CVE-2021-26608: Missing Support for Integrity Check

An arbitrary file download and execution vulnerability was found in the HShell.dll of handysoft Co., Ltd groupware ActiveX module. This issue is due to missing support for integrity check of download URL or downloaded file hash...

CVE-2021-30664

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing a maliciously crafted file may lead to arbitrary code execution...

CVE-2021-30764

Processing a maliciously crafted file may lead to arbitrary code execution. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. This issue was addressed with improved checks...

CVE-2020-7832

A vulnerability improper input validation in the DEXT5 Upload solution allows an unauthenticated attacker to download and execute an arbitrary file via AddUploadFile, SetSelectItem, DoOpenFile function.CVE-2020-7832...

Input validation

A vulnerability improper input validation in the DEXT5 Upload solution allows an unauthenticated attacker to download and execute an arbitrary file via AddUploadFile, SetSelectItem, DoOpenFile function.CVE-2020-7832...

Raonwiz DEXT5 输入验证错误漏洞

Raonwiz DEXT5 is a set of HTML5-based file transfer solution from Raonwiz Korea. The product supports encrypted file transfer, form building, and other features. A security vulnerability exists in RAONWIZ DEXT5 that can be exploited by unauthenticated attackers to download and execute arbitrary...

PT-2021-12666

Name of the Vulnerable Software and Affected Versions: DEXT5 Upload solution affected versions not specified Description: The issue is related to improper input validation, allowing an unauthenticated attacker to download and execute arbitrary files. This can be achieved through the AddUploadFile...

CVE-2020-7832: Improper Input Validation

A vulnerability improper input validation in the DEXT5 Upload solution allows an unauthenticated attacker to download and execute an arbitrary file via AddUploadFile, SetSelectItem, DoOpenFile function.CVE-2020-7832...

CVE-2020-7865: Improper Input Validation

A vulnerabilityimproper input validation in the ExECM CoreB2B solution allows an unauthenticated attacker to download and execute an arbitrary file via httpDownload function. A successful exploit could allow the attacker to hijack vulnerable system...

PT-2021-12686

Name of the Vulnerable Software and Affected Versions: ExECM CoreB2B solution affected versions not specified Description: A vulnerability in the ExECM CoreB2B solution, due to improper input validation, allows an unauthenticated attacker to download and execute an arbitrary file via the...

CVE-2020-28594

A use-after-free vulnerability exists in the 3MFImporter::handleendmodel functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted 3MF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

PT-2021-6148

Name of the Vulnerable Software and Affected Versions SAP Business One version 10.0 Description The issue is related to a lack of restrictions on file uploads in the system, allowing a remote attacker to upload and execute arbitrary files. This can be done by an attacker with business...

Event Banner Plugin Unrestricted File Execution

The vulnerability of the Event Banner plugin for the WordPress content management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to download and execute arbitrary files remotely...

CVE-2021-29699

The CVE pertains to IBM Security Verify Access Docker 10.0.0. Affected product: IBM Security Verify Access Docker. Issue: remote privileged user could upload arbitrary files with dangerous file types that could be executed by a user. This description is supported by IBM’s security bulletin and th...

CVE-2021-29699: Unrestricted Upload of File with Dangerous Type

IBM Security Verify Access Docker 10.0.0 could allow a remote priviled user to upload arbitrary files with a dangerous file type that could be excuted by an user. IBM X-Force ID: 200600...

Security Bulletin: IBM Content Foundation on Cloud security vulnerability in WebSphere container

Summary There is a denial of service and Networking security vulnerabilities in WebSphere Application Server. Vulnerability Details CVEID: CVE-2019-4720 DESCRIPTION: IBM WebSphere Application Server is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote...

CVE-2020-7869: Improper Input Validation

An improper input validation vulnerability of ZOOK software remote administration tool could allow a remote attacker to create arbitrary file. The ZOOK viewer has the "Tight file CMD" function to create file. An attacker could create and execute arbitrary file in the ZOOK agent program using "Tig...

Privilege escalation

VMware Tools for Windows 11.x.y prior to 11.2.6, VMware Remote Console for Windows 12.x prior to 12.0.1 , VMware App Volumes 2.x prior to 2.18.10 and 4 prior to 2103 contain a local privilege escalation vulnerability. An attacker with normal access to a virtual machine may exploit this issue by...

CVE-2010-2525: Incorrect Authorization

A flaw was discovered in gfs2 file system’s handling of acls access control lists. An unprivileged local attacker could exploit this flaw to gain access or execute any file stored in the gfs2 file system...

Red Hat GFS2 安全漏洞

Red Hat GFS2 is a shared disk file system for Linux computer clusters from Red Hat, Inc. that allows all members of a cluster to have direct concurrent access to the same shared block storage, in contrast to a distributed file system that distributes data throughout the cluster. It allows all...