4369 matches found
SharpZipLib 路径遍历漏洞
SharpZipLib ziplib, formerly known as NZipLib is an open source C compression and decompression library from the ICSharpCode Icsharpcode team for the .NET platform, which supports decompression and compression of Zip, GZip, BZip2, Tar and other formats. SharpZipLib has a security vulnerability th...
PT-2022-10095
Name of the Vulnerable Software and Affected Versions SharpZipLib versions 1.3.0 through 1.3.2 Description The issue affects SharpZipLib, a library for handling Zip, GZip, Tar, and BZip2 files. It arises from the lack of enforcement that the destination directory path ends with a slash, allowing...
nodejs-tar: Insufficient symlink protection due to directory cache poisoning using symbolic links allowing arbitrary file creation and overwrite
A flaw was found in the npm package "tar" aka node-tar. Extracting tar files that contain both a directory and a symlink with the same name, where the symlink and directory names in the archive entry used backslashes as a path separator, made it possible to bypass node-tar symlink checks on...
PT-2022-1620
Name of the Vulnerable Software and Affected Versions FUDforum affected versions not specified Description The issue is related to the lack of protection of the web page structure in FUDforum. It allows a remote attacker to execute arbitrary code when an administrator reads a message, and inject...
Directory traversal
CoreFTP Server before 727 allows directory traversal for file creation by an authenticated attacker via ../ in an HTTP PUT request...
Core FTP 路径遍历漏洞
Core FTP is a file transfer server. A security vulnerability previously existed in Core FTP Server 727 that allowed an authenticated attacker to perform directory traversal for file creation in an HTTP PUT request via . / for directory traversal for file creation...
CVE-2022-22836
CoreFTP Server before 727 allows directory traversal for file creation by an authenticated attacker via ../ in an HTTP PUT request...
PT-2022-15704
Name of the Vulnerable Software and Affected Versions CoreFTP Server versions prior to 727 Description The issue allows an authenticated attacker to perform directory traversal, enabling them to create files outside the intended directory structure by including ../ in an HTTP PUT request...
CVE-2021-39970
HwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this vulnerability may create any file with the system app permission...
CVE-2021-39970
HwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this vulnerability may create any file with the system app permission...
CVE-2021-39970
HwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this vulnerability may create any file with the system app permission...
Input validation
HwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this vulnerability may create any file with the system app permission...
CVE-2021-39970
HwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this vulnerability may create any file with the system app permission...
CVE-2021-39970: Improper Limitation of a Pathname to a Restricted Directory
HwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this vulnerability may create any file with the system app permission...
PT-2025-8224
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock can occur in the Ceph component of the Linux kernel when a system is mounted with wsync. The issue arises during the creation of a file with O RDWR where the i inline version...
The vulnerability of the configuration management system and the remote execution feature of SaltStack Salt allow a perpetrator to temporarily increase their privileges locally.
The vulnerability of the Configuration Management system and the remote execution of operations in SaltStack Salt is related to the check for rebooting minions. Exploiting this vulnerability could allow an attacker who has the ability to create files in the directory to locally escalate their...
The vulnerability of the Jenkins automation server, related to incorrect authentication procedures, allows attackers to create arbitrary files.
The vulnerability of the Jenkins automation server is related to an incorrect authentication process. Exploiting this vulnerability allows a malicious actor to remotely create arbitrary files...
The vulnerability of the TwinCAT OPC UA Server lies in errors in processing the relative path to the directory. This allows attackers to create and delete arbitrary files within the system.
The vulnerability of the TwinCAT OPC UA Server is related to errors in processing the relative path to the directory. Exploiting this vulnerability allows a malicious actor to create and delete arbitrary files within the system...
The vulnerability of the ZipArchive::extractTo function in the PHP interpreter allows a attacker to create or overwrite files.
The vulnerability of the ZipArchive::extractTo function in the PHP interpreter exists due to an incorrect limitation on the path name of the restricted directory. Exploiting this vulnerability could allow a malicious actor to create or re-record files remotely...
openSUSE 15 Security Update : nodejs12 (openSUSE-SU-2021:1574-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1574-1 advisory. - The parser in accepts requests with a space SP right after the header name before the colon. This can lead to HTTP Request Smuggling HRS ...