CVE-2020-4981: Improper Input Validation

IBM Spectrum Scale 5.0.4.1 through 5.1.0.3 could allow a local privileged user to overwrite files due to improper input validation. IBM X-Force ID: 192541...

IBM Spectrum Scale input validation vulnerability

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

CVE-2020-4981

IBM Spectrum Scale 5.0.4.1 through 5.1.0.3 could allow a local privileged user to overwrite files due to improper input validation. IBM X-Force ID: 192541...

MGASA-2021-0196 Updated krb5-appl packages fix security vulnerabilities

An issue was discovered in rcp in MIT krb5-appl through 1.0.3. Due to the rcp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory validation of the object name returned only directory traversa...

Remote code execution

Discord-Recon is a bot for the Discord chat service. Versions of Discord-Recon 0.0.3 and prior contain a vulnerability in which a remote attacker is able to overwrite any file on the system with the command results. This can result in remote code execution when the user overwrite important files ...

CVE-2021-29465

Discord-Recon is a bot for the Discord chat service. Versions of Discord-Recon 0.0.3 and prior contain a vulnerability in which a remote attacker is able to overwrite any file on the system with the command results. This can result in remote code execution when the user overwrite important files ...

CVE-2021-29465 Remote file overwrite on discord-recon can result in DoS and Remote Code Execution

Discord-Recon is a bot for the Discord chat service. Versions of Discord-Recon 0.0.3 and prior contain a vulnerability in which a remote attacker is able to overwrite any file on the system with the command results. This can result in remote code execution when the user overwrite important files ...

CVE-2021-29465

Discord-Recon version 0.0.3 and earlier contains a vulnerability allowing a remote attacker to overwrite any file on the host with the command results, potentially enabling remote code execution. The issue can be mitigated temporarily by editing the bot’s settings.py to inject into the RCE varia...

CVE-2021-29465: Improper Control of Generation of Code

Discord-Recon is a bot for the Discord chat service. Versions of Discord-Recon 0.0.3 and prior contain a vulnerability in which a remote attacker is able to overwrite any file on the system with the command results. This can result in remote code execution when the user overwrite important files ...

PT-2021-18233 · Unknown · Discord-Recon

Name of the Vulnerable Software and Affected Versions: Discord-Recon versions 0.0.3 and prior Description: The issue allows a remote attacker to overwrite any file on the system with command results, potentially leading to remote code execution if important system files are overwritten...

Mohamed Dief Discord-Recon: Operating System Command Injection Vulnerability

Mohamed Dief Discord-Recon is a Mohamed Dief open source application. It is used to perform the reconnaissance process b from Discord. A code injection vulnerability exists in Discord-Recon version 0.0.3 and earlier versions, which can be exploited by a remote attacker to be able to overwrite any...

Path Traversal in Ansible

An archive traversal flaw was found in all ansible-engine versions 2.9.x prior to 2.9.7, when running ansible-galaxy collection install. When extracting a collection .tar.gz file, the directory is created without sanitizing the filename. An attacker could take advantage to overwrite any file with...

OpenClinic GA installation privilege escalation vulnerability

Summary An incorrect default permissions vulnerability exists in the installation functionality of OpenClinic GA 5.173.3. Overwriting the binary can result in privilege escalation. An attacker can replace a file to exploit this vulnerability. Tested Versions OpenClinic GA 5.173.3 Product URLs...

PT-2021-15764

Name of the Vulnerable Software and Affected Versions: Thrive “Legacy” Rise by Thrive Themes WordPress theme versions prior to 2.0.0 Luxe by Thrive Themes WordPress theme versions prior to 2.0.0 Minus by Thrive Themes WordPress theme versions prior to 2.0.0 Ignition by Thrive Themes WordPress the...

SUSE-SU-2021:1116-1 Security update for umoci

This update for umoci fixes the following issues: - Update to umoci v0.4.6. - CVE-2021-29136: malicious layer allows overwriting of host files bsc1184147...

Cisco SD-WAN Transmission File Overwrite

The vulnerability of the transmission function of the programmatically defined Cisco SD-WAN network is related to access control errors. Exploiting this vulnerability could allow a attacker to rewrite any files at will...

OESA-2021-1141 libqb security update

libqb provides high-performance, reusable features for client-server architecture, such as logging, tracing, inter-process communication IPC, and polling. Security Fixes: libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames...

CVE-2021-20692

Directory traversal vulnerability in Archive collectively operation utility Ver.2.10.1.0 and earlier allows an attacker to create or overwrite files by leading a user to expand a malicious ZIP archives...

PT-2021-14151

Name of the Vulnerable Software and Affected Versions: Archive collectively operation utility versions 2.10.1.0 and earlier Description: The issue allows an attacker to create or overwrite files by leading a user to expand malicious ZIP archives, exploiting a directory traversal vulnerability...

PT-2021-2544 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to errors in access control, which could allow an attacker to overwrite arbitrary files or execute arbitrary code. An unauthenticated, remote...