307 matches found
CVE-2024-40547
PublicCMS v4.0.202302.e contains an arbitrary file content replacement vulnerability reachable via the /admin/cmsTemplate/replace endpoint. Affects the PublicCMS 4.0.202302.e release; root cause details describe arbitrary file content replacement through the specified API. Impact is privacy/integ...
CVE-2024-40547
PublicCMS v4.0.202302.e was discovered to contain an arbitrary file content replacement vulnerability via the component /admin/cmsTemplate/replace...
CVE-2024-2747
CWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could cause privilege escalation when a valid user replaces a trusted file name on the system and reboots the machine...
CVE-2024-2747
CWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could cause privilege escalation when a valid user replaces a trusted file name on the system and reboots the machine...
Fedora 39 : nano (2024-8abde32a6e)
The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-8abde32a6e advisory. fix emergency file replacement vulnerability Resolves: rhbz2277586 Tenable has extracted the preceding description block directly from the Fedora security...
Fedora 40 : nano (2024-93f31f5de6)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-93f31f5de6 advisory. fix emergency file replacement vulnerability Resolves: rhbz2277586 Tenable has extracted the preceding description block directly from the Fedora security...
The vulnerability of Check Point Endpoint Security for Windows, a comprehensive security solution for network endpoints, allows an attacker to replace arbitrary files in the system and execute arbitrary code.
The vulnerability of Check Point Endpoint Security for Windows, a comprehensive security solution for network endpoints, is related to an improper definition of symbolic links before accessing files. Exploiting this vulnerability allows an attacker to replace arbitrary files in the system and...
GL.iNet AR300M v4.3.7 Arbitrary File Read - CVE-2023-46455 Exploit
!/usr/bin/env python3 Exploit Title: GL.iNet = 4.3.7 Arbitrary File Write Google Dork: intitle:"GL.iNet Admin Panel" Date: XX/11/2023 Exploit Author: Michele 'cyberaz0r' Di Bonaventura Vendor Homepage: https://www.gli-net.com Software Link:...
Improper Access Control
Kinto Attachment is vulnerable to Improper Access Control. The vulnerability is due to improper access control where the attachment file of an existing record can be replaced if the user has "read" permission on one of the parent...
rpm: races with chown/chmod/capabilities calls during installation
A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system...
The vulnerability of the Nessus Network Monitor security control tool, related to errors in privilege management, allows a perpetrator to elevate their privileges to the level of NT AUTHORITY\SYSTEM.
The vulnerability of the Nessus Network Monitor security control tool is related to errors in privilege management. Exploiting this vulnerability allows a malicious actor to elevate their privileges to the NT AUTHORITY\SYSTEM level by replacing the file…...
CVE-2023-5622
Under certain conditions, Nessus Network Monitor could allow a low privileged user to escalate privileges to NT AUTHORITY\SYSTEM on Windows hosts by replacing a specially crafted file...
PT-2023-9690 · Mediacms · Mediacms
Name of the Vulnerable Software and Affected Versions: MediaCMS affected versions not specified Description: The issue is related to improper authorization in the MediaCMS content management system. It allows a remote attacker to delete directories in the file system and replace user file content...
The vulnerability of the TightVNC remote desktop access system, related to errors in privilege management, allows a intruder to escalate their privileges.
The vulnerability of the TightVNC remote desktop access system is related to errors in privilege management. Exploiting this vulnerability allows a malicious actor to increase their privileges by replacing files…...
CVE-2023-43496
Jenkins 2.423 and earlier, LTS 2.414.1 and earlier creates a temporary file in the system temporary directory with the default permissions for newly created files when installing a plugin from a URL, potentially allowing attackers with access to the system temporary directory to replace the file...
Jenkins Security Vulnerabilities
Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project. A security vulnerability exists in Jenkins, which stems from the fact that installing a plugin from a URL creates a...
CVE-2023-40985
An issue was discovered in Webmin 2.100. The File Manager functionality allows an attacker to exploit a Cross-Site Scripting XSS vulnerability. By providing a malicious payload, an attacker can inject arbitrary code, which is then executed within the context of the victim's browser when any file ...
RubyGems 输入验证错误漏洞
RubyGems is a Ruby package manager from the RubyGems organization. The product is primarily used to distribute and manage Ruby packages. RubyGems suffers from an input validation error vulnerability that stems from insufficient input validation and allows malicious actors to replace files...
CVE-2023-37200
A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause loss of confidentiality when replacing a project file on the local filesystem and after manual restart of the server...
CVE-2023-37200
A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause loss of confidentiality when replacing a project file on the local filesystem and after manual restart of the server...