Server side request forgery (ssrf)

A security issue was discovered in WeBid =1.2.2. A Server-Side Request Forgery SSRF vulnerability in the admin/theme.php file allows remote attackers to inject payloads via theme parameters to read files across directories...

CVE-2022-41477

A security issue was discovered in WeBid =1.2.2. A Server-Side Request Forgery SSRF vulnerability in the admin/theme.php file allows remote attackers to inject payloads via theme parameters to read files across directories...

DEBIAN-CVE-2022-42906

powerline-gitstatus aka Powerline Gitstatus before 1.3.2 allows arbitrary code execution. git repositories can contain per-repository configuration that changes the behavior of git, including running arbitrary commands. When using powerline-gitstatus, changing to a directory automatically runs gi...

Adobe ColdFusion 路径遍历漏洞

Adobe ColdFusion is a rapid application development platform from Adobe, which includes an integrated development environment and scripting language. The platform includes an integrated development environment and scripting language.Adobe ColdFusion contains a path traversal vulnerability, which...

Rdiffweb 路径遍历漏洞

Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. It provides quick access to your files through an efficient web interface. A path traversal vulnerability exists in Rdiffweb versions prior to 2.4.10, which stems from a vulnerability that allows an attacker to...

IBM InfoSphere Information Server 安全漏洞

IBM InfoSphere Information Server is a data integration platform from International Business Machines IBM. IBM InfoSphere Information Server versions 8.1, 8.5 and 8.7 contain an information disclosure vulnerability that stems from a program that does not properly restrict directories. An...

The vulnerability of the extract and extractall functions in the tarfile module of the Python interpreter allows a hacker to execute arbitrary code.

The vulnerability of the extract and extractall functions in the tarfile module of the Python interpreter is related to incorrect pathname restrictions for restricted access directories. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the command-line parameter -ImgDir in the OpenJPEG library for image encoding and decoding allows a attacker to trigger a service failure.

The vulnerability of the “command-line parameter -imgDir” in the OpenJPEG image encoding and decoding library is related to incorrect handling of directories containing a large number of files. Exploiting this vulnerability allows an attacker to cause service failures remotely...

Directory Traversal

ICEcoder is vulnerable to directory traversal. The vulnerability exists in multiple functions in classes/Settings.php and lib/settings.php where an attacker will gain unauthorized access to restricted directories and files outside of the web root folder using a HTTP exploit...

PT-2022-34555 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.326 Description: The issue concerns a potential security problem with the ext4 file system, specifically related to handling corrupted directories. The actual impact and likelihood of an attack have not bee...

PT-2022-34361 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.256 Description: The issue concerns a potential security problem with the ext4 file system, specifically related to handling corrupted directories. The actual impact and likelihood of an attack have not be...

PT-2022-34216 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue concerns a potential security problem with the ext4 file system, specifically related to handling corrupted directories. The actual impact and likelihood of an attack have not bee...

PT-2022-33343 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue concerns a potential security problem with the ext4 file system, specifically related to handling corrupted directories. The actual impact and likelihood of an attack have not been...

Assura Personnel Data Systems Vista 7 路径遍历漏洞

Assura Personnel Data Systems Vista 7 PDS Vista 7 is a generic tax program from Assura. A security vulnerability in the External Applicants Security Hotfix XA client for Assura Personnel Data Systems Vista 7 versions prior to 7.1.7.2, which stems from improperly restricting pathnames to restricte...

CVE-2022-38301

Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via uploading a crafted JAR file into the directory /opt/onedev/lib...

CVE-2022-39845

Improper validation of integrity check vulnerability in Samsung Kies prior to version 2.6.4.22074 allows local attackers to delete arbitrary directory using directory junction...

CVE-2022-39845

Improper validation of integrity check vulnerability in Samsung Kies prior to version 2.6.4.22074 allows local attackers to delete arbitrary directory using directory junction...

CVE-2022-39845

Improper validation of integrity check vulnerability in Samsung Kies prior to version 2.6.4.22074 allows local attackers to delete arbitrary directory using directory junction...

SAMSUNG Smart Switch PC 安全漏洞

SAMSUNG Smart Switch PC is a Windows software from Samsung South Korea. It is used for data transfer. A security vulnerability exists in SAMSUNG Smart Switch PC prior to version 4.3.22083, which stems from an improper validation of its integrity check that could be exploited by a local attacker t...

SAMSUNG Kies 安全漏洞

SAMSUNG Kies is an application from the South Korean company Samsung SAMSUNG for data synchronization between devices. The program is mainly used to connect Samsung devices to a computer and supports features such as file management and device updates. A security vulnerability exists in SAMSUNG...