PDF Generator Web App Using TCPDF 1.0 Local File Inclusion Vulnerability

PDF Generator Web App using TCPDF version 1.0 suffers from a local file inclusion vulnerability. Title: PDF Generator Web App using TCPDF 1.0 LFI To RCE Author: Hejap Zairy Vendor: https://www.sourcecodester.com/php/15243/pdf-generator-web-app-using-tcpdf-and-phpoop-free-source-code.html...

Cross site scripting

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution...

Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker with read/write privileges to the application to write files or execute arbitrary code on the...

SAP Business One File Loading Execution

The vulnerability of the SAP Business One resource management system lies in the lack of restrictions on file loading. Exploiting this vulnerability allows a malicious actor to load and execute any desired file remotely...

Samsung Video Player Privilege Mismanagement Vulnerability

Samsung Video Player is a built-in system video player application optimized for the Samsung Galaxy series from Samsung South Korea. A privilege mismanagement vulnerability exists in Samsung Video Player versions prior to 7.3.15.30, which stems from Samsung Video Player's faulty privilege...

CVE-2022-24927

Improper privilege management vulnerability in Samsung Video Player prior to version 7.3.15.30 allows attackers to execute video files without permission...

CVE-2021-46165

Zoho ManageEngine Desktop Central before 10.0.662, during startup, launches an executable file from the batch files, but this file's path might not be properly defined...

Apple macOS High Sierra 安全漏洞

Apple macOS High Sierra is a proprietary operating system developed by Apple for Mac computers. Apple macOS High Sierra is vulnerable to a security flaw that could be exploited by attackers to execute non-executable text files via SMB shares...

PT-2021-24024

Name of the Vulnerable Software and Affected Versions: Wolters Kluwer TeamMate AM version 12.4 Update 1 Description: The issue concerns the mishandling of attachment uploads, allowing an authenticated user to download and execute malicious files. Recommendations: For version 12.4 Update 1, consid...

CVE-2021-44035: Undefined Security Weakness

Wolters Kluwer TeamMate AM 12.4 Update 1 mishandles attachment uploads, such that an authenticated user may download and execute malicious files...

CVE-2021-43176

The GOautodial API prior to commit 3c3a979 made on October 13th, 2021 takes a user-supplied “action” parameter and appends a .php file extension to locate and load the correct PHP file to implement the API call. Vulnerable versions of GOautodial do not sanitize the user input that specifies the...

CVE-2021-43176

The GOautodial API prior to commit 3c3a979 made on October 13th, 2021 takes a user-supplied “action” parameter and appends a .php file extension to locate and load the correct PHP file to implement the API call. Vulnerable versions of GOautodial do not sanitize the user input that specifies the...

CVE-2021-43176

The GOautodial API prior to commit 3c3a979 made on October 13th, 2021 takes a user-supplied “action” parameter and appends a .php file extension to locate and load the correct PHP file to implement the API call. Vulnerable versions of GOautodial do not sanitize the user input that specifies the...

PT-2021-12700

Name of the Vulnerable Software and Affected Versions: ActiveX module related to NeoRS remote support program affected versions not specified Description: The issue allows a remote attacker to download and execute a remote file due to improper parameter validation of the StartNeoRS function in th...

CVE-2021-36335

Dell EMC CloudLink 7.1 and all prior versions contain an Improper Input Validation Vulnerability. A remote low privileged attacker, may potentially exploit this vulnerability, leading to execution of arbitrary files on the server...

PT-2021-21216

Name of the Vulnerable Software and Affected Versions Dell EMC CloudLink versions prior to 7.1 Description The issue allows a remote unauthenticated attacker to potentially exploit the vulnerability, leading to the execution of arbitrary files on the end user system. This could result in...

CVE-2021-36314: Undefined Security Weakness

Dell EMC CloudLink 7.1 and all prior versions contain an Arbitrary File Creation Vulnerability. A remote unauthenticated attacker, may potentially exploit this vulnerability, leading to the execution of arbitrary files on the end user system...

Dell Emc CloudLink 输入验证错误漏洞

Dell EMC CloudLink is a flexible data encryption and key management solution for data encryption in public, private, and hybrid cloud environments.Dell EMC CloudLink 7.1 and earlier versions are vulnerable to an input validation error that could be exploited by a remote, low privilege attacker to...

CVE-2021-36335: Improper Input Validation

Dell EMC CloudLink 7.1 and all prior versions contain an Improper Input Validation Vulnerability. A remote low privileged attacker, may potentially exploit this vulnerability, leading to execution of arbitrary files on the server...

PT-2021-21237

Name of the Vulnerable Software and Affected Versions Dell EMC CloudLink versions prior to 7.1 Description The issue is related to improper input validation, which could be exploited by a remote low-privileged attacker to execute arbitrary files on the server. Recommendations For versions prior t...