Server-Side Request Forgery (SSRF) in appwrite/appwrite

Description An authenticated SSRF vulnerability exists in appwrite's webhooks / tasks feature. The gopher:// protocol can be used to cause code execution on the Redis server that comes along with appwrite. The attacker must know the IP address of the redis-server which can be done by creating...

The vulnerability of software for modeling, designing, and drawing in AutoCAD, related to the disclosure of information in error-prone areas of data, allows attackers to write arbitrary files.

The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to the disclosure of information in the erroneous data area when processing DWG files. Exploiting this vulnerability can allow attackers to write arbitrary files...

USN-5078-2 squashfs-tools vulnerabilities

USN-5078-1 fixed several vulnerabilities in Squashfs-Tools. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Etienne Stalmans discovered that Squashfs-Tools mishandled certain malformed SQUASHFS files. An attacker could use this vulnerability to write...

Adobe Incopy 缓冲区错误漏洞

Adobe InCopy is a professional word processing program from Adobe that is integrated with Adobe InDesign. Adobe InCopy 16.3.1, 16.3 and earlier versions are vulnerable to a memory out-of-bounds access vulnerability. An attacker could exploit the vulnerability to achieve arbitrary file system writ...

apache-flink: directory traversal attack allows remote file writing through the REST API

Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, through a maliciously modified HTTP HEADER. The files can be written to any location accessible by Flink 1.5.1. All users should upgrade to Flink 1.11.3 or...

CVE-2021-38573

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname is not validated...

CVE-2021-38565

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows writing to arbitrary files via submitForm...

Foxit PDF Reader和Foxit PDF Editor 安全漏洞

Foxit PDF Reader and Foxit PDF Editor are both products of Foxit China. Foxit PDF Reader is a PDF reader and Foxit PDF Editor is a PDF editor. A security vulnerability exists in versions prior to 11.0.1, which can be exploited to allow an attacker to write arbitrary files via submitForm...

Directory Traversal

Overview bikeshed is a pre-processor for spec documents. Affected versions of this package are vulnerable to Directory Traversal. This can occur when an untrusted source file containing include, include-code or include-raw block is processed. The contents of arbitrary files could be disclosed in...

go-unarr 路径遍历漏洞

go-unarr is an open source go language library for decompressing RAR, TAR, ZIP and 7z archives. go-unarr version 0.1.1 is vulnerable to a directory traversal vulnerability that could be exploited to write arbitrary files on the system via specially crafted TAR archives...

CVE-2021-32016

An issue was discovered in JUMP AMS 3.6.0.04.009-2487. A JUMP SOAP endpoint permitted the writing of arbitrary files to a user-controlled location on the remote filesystem with user-controlled content via directory traversal, potentially leading to remote code and command execution...

JUMP 路径遍历漏洞

JUMP is an asset management solution from the French company JUMP. version 3.6.0.04.009-2487 of JUMP AMS contains a security vulnerability that stems from the fact that the application allows arbitrary files to be written to a user-controlled location on a remote file system with user-controlled...

Echo ShareCare 代码问题漏洞

ShareCare is a clinical and financial software system from Echo Group. A security vulnerability exists in Echo ShareCare version 8.15.5, which stems from the file upload functionality in "Access/DownloadFeedMnt/FileUploadUpd.cfm" that is susceptible to an unrestricted upload vulnerability via the...

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from incorrect restrictions on the path to the restricted catalog. This allows attackers to write arbitrary files into the device’s file system.

The vulnerability of the Magento Commerce development and management software platform is related to incorrect restrictions on the path name used to access the restricted catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files to the device’s file system...

CVE-2021-29087

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in webapi component in Synology DiskStation Manager DSM before 6.2.3-25426-3 allows remote attackers to write arbitrary files via unspecified vectors...

CVE-2021-32557

It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...

CVE-2021-32557

It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...

Code injection

It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...

CVE-2021-32557 apport process_report() arbitrary file write

It was discovered that the processreport function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks...

CVE-2021-32557

CVE-2021-32557 fixes a vulnerability in Ubuntu Apport where process_report() in data/whoopsie-upload-all could write arbitrary files via symlinks. The CVSSv3.1 vector (LOCAL, LOW to MEDIUM/LOW privileges, I and A HIGH) points to a LOCAL attack with high impact on integrity and availability. Affec...