PT-2024-28391 · Unknown · Best House Rental Management System

Name of the Vulnerable Software and Affected Versions: Best House Rental Management System version 1.0 Description: The issue allows attackers to read arbitrary PHP files and access other sensitive information within the application through the Page parameter at "index.php". This is an arbitrary...

CVE-2024-39178

The Maipu MyPower vc8100 core softswitch control platform (version V100R001C00B030 ) is vulnerable to an arbitrary file read vulnerability. The root cause is an improper limitation of a pathname to a restricted directory within the /tcpdump/tcpdump.php?menu_uuid component. An attacker could poten...

Best House Rental Management System Security Vulnerability

Best House Rental Management System is a house rental management system by Mayuri K. Individual developer. A security vulnerability exists in Best House Rental Management System version 1.0, which stems from an arbitrary file read issue that includes a parameter. An attacker can read arbitrary PH...

Maipu MyPower VC8100 Security Vulnerability

Maipu MyPower VC8100 is a core softswitch control platform from Maipu, China. A security vulnerability exists in Maipu MyPower VC8100 version V100R001C00B030, which originates from a Read Arbitrary File via Component vulnerability...

PT-2024-28379 · Huawei · Mypower Vc8100

Name of the Vulnerable Software and Affected Versions: MyPower vc8100 version V100R001C00B030 Description: The issue is an arbitrary file read vulnerability. It can be exploited via the component "/tcpdump/tcpdump.php?menu uuid". Recommendations: For MyPower vc8100 version V100R001C00B030, as a...

CVE-2024-39178

MyPower vc8100 V100R001C00B030 was discovered to contain an arbitrary file read vulnerability via the component /tcpdump/tcpdump.php?menuuuid...

CVE-2024-39150

vditor v.3.9.8 and before is vulnerable to Arbitrary file read via a crafted data packet...

PT-2024-37120

Name of the Vulnerable Software and Affected Versions: vanna-ai/vanna version v0.3.4 Description: The issue allows unauthenticated remote users to read arbitrary local files on the victim server, including sensitive files like /etc/passwd, by exploiting exposed SQL queries via a Python Flask API...

CVE-2024-39210

Best House Rental Management System v1.0 was discovered to contain an arbitrary file read vulnerability via the Page parameter at index.php. This vulnerability allows attackers to read arbitrary PHP files and access other sensitive information within the application...

CVE-2024-39210

CVE-2024-39210 applies to Best House Rental Management System v1.0. The vulnerability is an arbitrary file read via the Page parameter in index.php, allowing an attacker to read arbitrary PHP files and access other sensitive information within the application. Exploitability details across source...

vditor Security Vulnerabilities

Vditor is a browser-side Markdown editor by the individual developer Vanessa219. A security vulnerability exists in vditor 3.9.8 and earlier versions, which stems from vulnerability to reading arbitrary files via a crafted packet...

PT-2024-28363 · Vditor · Vditor

Name of the Vulnerable Software and Affected Versions: vditor versions 3.9.8 and earlier Description: The issue allows for Arbitrary file read via a crafted data packet. Recommendations: For versions 3.9.8 and earlier, update to a version later than 3.9.8 to resolve the issue...

CVE-2024-39150

vditor v.3.9.8 and before is vulnerable to Arbitrary file read via a crafted data packet...

CVE-2024-39150

vditor v.3.9.8 and before is vulnerable to Arbitrary file read via a crafted data packet...

CVE-2024-39150

vditor v.3.9.8 and before is vulnerable to Arbitrary file read via a crafted data packet...

CVE-2024-39210

Best House Rental Management System v1.0 was discovered to contain an arbitrary file read vulnerability via the Page parameter at index.php. This vulnerability allows attackers to read arbitrary PHP files and access other sensitive information within the application...

DEBIAN-CVE-2024-29511

Artifex Ghostscript before 10.03.1, when Tesseract is used for OCR, has a directory traversal issue that allows arbitrary file reading and writing of error messages to arbitrary files via OCRLanguage. For example, exploitation can use debugfile /tmp/out and userpatternsfile /etc/passwd...

UBUNTU-CVE-2024-29511

Artifex Ghostscript before 10.03.1, when Tesseract is used for OCR, has a directory traversal issue that allows arbitrary file reading and writing of error messages to arbitrary files via OCRLanguage. For example, exploitation can use debugfile /tmp/out and userpatternsfile /etc/passwd...

DEBIAN-CVE-2022-30636

httpTokenCacheKey uses path.Base to extract the expected HTTP-01 token value to lookup in the DirCache implementation. On Windows, path.Base acts differently to filepath.Base, since Windows uses a different path separator \ vs. /, allowing a user to provide a relative path, i.e...

Important: Red Hat Security Advisory: qemu-kvm security update

An update for qemu-kvm is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...