7166 matches found
PT-2023-22387 · Unknown · Keyboard Themes
Name of the Vulnerable Software and Affected Versions: Keyboard Themes version 1.275.1.164 Description: The issue allows unauthorized apps to overwrite arbitrary files in the internal storage of Keyboard Themes and achieve arbitrary code execution due to a dictionary traversal vulnerability...
CVE-2023-33544
hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite...
Hawt Hawtio 路径遍历漏洞
Hawt Hawtio is a modular web console program for managing Java content. A security vulnerability exists in Hawt Hawtio version 2.17.2 that stems from the presence of a path traversal vulnerability. An attacker can exploit the vulnerability to input a malicious unzipped file, resulting in the file...
Timmystudios Fast Typing Keyboard 路径遍历漏洞
Timmystudios Fast Typing Keyboard is an Android app keyboard by Timmystudios. A security vulnerability exists in Timmystudios Fast Typing Keyboard Themes version 1.275.1.164, which stems from the presence of a dictionary traversal vulnerability that could allow an unauthorized application to...
CVE-2023-33544
hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite...
CVE-2023-33544
hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite...
CVE-2023-33245
Minecraft through 1.19 and 1.20 pre-releases before 7 Java allow arbitrary file overwrite, and possibly code execution, via crafted world data that contains a symlink...
CVE-2023-33245
Minecraft through 1.19 and 1.20 pre-releases before 7 Java allow arbitrary file overwrite, and possibly code execution, via crafted world data that contains a symlink...
CVE-2023-33245
Minecraft through 1.19 and 1.20 pre-releases before 7 Java allow arbitrary file overwrite, and possibly code execution, via crafted world data that contains a symlink...
Code injection
Minecraft through 1.19 and 1.20 pre-releases before 7 Java allow arbitrary file overwrite, and possibly code execution, via crafted world data that contains a symlink...
CVE-2023-34204
imapsync through 2.229 uses predictable paths under /tmp and /var/tmp in its default mode of operation. Both of these are typically world-writable, and thus for example an attacker can modify imapsync's cache and overwrite files belonging to the user who runs it...
CVE-2023-33245
Minecraft through 1.19 and 1.20 pre-releases before 7 Java allow arbitrary file overwrite, and possibly code execution, via crafted world data that contains a symlink...
CVE-2023-33245
Minecraft is affected: versions 1.19 through 1.20 pre-releases before 7 (Java) are vulnerable via crafted world data containing a symlink, enabling arbitrary file overwrite and potentially code execution. Root cause: world data with symlink exposure. Exploitation status: no in-wild exploit detail...
CVE-2023-33245
Minecraft through 1.19 and 1.20 pre-releases before 7 Java allow arbitrary file overwrite, and possibly code execution, via crafted world data that contains a symlink...
imapsync 后置链接漏洞
imapsync is imapsync open source an IMAP transport tool. A security vulnerability exists in imapsync that stems from the use of predictable paths under /tmp and /var/tmp in its default mode of operation, which can be exploited by an attacker to modify imapsync's cache and overwrite files belongin...
PT-2023-24241 · Mojang · Minecraft
Name of the Vulnerable Software and Affected Versions: Minecraft versions 1.19 through 1.20 pre-releases before 7 Java Description: The issue allows for arbitrary file overwrite, and possibly code execution, via crafted world data that contains a symlink. Recommendations: For Minecraft versions...
CVE-2023-34204
CVE-2023-34204 affects imapsync up to version 2.229. The issue arises from the use of predictable, world-writable temporary paths under /tmp and /var/tmp in the default operation, allowing an untrusted user or local attacker to modify the tool’s cache and overwrite files belonging to the running ...
MGASA-2023-0180 Updated dmidecode packages fix security vulnerability
Dmidecode allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. CVE-2023-30630...
Updated dmidecode packages fix security vulnerability
Dmidecode allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. CVE-2023-30630...