Path Traversal in demon1a/discord-recon

✍️ Description Scanning internal git directories leaks using Improper input validation in truffleHog function urlHost = urlparseargument.netloc if urlHost != "github.com" and urlHost != "gitlab.com": await ctx.send"You're trying to scan unallowed URL, please use a github/gitlab URL." return The...

phpBB Directories Information Disclosure

phpBB sensitive directories have been detected on the target phpBB installation. This may present an attacker with sensitive information to mount further attacks. No source data...

OpenAPI Tools OpenAPI Generator 安全漏洞

OpenAPI Tools OpenAPI Generator is an OpenAPI generator. The product allows automatic generation of API client libraries SDK generation, server stubs, documentation, configuration, etc. for a given OpenAPI specification v2, v3. A security vulnerability exists in Openapi generator. The vulnerabili...

Openapi generator 安全漏洞

openapi-generator is a software application. It provides an open API interface. A security vulnerability exists in Openapi generator. The vulnerability arises when the program creates insecure temporary directories that can be read and appended by any user on the system...

CVE-2021-24248

CVE-2021-24248 affects the WordPress plugin Business Directory Plugin – Easy Listing Directories (pre-5.11.1). Affected component is the import mechanism, which did not properly validate imported files: a blacklist approach allowed an archive containing a .php4 file to be uploaded, enabling an au...

Microsoft Windows UAC Privilege Escalation Vulnerability

Hi @ll, Microsoft still ships Windows with and lets it create user-writable directories below the "Windows" directory %SystemRoot%\ -- despite that, with exception of %SystemRoot%\Temp, they are all used to store DATA and SHOULD have been placed below %ProgramData% alias %SystemDrive%\ProgramData...

Microsoft Windows UAC Privilege Escalation

Hi @ll, Microsoft still ships Windows with and lets it create user-writable directories below the "Windows" directory %SystemRoot%\ -- despite that, with exception of %SystemRoot%\Temp, they are all used to store DATA and SHOULD have been placed below %ProgramData% alias %SystemDrive%\ProgramData...

CVE-2021-30635

Sonatype Nexus Repository Manager 3.x before 3.30.1 allows a remote attacker to get a list of files and directories that exist in a UI-related folder via directory traversal no customer-specific data is exposed...

Directory Traversal

gnome-autoar is vulnerable to information disclosure. The autoar-extractor.c module allows an attacker to exploit a directory traversal vulnerability during extraction as it lacks symlink validation, resulting in writing of files in arbitrary system directories...

CVE-2020-27568

Insecure File Permissions exist in Aviatrix Controller 5.3.1516. Several world writable files and directories were found in the controller resource. Note: All Aviatrix appliances are fully encrypted. This is an extra layer of security...

Razer Synapse 3 安全漏洞

Razer Synapse 3 is an application from Razer USA, Inc. cloud-based unified hardware configuration tool. A security vulnerability exists in Razer Synapse 3, which can be exploited by an attacker to create files in unintended directories with some limitations...

Razer Synapse 3 安全漏洞

Razer Synapse 3 is an application from Razer USA, Inc. cloud-based unified hardware configuration tool. A security vulnerability exists in Razer Synapse 3, which can be exploited by an attacker to create files in unintended directories with some limitations...

Gradle 安全漏洞

Gradle is a set of JVM-based project building tools from Gradle, Inc. that supports maven, Ivy repositories, and more. A security vulnerability exists in Gradle versions prior to 7.0 that allows multiple users to create system temporary directories by creating and deleting open permissions to fil...

USN-4902-1: Django vulnerability

Dennis Brinkrolf discovered that Django incorrectly handled certain filenames. A remote attacker could possibly use this issue to create or overwrite files in unexpected directories...

The vulnerability of the Cisco IOS XE SD-WAN command-line interface allows a attacker to gain unauthorized access to protected information.

The vulnerability of the Cisco IOS XE SD-WAN software’s command-line interface is related to incorrect path name restrictions for access to restricted directories. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Cisco IOS XE SD-WAN software’s command-line interface allows attackers to compromise the integrity of protected information.

The vulnerability of the Cisco IOS XE SD-WAN software’s command-line interface relates to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow a attacker to compromise the integrity of the protected information...

Directory traversal

Directory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers to list files in arbitrary directories via the dir parameter...

CVE-2020-21590

Directory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers to list files in arbitrary directories via the dir parameter...

CVE-2021-27241

This vulnerability allows local attackers to delete arbitrary directories on affected installations of Avast Premium Security 20.8.2429 Build 20.8.5653.561. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The...

CVE-2021-27241

This vulnerability allows local attackers to delete arbitrary directories on affected installations of Avast Premium Security 20.8.2429 Build 20.8.5653.561. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The...