4398 matches found
PT-2013-1657
Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description The issue allows local users to bypass intended access restrictions and create or overwrite arbitrary files via shell output redirection. This is due to improper input filtering in the...
CVE-2012-4122: Improper Input Validation
The CLI parser in Cisco NX-OS allows local users to bypass intended access restrictions, and overwrite or create arbitrary files, via shell output redirection, aka Bug IDs CSCts56672 and CSCts56669...
CVE-2013-3543: Undefined Security Weakness
The AXIS Media Control AMC ActiveX control AxisMediaControlEmb.dll 6.2.10.11 for AXIS network cameras allows remote attackers to create or overwrite arbitrary files via a file path to the 1 StartRecord, 2 SaveCurrentImage, or 3 StartRecordMedia methods...
PT-2013-4472
Name of the Vulnerable Software and Affected Versions AXIS Media Control AMC ActiveX control AxisMediaControlEmb.dll version 6.2.10.11 Description The issue allows remote attackers to create or overwrite arbitrary files. This can be achieved by providing a file path to certain methods, specifical...
Arbitrary file creation in AbstractRendererExporterImpl
To reproduce: 1. Create a new space. 2. Create a new page. 3. Attach a file called test.txt to the page. 3. Edit the page, and add an image with the URL: code /confluence/s/download/attachments/pageid//../../../../../../../../../../../../tmp/test.txt code \pageid\ must be replaced with the actual...
Arbitrary file creation in AbstractRendererExporterImpl
To reproduce: 1. Create a new space. 2. Create a new page. 3. Attach a file called test.txt to the page. 3. Edit the page, and add an image with the URL: code /confluence/s/download/attachments/pageid//../../../../../../../../../../../../tmp/test.txt code \pageid\ must be replaced with the actual...
KingView 6.53 - ActiveX Remote File Creation / Overwrite (KChartXY)
Exploit for windows platform in category local exploits arg1="..................................\WINDOWS\win.ini" target.SaveToFile arg1 0day.today 2018-03-13...
cfme: CFME 2.0 multiple zip file upload path traversal vulnerabilities
Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms Management Engine 2.0 allow remote attackers to create and overwrite arbitrary files via a .. dot dot in the filename parameter to the 1 log, 2 upload, or 3 linuxpkgs method...
Low: Red Hat Security Advisory: Red Hat Storage 2.0 security, bug fix, and enhancement update #6
Updated Red Hat Storage 2.0 packages that fix multiple security issues, various bugs, and add one enhancement are now available. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
KingView 6.53 - KChartXY ActiveX File Creation Overwrite
KingView 6.53 - KChartXY ActiveX File Creation Overwrite arg1="..................................\WINDOWS\win.ini" target.SaveToFile arg1...
KingView 6.53 - 'KChartXY' ActiveX File Creation / Overwrite
arg1="..................................\WINDOWS\win.ini" target.SaveToFile arg1...
National Instruments Installer Framework Multiple ActiveX Arbitrary File Creation
An arbitrary file writing vulnerability exists in the National Instruments Installer Framework...
Pligg CMS 2.0.0rc2 - CSRF File Creation Vulnerability
Exploit for php platform in category web applications -Create File by CSRF Exploit- " 0day.today 2018-02-15...
Pligg CMS 2.0.0rc2 - Cross-Site Request Forgery (File Creation)
Pligg CMS 2.0.0rc2 - Cross-Site Request Forgery File Creation --------------------------------------------------- Exploit Title: Pligg CMS - CSRF Vulnerability Author: DaOne Vendor Homepage: http://pligg.com/ Download link: https://github.com/Pligg/pligg-cms/archive/2.0.0rc2.zip Category:...
Pligg CMS 2.0.0rc2 - Cross-Site Request Forgery (File Creation)
--------------------------------------------------- Exploit Title: Pligg CMS - CSRF Vulnerability Author: DaOne Vendor Homepage: http://pligg.com/ Download link: https://github.com/Pligg/pligg-cms/archive/2.0.0rc2.zip Category: webapps/php Version: 2.0.0rc2 + old versions...
phpMyAdmin 3.5.x < 3.5.8.1 / 4.x < 4.0.0-rc3 Multiple Vulnerabilities
Binary data 6933.prm...
CVE-2013-4668
Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to...
DEBIAN-CVE-2013-4668
Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to...
PT-2013-5119
Name of the Vulnerable Software and Affected Versions File Roller versions 3.6.x through 3.6.3 File Roller versions 3.8.x through 3.8.2 File Roller versions 3.9.x through 3.9.2 Description The issue allows remote attackers to create arbitrary files via a crafted archive that is not properly handl...
CVE-2013-4668: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to...