EUVD-2024-50520

Malicious code in bioql PyPI...

CVE-2023-41629

A lack of input sanitizing in the file download feature of eSST Monitoring v2.147.1 allows attackers to execute a path traversal...

CVE-2021-32158

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 via the Upload and Download feature...

CVE-2021-32159

A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 via the Upload and Download feature...

NLTK Security Vulnerabilities

NLTK is a natural language toolkit. It is used to support research and development in natural language processing. A security vulnerability exists in NLTK version 3.8.1 and prior versions, which stems from a vulnerability that could lead to remote code execution if the integrated packet download...

Fortinet FortiPortal SQL Injection Vulnerability

Fortinet FortiPortal is an advanced, feature-rich hosted security analysis and management support tool for Fortinet's FortiGate, FortiWiFi, and FortiAP product lines, available as a virtual machine for MSPs. A SQL injection vulnerability exists in Fortinet FortiPortal versions 7.0.0 through 7.0.6...

CVE-2022-48584

A command injection vulnerability exists in the download and convert report feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...

CVE-2022-48584

A command injection vulnerability exists in the download and convert report feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...

Command injection

A command injection vulnerability exists in the download and convert report feature of the ScienceLogic SL1 that takes unsanitized user-controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...

PT-2023-4159 · Webmin +1 · Webmin +1

Name of the Vulnerable Software and Affected Versions: Webmin version 2.021 Description: An issue was discovered in the download functionality, allowing an attacker to exploit a Cross-Site Scripting XSS vulnerability. By providing a crafted download path containing a malicious payload, an attacke...

Webmin 跨站脚本漏洞

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin version 2.021, which stems from a download feature that allows an attacker to exploit a cross-site scripting XSS vulnerability. By providin...

FortiADC - Improper input validation in download features

Multiple improper input validation vulnerabilities CWE-20 may allow an authenticated attacker to retrieve files with specific extensions from the underlying Linux system via crafted HTTP requests...

e-Excellence U-Office Force 路径遍历漏洞

e-Excellence U-Office Force is an e-Office platform from China's First Class Technology e-Excellence. U-Office Force suffers from a path traversal vulnerability, which arises from its download feature that allows a remote attacker with common privileges to traverse the path and download arbitrary...

e-Excellence U-Office Force 路径遍历漏洞

e-Excellence U-Office Force is an e-Office platform from China's First Class Technology e-Excellence. U-Office Force suffers from a path traversal vulnerability, which arises from its download feature that allows a remote attacker with common privileges to traverse the path and download arbitrary...

CVE-2021-32158

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 via the Upload and Download feature...

CVE-2021-32158

CVE-2021-32158 is an XSS vulnerability in Webmin 1.973 exploited via the Upload and Download feature. The issue stems from insufficient input filtering/escaping of user-supplied parameters in that function, enabling script execution in the client context. The CVE is corroborated by multiple sourc...

CVE-2021-46107

Ligeo Archives Ligeo Basics as of 0201-2022 is vulnerable to Server Side Request Forgery SSRF which allows an attacker to read any documents via the download features...

Server side request forgery (ssrf)

Ligeo Archives Ligeo Basics as of 0201-2022 is vulnerable to Server Side Request Forgery SSRF which allows an attacker to read any documents via the download features...

Tibco Data Virtualization 信息泄露漏洞

Tibco Data Virtualization is a data virtualization platform from Tibco, USA. An information disclosure vulnerability exists in TIBCO Data Virtualization Server because the product does not add permission restrictions to the file download feature. The vulnerability can be exploited to download...

Server-Side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-Side Request Forgery SSRF via the download feature. This allows attackers to provide DNS entries or IP addresses that are intended for internal use and gather information about the Intranet infrastructure of the platform...