AI score
SaveExploits0
Rows per page
Query Builder