Cosmoshop 'pwd.cgi'任意文件创建漏洞

Bugtraq ID:66323 CosmoShop是基于Magento的云电商系统。 攻击者可通过使用特制的请求利用该漏洞在服务器上创建任意文件。 0 Cosmoshop 目前没有详细解决方案： http://www.cosmoshop.de/...

Atlassian JIRA < 6.0.4 Arbitrary File Creation

According to its self-reported version number, the version of Atlassian JIRA hosted on the remote web server is prior to version 6.0.4. It is, therefore, potentially affected by an arbitrary file creation vulnerability due to a flaw in the Issue Collector plugin in which the 'filename' POST...

ES File Explorer vulnerable to directory traversal

Overview ES File Explorer provided by ES APP Group contains an issue in processing file names, which may result in a directory traversal CWE-22 vulnerability. Ryohei Koike of Sakura Information Systems Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

CVE-2014-1975: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the R-Company Unzipper application 1.0.1 and earlier for Android allows remote attackers to overwrite or create arbitrary files via a crafted filename...

PT-2014-4397

Name of the Vulnerable Software and Affected Versions R-Company Unzipper versions 1.0.1 and earlier Description The issue allows remote attackers to overwrite or create arbitrary files via a crafted filename, potentially leading to unauthorized access or data modification. Recommendations For...

CVE-2014-0135 rubygem-kafo: temporary file creation vulnerability when creating /tmp/default_values.yaml

Kafo before 0.3.17 and 0.4.x before 0.5.2, as used by Foreman, uses world-readable permissions for defaultvalues.yaml, which allows local users to obtain passwords and other sensitive information by reading the file...

Mediawiki 1.18.0 Information Disclosure

CVE-2014-1686 -- Information disclosure: webserver source path in Mediawiki 1.18.0 When a user create a new file eg: image with a name containing , it leads to webserver file path disclosure, after having uploaded the file, when thumbail creation occurs. I did not succeed in obtained remote shell...

Atlassian JIRA Issue Collector插件目录遍历漏洞

CVE ID:CVE-2014-2313 Atlassian JIRA是一款基于J2EE技术的项目问题跟踪以及管理软件。 Atlassian JIRA Issue Collector插件存在目录遍历漏洞，允许远程攻击者利用漏洞创建任意文件。 0 Atlassian JIRA 厂商补丁： Atlassian ----- Atlassian JIRA 6.0.4已经修复该漏洞，建议用户下载更新： https://www.atlassian.com...

PT-2014-4617

Name of the Vulnerable Software and Affected Versions Atlassian JIRA versions prior to 6.0.4 Description A directory traversal issue exists, allowing remote attackers to create arbitrary files. Recommendations For versions prior to 6.0.4, update to version 6.0.4 or later to resolve the issue...

CVE-2014-2314: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Issue Collector plugin in Atlassian JIRA before 6.0.4 allows remote attackers to create arbitrary files via unspecified vectors...

CVE-2014-2313: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Importers plugin in Atlassian JIRA before 6.0.5 allows remote attackers to create arbitrary files via unspecified vectors...

CVE-2014-2089

ILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that leads to creation of a .php file with a certain clientid pathname...

SuSE 11.2 / 11.3 Security Update : hplip (SAT Patch Numbers 8775 / 8777)

hplip was updated to fix three security issues : - Some local file overwrite problems via predictable /tmp filenames were fixed. CVE-2013-0200 - hplip used an insecure polkit DBUS API polkit-process subject race condition which could lead to local privilege escalation. CVE-2013-4325 - hplip uses...

CVE-2014-0809: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Gapless Player SimZip aka Simple Zip Viewer application before 1.2.1 for Android allows remote attackers to overwrite or create arbitrary files via a crafted filename...

NCH Software Express Burn Plus 4.68缓冲区溢出漏洞

NCH Software是适用于Windows和Mac OS X的音频，视频，听写，商业和计算机实用软件的厂商。 该漏洞是由于项目文件处理时的边界错误引起的，当用户打开例如特制的.EBP文件时，导致一个unicode缓冲区溢出。成功利用此漏洞可能允许执行任意代码。 0 NCH Software Express Burn Plus 4.68 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.nchsoftware.com/ use Cwd; use LWP::Simple; print "\n...

PT-2014-8699

Name of the Vulnerable Software and Affected Versions GNU binutils versions 2.24 and earlier Description The issue allows local users to delete arbitrary files or create arbitrary files via directory traversal vulnerabilities in GNU binutils. This can be achieved by using a .. dot dot or full pat...

PT-2014-3850

Name of the Vulnerable Software and Affected Versions CGENE Security File Manager Pro versions 1.0.6 and earlier CGENE Security File Manager Trial versions 1.0.6 and earlier Description The issue allows attackers to overwrite or create arbitrary files via unspecified vectors, potentially leading ...

PT-2014-3851

Name of the Vulnerable Software and Affected Versions NeoFiler application versions 5.4.3 and earlier NeoFiler Free application versions 5.4.3 and earlier NeoFiler Lite application versions 2.4.2 and earlier Description The issue allows attackers to overwrite or create arbitrary files via...

CVE-2014-0802: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the aokitaka ZIP with Pass application 4.5.7 and earlier, and ZIP with Pass Pro application 6.3.8 and earlier, for Android allows attackers to overwrite or create arbitrary files via unspecified vectors...

CVE-2014-0804: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the CGENE Security File Manager Pro application 1.0.6 and earlier, and Security File Manager Trial application 1.0.6 and earlier, for Android allows attackers to overwrite or create arbitrary files via unspecified vectors...