1582 matches found
GHSA-X36G-4629-XP9V TeamPass External Control of File Name or Path vulnerability
External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...
TeamPass External Control of File Name or Path vulnerability
External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...
CVE-2023-1070
External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...
CVE-2023-1070 External Control of File Name or Path in nilsteampassnet/teampass
External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...
CVE-2023-1070
External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...
CVE-2023-1070: External Control of File Name or Path
External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...
CVE-2023-1070 External Control of File Name or Path in nilsteampassnet/teampass
External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...
Exploit for External Control of File Name or Path in Fortinet Fortinac
FortiNAC CVE-2022-39952 PoC for CVE-2022-39952 affecting F...
CVE-2022-39952
A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via...
Xxe
A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via...
CVE-2022-39952: External Control of File Name or Path
A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via...
SUSE CVE-2019-3681
A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP4; openSUSE Leap 15.1, openSUSE Factory allowed remote attackers that c...
CVE-2023-21566: External Control of File Name or Path
Visual Studio Elevation of Privilege Vulnerability...
CVE-2023-21800: External Control of File Name or Path
Windows Installer Elevation of Privilege Vulnerability...
CVE-2023-0575 Remote Code Execution
External Control of Critical State Data, Improper Control of Generation of Code 'Code Injection' vulnerability in YugaByte, Inc. Yugabyte DB on Windows, Linux, MacOS, iOS DevopsBase.Java:execCommand, TableManager.Java:runCommand modules allows API Manipulation, Privilege Abuse. This vulnerability...
Malicious code in waline-magic (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a36651e1c228b2c1cc270f4d650d20db1da7126756f6ae78b407b803174a517 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in tropine_1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39fd7c56c8bc0e04e729a9750b589a46dae70cc5c7a6196c635cdc8bfa6e3ed8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in signurl-bindings (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 902b1bd6f866ecb35b997d63be6d3ac6e3b998f5fcd6f9a466bb4b09add76c55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in nirvana-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56c15918eda59ba0f3eab8b18cebaa86284847edd4b74d8a8aab43deea503c39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in speedtestcliz (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c1277efe10b751c63dc427f71707ce44c7d1f84cc9cc8e75dea44bcb9b30342 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...