Siemens TIA Portal Path Traversal Vulnerability (CNVD-2023-35760)

Siemens TIA Portal is a fully integrated automation portal from Siemens, Germany.TIA Portal gives you unlimited access to the full range of digital automation services, from digital planning to integrated engineering and transparent operation. A path traversal vulnerability exists in Siemens TIA...

Fortinet FortiClient Arbitrary file creation by unprivileged users (FG-IR-22-320)

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-320 advisory. - A relative path traversal vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and...

CVE-2023-26396

Adobe Acrobat Reader versions 23.001.20093 and earlier and 20.005.30441 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. Exploitation of this issue requires...

Adobe Acrobat Reader 安全漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDFs. A security vulnerability exists in Adobe Acrobat Reader, which stems from a temporary file creation vulnerability in a directory with incorrect permissions could...

Vulnerabilities fixed in Fortinet FortiClient

Fortinet has fixed vulnerabilities in the FortiClient. A local malicious person can exploit the vulnerabilities to grant themselves elevated privileges, be able to create arbitrary files be able to create arbitrary files on the underlying system and potentially execute arbitrary code execution...

CVE-2023-26293

A vulnerability has been identified in Totally Integrated Automation Portal TIA Portal V15 All versions, Totally Integrated Automation Portal TIA Portal V16 All versions V16 Update 7, Totally Integrated Automation Portal TIA Portal V17 All versions V17 Update 6, Totally Integrated Automation Port...

Path traversal

A vulnerability has been identified in Totally Integrated Automation Portal TIA Portal V15 All versions, Totally Integrated Automation Portal TIA Portal V16 All versions, Totally Integrated Automation Portal TIA Portal V17 All versions V17 Update 6, Totally Integrated Automation Portal TIA Portal...

CVE-2023-26293

Siemens TIA Portal exposes a path traversal vulnerability affecting V15 (all), V16 (all until < V16 Update 7), V17 (< V17 Update 6), and V18 (

FortiClientWindows - Arbitrary file creation by unprivileged users

A relative path traversal CWE-23 vulnerability in FortiClientWindows may allow a local low privileged attacker to perform arbitrary file creation on the device filesystem...

PT-2023-6557 · Siemens · Tia Portal

Name of the Vulnerable Software and Affected Versions: Totally Integrated Automation Portal TIA Portal versions V15 through V18 Update 1, with the following specifics: TIA Portal versions V15 TIA Portal versions V16 through V16 Update 7 TIA Portal versions V17 through V17 Update 6 TIA Portal...

Siemens TIA Portal 输入验证错误漏洞

Siemens TIA Portal is a fully integrated automation portal from Siemens, Germany.TIA Portal gives you unlimited access to the full range of digital automation services, from digital planning to integrated engineering and transparent operation. A path traversal vulnerability exists in Siemens TIA...

FortiClient (Windows) - Arbitrary file creation from unprivileged users due to process impersonation

An incorrect authorization CWE-863 vulnerability in FortiClient Windows may allow a local low privileged attacker to perform arbitrary file creation in the device filesystem...

Responsive FileManager 9.9.5 - Remote Code Execution Exploit

Exploit Title: Responsive FileManager 9.9.5 - Remote Code Execution RCE Exploit Author: Galoget Latorre @galoget Vendor Homepage: https://responsivefilemanager.com Software Link: https://github.com/trippo/ResponsiveFilemanager/releases/download/v9.9.5/responsivefilemanager.zip Dockerfile:...

CVE-2023-25303: Improper Limitation of a Pathname to a Restricted Directory

ATLauncher = 3.4.26.0 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory...

CVE-2023-25305: Improper Limitation of a Pathname to a Restricted Directory

PolyMC Launcher = 1.4.3 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory...

CVE-2023-25305

PolyMC Launcher = 1.4.3 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory...

PT-2023-20017 · Unknown · Atlauncher

Name of the Vulnerable Software and Affected Versions: ATLauncher versions 3.4.26.0 and earlier Description: The issue allows a maliciously crafted mrpack file to create arbitrary files outside of the installation directory due to a Directory Traversal weakness. Recommendations: For ATLauncher...

PT-2023-2531 · Avg +1 · Avg Antivirus +1

Name of the Vulnerable Software and Affected Versions: Avast Antivirus versions prior to 22.11 AVG Antivirus versions prior to 22.11 Description: The issue is related to a Time-of-check/Time-of-use TOCTOU vulnerability in the restore process, leading to arbitrary file creation. This vulnerability...

GMAce <= 1.5.2 - Arbitrary File Creation/Deletion/Update via CSRF

The plugin does not have CSRF checks in the gmacemanagerserver function, which could allow attackers to make logged in admins create, delete and update arbitrary files via a CSRF attack...

CVE-2023-27899

CVE-2023-27899 affects Jenkins and Jenkins LTS prior to fixed builds. The flaw arises when uploading a plugin (or file parameter) where a temporary file is created in the system temporary directory with default permissions, potentially allowing an attacker with access to the Jenkins controller fi...