Advantech iView DeviceTreeTable exportInventoryTable Directory Traversal File Creation Vulnerability

This vulnerability allows remote attackers to create arbitrary files on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the exportInventoryTable method of the DeviceTreeTable class...

Advantech iView PSTable exportPSInventoryTable Directory Traversal File Creation Vulnerability

This vulnerability allows remote attackers to create arbitrary files on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the exportPSInventoryTable method of the PSTable class. The...

Advantech iView Path Traversal Vulnerability

Advantech iView is a device management application for the energy, water and wastewater industries. A path traversal vulnerability exists in Advantech iView 5.7 and earlier versions, which can be exploited by attackers to create/download arbitrary files, limit system availability and remotely...

CVE-2020-16245: Improper Limitation of a Pathname to a Restricted Directory

Advantech iView, Versions 5.7 and prior. The affected product is vulnerable to path traversal vulnerabilities that could allow an attacker to create/download arbitrary files, limit system availability, and remotely execute code...

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges the creation of the system.data file is prone to symlink attacks. The tss user can be used to create or corrupt existing files which could possibly lead to a DoS attack.

...

USN-4461-1 ark vulnerability

Dominik Penner discovered that Ark did not properly sanitize zip archive files before performing extraction. An attacker could use this to construct a malicious zip archive that, when opened, would create files outside the extraction directory...

CVE-2020-5609: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 includes CENTUM CS 3000 Small R3.08.10 to R3.09.50, CENTUM VP includes CENTUM VP Small, Basic R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allows a remote unauthenticated attacker to crea...

Acronis: Arbitrary file creation via symlink attack on syncagentsrv (Acronis Sync Agent Service)

Issue class description Arbitrary file creation is a vulnerability that allows attacker to create file in arbitrary location within filesystem. This includes protected directories, such as C:\Windows, C:\windows\system32 and "C:\Program Files". If in addition, attacker has control over the file...

CVE-2020-15593

CVE-2020-15592/15593 (SteelCentral Aternity Agent 11.0.0.120, Windows) : The NVD entries describe a privilege-escalation and code-execution risk due to insecure inter-process communication. An IPC channel (AternityAgentAssistantIpc) allows any system user to retrieve a serialized object and remot...

CVE-2020-15593: Undefined Security Weakness

SteelCentral Aternity Agent 11.0.0.120 on Windows mishandles IPC. It uses an executable running as a high privileged Windows service to perform administrative tasks and collect data from other processes. It distributes functionality among different processes and uses IPC Inter-Process Communicati...

CVE-2020-15121

In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current...

CVE-2020-15121

In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current...

CVE-2020-15121: Improper Neutralization of Special Elements used in an OS Command

In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current...

PT-2020-14202

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 4.5.0 Description The issue arises from malformed PDB file names in the PDB server path, leading to shell injection. This can be triggered by opening an executable in radare2 and running idpd, which initiates the...

CVE-2020-14507: Improper Limitation of a Pathname to a Restricted Directory

Advantech iView, versions 5.6 and prior, is vulnerable to multiple path traversal vulnerabilities that could allow an attacker to create/download arbitrary files, limit system availability, and remotely execute code...

PT-2020-14050

Name of the Vulnerable Software and Affected Versions Advantech iView versions 5.6 and prior Description The issue allows an attacker to create or download arbitrary files, limit system availability, and remotely execute code due to multiple path traversal vulnerabilities. Recommendations For...

CVE-2020-15100

In freewvs before 0.1.1, a user could create a large file that freewvs will try to read, which will terminate a scan process. This has been patched in 0.1.1...

PYSEC-2020-232

In freewvs before 0.1.1, a user could create a large file that freewvs will try to read, which will terminate a scan process. This has been patched in 0.1.1...

PYSEC-2020-232

In freewvs before 0.1.1, a user could create a large file that freewvs will try to read, which will terminate a scan process. This has been patched in 0.1.1...

CVE-2020-15100

The CVE affects freewvs prior to 0.1.1 where a user can craft a large file that freewvs reads, causing the scan process to terminate. Root cause: uncontrolled reading of large input leading to process termination. Impact: denial of service on the scanning process (partial availability impact per ...