PT-2023-2801 · Cisco · Cisco Identity Services Engine

Name of the Vulnerable Software and Affected Versions: Cisco Identity Services Engine ISE affected versions not specified Description: The issue is related to deficiencies in directory path checking, allowing an attacker to perform path traversal attacks on the underlying operating system. This...

CVE-2023-30509 Authenticated Remote Path Traversal in Aruba EdgeConnect Enterprise Command Line Interface

Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of these vulnerabilities result in the ability to read arbitrary files on the underlying operating system, including sensitive system files...

CVE-2023-30507 Authenticated Remote Path Traversal in Aruba EdgeConnect Enterprise Command Line Interface

Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of these vulnerabilities result in the ability to read arbitrary files on the underlying operating system, including sensitive system files...

podman: symlink exchange attack in podman export volume

A Time-of-check Time-of-use TOCTOU flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system...

Path Traversal

pimcore/pimcore is vulnerable to Path Traversal. The vulnerability exists due to a lack of validation in the importServerFilesAction of the AssetController.php file, which allows an attacker to access files outside the expected directory and download arbitrary files...

Schneider Electric OPC Factory Server 代码问题漏洞

Schneider Electric OPC Factory Server is a software application from the French company Schneider Electric Schneider Electric. An XML external entity injection vulnerability exists in Schneider Electric OPC Factory Server, which stems from an improper restriction on XML external entity references...

CVE-2023-2180

The KIWIZ Invoices Certification & PDF System WordPress plugin through 2.1.3 does not validate the path of files to be downloaded, which could allow unauthenticated attacker to read/downlaod arbitrary files, as well as perform PHAR unserialization assuming they can upload a file on the server...

CVE-2023-2180

The KIWIZ Invoices Certification & PDF System WordPress plugin through 2.1.3 does not validate the path of files to be downloaded, which could allow unauthenticated attacker to read/downlaod arbitrary files, as well as perform PHAR unserialization assuming they can upload a file on the server...

Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-6071-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6071-1 advisory. It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel did not properly perform filter deactivation in some...

Exploit for Path Traversal in Grafana

PoC para CVE-2021-43798 Grafana es una plataforma de código a...

Lack of security consideration leads to multiple critical weaknesses

Introduction This report serves more as a suggestion to improve security, rather than fixing any single "vulnerability". I've given examples to demonstrate the impact that neglecting security may have, but these are not the root cause of the issue. Due to the nature of a package, being able to...

CVE-2022-41722

A flaw was found in Go, where it could allow a remote attacker to traverse directories on the system, caused by improper validation of user requests by the filepath.Clean on Windows package. This flaw allows an attacker to send a specially-crafted URL request containing "dot dot" sequences /../ t...

CVE-2023-27527

Shinseiyo Sogo Soft 7.9A and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker...

CVE-2023-27527

Shinseiyo Sogo Soft 7.9A and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker...

Siemens SCALANCE LPE9403 Path Traversal Vulnerability

Siemens SCALANCE LPE9403 is the local processing driver. A path traversal vulnerability exists in the Siemens SCALANCE LPE9403, which can be exploited by an attacker to gain access to the SSH interface on an affected device to read the contents of any file named address...

n8n 路径遍历漏洞

n8n is a scalable workflow automation tool from n8n open source. A security vulnerability exists in version 0.218.0 of the n8n package for Node.js. An attacker exploiting this vulnerability could read arbitrary files on the server running the application...

CVE-2023-27527

Shinseiyo Sogo Soft 7.9A and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker...

PT-2023-23553 · Sngrep +1 · Sngrep +1

Name of the Vulnerable Software and Affected Versions: Sngrep version 1.6.0 Description: A stack buffer overflow issue was discovered in the function packet set payload at /src/packet.c. This issue affects the packet set payload function, which is located in the /src/packet.c file. Recommendation...

PT-2023-22151 · Siemens · Simatic Cloud Connect 7 Cc712 +1

Name of the Vulnerable Software and Affected Versions: SIMATIC Cloud Connect 7 CC712 versions 2.0 through 2.1 SIMATIC Cloud Connect 7 CC716 versions 2.0 through 2.1 Description: A vulnerability has been identified where the affected device uses a hard-coded password to protect diagnostic files...

CVE-2023-27955

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, macOS Big Sur 11.7.5. An app may be able to read arbitrary files...