CVE-2022-39952

A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via...

Xxe

A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via...

SUSE CVE-2019-3681

A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP4; openSUSE Leap 15.1, openSUSE Factory allowed remote attackers that c...

CVE-2023-0575 Remote Code Execution

External Control of Critical State Data, Improper Control of Generation of Code 'Code Injection' vulnerability in YugaByte, Inc. Yugabyte DB on Windows, Linux, MacOS, iOS DevopsBase.Java:execCommand, TableManager.Java:runCommand modules allows API Manipulation, Privilege Abuse. This vulnerability...

Malicious code in waline-magic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a36651e1c228b2c1cc270f4d650d20db1da7126756f6ae78b407b803174a517 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tropine_1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39fd7c56c8bc0e04e729a9750b589a46dae70cc5c7a6196c635cdc8bfa6e3ed8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in signurl-bindings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 902b1bd6f866ecb35b997d63be6d3ac6e3b998f5fcd6f9a466bb4b09add76c55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nirvana-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56c15918eda59ba0f3eab8b18cebaa86284847edd4b74d8a8aab43deea503c39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in speedtestkas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8836f24997a907538aecb95c00484874123e3c82cfc14af5aa48eba61723a6c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in speedtestcliz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c1277efe10b751c63dc427f71707ce44c7d1f84cc9cc8e75dea44bcb9b30342 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prathmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3463a1fff2f77680560596dbe40c47204ae5c79228c5dad33399f9fdd4441c12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Siemens Automation License Manager File Name or Path External Control Vulnerability

The Automation License Manager ALM centrally manages license keys for various Siemens software products. Software products that require a license key automatically report this requirement to ALM. When ALM finds a valid license key for the software, the software can be used according to the end-us...

External Control of Assumed-Immutable Web Parameter

Overview Affected versions of this package are vulnerable to External Control of Assumed-Immutable Web Parameter due to improper escape of the " character in the generatemultipart function, which allows injecting malicious content to the filename parameter via the Content-Disposition header. PoC...

CVE-2022-45918

ILIAS before 7.16 allows External Control of File Name or Path...

CVE-2022-45918

ILIAS before 7.16 allows External Control of File Name or Path...

Malicious code in @ebx-ui/ebx-ui-component-library-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb6db834c8045417e3e41ad3434edf6b7d78a926da70d77e7e11a1c3494ae28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-27685 · Ilias · Ilias

Name of the Vulnerable Software and Affected Versions: ILIAS versions prior to 7.16 Description: The issue allows for external control of file name or path. Recommendations: For versions prior to 7.16, update to version 7.16 or later to resolve the issue...

CVE-2022-45918

CVE-2022-45918 affects ILIAS eLearning platform prior to 7.16. The vulnerability is External Control of File Name or Path, with upstream advisories and Red Hat corroborating that versions

Malicious code in antiheck (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57640d463cf1be529df1b989b1c6b6c7c70485353571eb06099eaa9e99fcc842 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in toolbox_expose (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ede419116d4ae54b61ef324d9714437511898468d434e69d394be699ff73ffee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...