CVE-2023-4089

On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected...

CVE-2023-4089

CVE-2023-4089 affects multiple WAGO devices (e.g., PFC200, PFC100, CC100, Edge Controller, and related Touch Panels) with an externally controlled reference to a resource in another sphere. The vulnerability enables a remote attacker with administrative privileges to access files they already cou...

Medium: docker

Issue Overview: A flaw was found in the userns-remap feature of Docker. The root user in the remapped namespace can modify files under /var/lib/docker/, leading to possible privilege escalation to the root user in the host. The highest threat from this vulnerability is to data integrity...

CVE-2023-45689

CVE-2023-45689 is a path traversal information-disclosure flaw in South River Technologies’ Titan MFT and Titan SFTP servers running on Windows and Linux. The root cause is insufficient path validation in the admin interface, enabling an authenticated user with administrative privileges to read a...

PT-2023-6179 · South River Technologies · Titan Mft +1

Name of the Vulnerable Software and Affected Versions: South River Technologies' Titan MFT and Titan SFTP servers affected versions not specified Description: The issue is related to insufficient path validation in the Titan MFT and Titan SFTP servers, allowing an authenticated attacker with...

The software’s vulnerability in integrating the SpaceLogic system management system with the C-Bus SpaceLogic C-Bus Toolkit allows unauthorized access to files by attackers, due to deficiencies in path name limitation.

The vulnerability of the SpaceLogic system integration software with the C-Bus SpaceLogic C-Bus Toolkit is related to deficiencies in path name limitation. Exploiting this vulnerability can allow an intruder to gain unauthorized access to files...

Server-side Request Forgery (SSRF)

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the injection of arbitrary URLs. An attacker can read files outside the application's path boundary by forcing the application to make...

CVE-2023-26366 Validate Your Inputs | Server-Side Request Forgery (SSRF) (CWE-918)

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A high-privileged authenticated attacker can force the application t...

CVE-2023-37939

An exposure of sensitive information to an unauthorized actor vulnerability CWE-200 in FortiClient for Windows 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions, Linux 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions and Mac 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all...

Code injection

The Statutory Reporting application has a vulnerable file storage location, potentially enabling low privileged attacker to read server files with minimal impact on confidentiality...

The vulnerability of the StorageKit component in operating systems such as iPadOS, iOS, macOS, tvOS, and watchOS allows attackers to gain unauthorized access to protected information.

The vulnerability of the StorageKit component in iPadOS, iOS, macOS, tvOS, and watchOS is related to an improper definition of the link before accessing the file. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2023-43271

Incorrect access control in 70mai a500s v1.2.119 allows attackers to directly access and delete the video files of the driving recorder through ftp and other protocols...

CVE-2023-40299

Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLDINSERTLIBRARIES environment variable...

Insomnia security breach

Insomnia is an open source, cross-platform API client from Insomnia for GraphQL, REST, WebSockets, server-sent events, and gRPC. A security vulnerability exists in Insomnia version 2023.4.0 that stems from the use of the DYLDINSERTLIBRARIES environment variable that can execute code and access...

PT-2023-15520 · Unknown · Netman 204

Name of the Vulnerable Software and Affected Versions: NetMan 204 affected versions not specified Description: The issue allows an unauthenticated remote attacker to read a file, specifically config.cgi, which contains sensitive information such as credentials. Recommendations: At the moment, the...

CVE-2023-42132

FD Application Apr. 2022 Edition Version 9.01 and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker...

Xxe

FD Application Apr. 2022 Edition Version 9.01 and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker...

The vulnerability of the SonicWall Secure Mobile Access (SMA 1000) software lies in its ability to bypass authentication procedures. This allows attackers to gain access to arbitrary files and directories stored outside of the root web directory.

The vulnerability of the SonicWall Secure Mobile Access SMA 1000 security access device lies in its ability to bypass authentication procedures. Exploiting this vulnerability allows a malicious actor to gain access to arbitrary files and directories stored outside of the root web directory...

WhiteHSBG JNDIExploit Path Traversal Vulnerability

WhiteHSBG JNDIExploit is a tool for JNDI injection exploitation, heavily referencing the code of the Rogue JNDI project, supporting direct in-memory shell implantation, and integrating common ways to bypass higher versions of the JDK, suitable for use with automation tools. A path traversal...

PT-2023-31997 · Sourcecodester · Sourcecodester Engineers Online Portal

Name of the Vulnerable Software and Affected Versions: SourceCodester Engineers Online Portal version 1.0 Description: A critical vulnerability was found in the SourceCodester Engineers Online Portal, affecting the file downloadable student.php. The manipulation of the id argument leads to SQL...