CVE-2024-11839 Insecure Deserialization via Runbooks Imports

Deserialization of Untrusted Data vulnerability in PlexTrac Runbooks modules which allows Object Injection and arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1...

CVE-2024-11833

CVE-2024-11833 describes a Path Traversal on PlexTrac that permits arbitrary file writes due to improper limitation of a pathname to a restricted directory. Affected software: PlexTrac versions 1.61.3 through 2.8.0 (i.e., affected “from 1.61.3 before 2.8.1”). Underlying root cause: pathname restr...

CVE-2024-11833 Arbitrary Directory Write via Runbooks Artifact Upload

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in PlexTrac allows arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1...

CVE-2024-11834: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in PlexTrac allows arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1...

PT-2024-17280 · Plextrac · Plextrac

Name of the Vulnerable Software and Affected Versions: PlexTrac versions 1.61.3 through 2.8.1 Description: The issue is related to a Path Traversal vulnerability, which allows arbitrary file writes due to improper limitation of a pathname to a restricted directory. This enables writing files...

PT-2024-17286

Name of the Vulnerable Software and Affected Versions PlexTrac versions 1.61.3 through 2.8.1 Description The issue is related to the deserialization of untrusted data in PlexTrac, specifically in the Runbooks modules, allowing object injection and arbitrary file writes. This enables attackers to...

CVE-2024-11839: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in PlexTrac Runbooks modules which allows Object Injection and arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1...

PlexTrac 安全漏洞

PlexTrac is a penetration test reporting and management platform from the US-based PlexTrac, Inc. A security vulnerability exists in PlexTrac versions prior to 1.61.3 through 2.8.1, which stems from a path traversal vulnerability caused by the presence of improperly restricted pathnames to...

PlexTrac 安全漏洞

PlexTrac is a penetration test reporting and management platform from the US-based PlexTrac, Inc. A security vulnerability exists in PlexTrac versions prior to 1.61.3 through 2.8.1, which stems from a path traversal vulnerability caused by the presence of improperly restricted pathnames to...

USN-7153-1 php7.0, php7.2 vulnerability

It was discovered that PHP incorrectly handled long string inputs in two database drivers. An attacker could possibly use this issue to write files in locations they would not normally have access to. CVE-2024-11236...

ComfyUI-Impact-Pack 产品安全漏洞

ComfyUI-Impact-Pack is a custom node pack for ComfyUI by the individual developer of Dr.Lt.Data. A security vulnerability exists in ComfyUI-Impact-Pack that stems from a lack of field validation, is susceptible to path traversal attacks, can lead to writing arbitrary files to the file system, and...

VulnCheck KEV: CVE-2024-5827

Vanna v0.3.4 is vulnerable to SQL injection in its DuckDB integration exposed to its Flask Web APIs. Attackers can inject malicious SQL training data and generate corresponding queries to write arbitrary files on the victim's file system, such as backdoor.php with contents . This can lead to...

The vulnerability of Kanboard project management software lies in the improper restriction of the path name to the restricted access directory. This allows a hacker to execute arbitrary PHP code on the server and write to files.

The vulnerability of Kanboard project management software relates to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary PHP code on the server and write data to files...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the asset upload functionality. An attacker can place files in unintended locations on the server by uploading files with specially crafted filenames. Details A Directory Traversal attack also known as path...

CVE-2024-41973: Path Traversal: '.../...//'

A low privileged remote attacker can specify an arbitrary file on the filesystem which may lead to an arbitrary file writes with root privileges...

PT-2024-29673 · Wago · Cc100 0751-9X01 +10

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A low privileged remote attacker can specify an arbitrary file on the filesystem, which may lead to arbitrary file writes with root privileges. This iss...

GHSA-88H5-6W7M-5W56 jj vulnerable to path traversal via crafted Git repositories

Impact Specially crafted Git repositories can cause jj to write files outside the clone. Patches Fixed in 0.23.0. Workarounds Not much other than to not clone repositories from untrusted sources. References Here's the original report from @joernchen: When cloning a crafted Git repository it is...

The vulnerability of the encryption component in Sophos Intercept X software allows a perpetrator to write arbitrary files.

The vulnerability of the encryption component of Sophos Intercept X software is related to the use of unmanaged third-party components. Exploiting this vulnerability could allow a hacker to write arbitrary files...

Google safearchive 安全漏洞

Google safearchive is a constructed security library for working with tar and zip archives from Google USA. A security vulnerability exists in Google safearchive, which stems from a path traversal on a case-insensitive file system, allowing an attacker to write to arbitrary files via an archive...

LocalAI 安全漏洞

LocalAI is a free, open source alternative to OpenAI from the individual developer Ettore Di Giacinto. A security vulnerability exists in LocalAI version 2.17.1, which stems from mishandling of automatic archive extraction, allowing arbitrary file writes that could lead to remote code execution R...