2536 matches found
MAGNOLIA-8281
MAGNOLIA-8281: Magnolia CMS における FreeMarker Restriction Bypass 2 Magnolia CMS v6.2.16 以前の FreeMarker Filter に存在する問題により、攻撃者はセキュリティ制限を回避し、巧妙に細工された FreeMarker ペイロードを介して任意のファイルの読み取り・書き込み・移動・コピー・削除を行うことができます。任意の JSP ファイルを書き込むことで、任意のコード実行に成功しました。 ベンダー開示: この脆弱性に関するベンダーの開示と修正は、こちら で確認できます。 なぜ CVE がないのか?...
CVE-2022-1388
CVE-2022-1388 Impatto Questa vulnerabilità potrebbe consentire a un utente malintenzionato non autenticato con accesso di rete al sistema BIG-IP tramite la porta di gestione e/o gli indirizzi IP self di eseguire comandi arbitrari di sistema, creare o eliminare file o disabilitare servizi. Non vi ...
CVE-2024-9047
CVE-2024-9047 CVE-2024-9047, wfufiledownloader.php Acesso através do arquivo wfufiledownloader.php, WordPress File Upload Solution poc, ocorre uma vulnerabilidade na solução, é possível acessar, manipular ou modificar arquivos arbitrariamente...
BiblioRCE
Una svista in BiblioCraft che consente manipolazione limitata di file lato server. Questo metodo richiede solo BiblioCraft! Non troppi trucchi e nessun'altra mod è necessaria per ottenere l'esecuzione di codice! CoreTweaks La descrizione originale incentrata su CoreTweaks si trova qui. Consiglio ...
CVE-2026-44517
A flaw was found in Buildah. Insecure handling of temporary directories and symlinks during the image build process, specifically within TempDirForURL, downloadToDirectory, and stdinToDirectory functions, allows a malicious server supplying a Git repository or tar archive to cause files outside t...
CVE-2020-14974
CVE-2020-14974 Ein einfacher POC, der eine Schwachstelle in IObitUnlocker 1.1.2 demonstriert, die IOCTL-Codes im anfälligen Treiber IObitUnlocker.sys nutzt, und es einem Benutzer mit niedrigen Rechten ermöglicht, laufende Dateien zu entsperren, zu löschen, umzubenennen, zu kopieren und zu...
AsmResolver
AsmResolver AsmResolver ist eine Bibliothek zum Lesen, Ändern und Rekonstruieren von Portable-Executable-Dateien PE-Dateien. Sie unterstützt PE-Images, die nativ unter Windows laufen, sowie Images, die verwaltete .NET-Metadaten enthalten. AsmResolver wird unter der MIT-Lizenz veröffentlicht...
mrtg security update
An update is available for mrtg. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Multi Router Traffic Grapher MRTG monitors the traffic load on network...
novahot
novahot novahot is a webshell framework for penetration testers. It implements a JSON-based API that can communicate with trojans written in any language. By default, it ships with trojans written in PHP, ruby, and python. Beyond executing system commands, novahot is able to emulate interactive...
EUVD-2026-63124
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could move files that the user account running Splunk Enterprise can read into a lookup that the user controls. The user could then access all relevant data and...
VulnCheck KEV: CVE-2025-52907
Improper Input Validation vulnerability in TOTOLINK X6000R allows Command Injection, File Manipulation.This issue affects X6000R: through V9.4.0cu.1360B20241207...
CVE-2026-19725
The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.131 does not sanitise a value taken from an unauthenticated request before using it to build a log file path, allowing an attacker holding a site to site transfer key to create a log file in any existing writable directory of t...
CVE-2026-34492 Airwall - Arbitrary file read
External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipulation. This issue affects Airwall: before 4.1...
EUVD-2026-58772
External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipulation. This issue affects Airwall: before 4.1...
CVE-2026-34492
Johnson Controls Airwall (before 4.1) is affected by CVE-2026-34492: external control of a file name or path can lead to arbitrary file read (and related file manipulation). The provided documents do not specify the exact root cause details, vulnerable components, or affected versions beyond Air...
CVE-2026-34492
External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipulation. This issue affects Airwall: before 4.1...
CVE-2026-17071
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal...
CVE-2026-17071
CVE-2026-17071 affects IBM i 7.3–7.6. A remote authenticated attacker can perform file manipulation due to a path traversal flaw in Digital Certificate Manager. The vulnerability is rooted in improper path handling, enabling manipulation of files when authenticated over the network. Affected IBM ...
CVE-2026-17071 IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal...