Design/Logic Flaw

Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on files modified within the HTTP file management interface, resulting in files being saved with world-readable and world-writable permissions. If a sensitive system file were edited this way, a low-privilege user may...

CVE-2020-8634

Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on files modified within the HTTP file management interface, resulting in files being saved with world-readable and world-writable permissions. If a sensitive system file were edited this way, a low-privilege user may...

PT-2020-20244

Name of the Vulnerable Software and Affected Versions Wing FTP Server version 6.2.3 Description The issue allows files modified within the HTTP file management interface to be saved with world-readable and world-writable permissions. This could potentially enable a low-privilege user to escalate...

February 11, 2020—KB4537776 (OS Build 10240.18486)

None None...

February 11, 2020—KB4537762 (OS Build 17134.1304)

None None...

February 11, 2020—KB4532691 (OS Build 17763.1039)

None None...

SharpStat - C# Utility That Uses WMI To Run "cmd.exe /c netstat -n", Save The Output To A File, Then Use SMB To Read And Delete The File Remotely

C utility that uses WMI to run "cmd.exe /c netstat -n", save the output to a file, then use SMB to read and delete the file remotely Description This script will attempt to connect to all the supplied computers and use WMI to execute cmd.exe /c netstat -n . The file the output is saved to is...

January 14, 2020—KB4534293 (OS Build 17134.1246)

None None...

CVE-2019-19732

translationmanagetext.ajax.php and various manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 directly insert values from the aSortDir0 and/or sSortDir0 parameter into a SQL string. This allows an attacker to inject their own SQL and manipulate the query, typically extracting data from th...

Security Bulletin: File Management Vulerability in IBM Watson Studio Local

Summary A security vulnerability involving symbolic links allowed arbitrary access to Watson Studio Local user directory. This vulnerability is addressed Vulnerability Details Third Party Entry: PSIRT-ADV0011814 DESCRIPTION: CVSS Base score: 8.8 CVSS Vector:...

File Upload Vulnerability in YunMOk Background Resource File Management

YunMOk is a general website management system under Nanchong Tiger Cloud Network Technology Co. There is a file upload vulnerability in the background resource file management of the cloud module, which can be exploited by an attacker to gain access to website administrator privileges...

CVE-2019-5211

The Huawei Share function of P20 phones with versions earlier than Emily-L29C 9.1.0.311 has an improper file management vulnerability. The attacker tricks the victim to perform certain operations on the mobile phone during file transfer. Because the file is not properly processed, successfully...

Design/Logic Flaw

The Huawei Share function of P20 phones with versions earlier than Emily-L29C 9.1.0.311 has an improper file management vulnerability. The attacker tricks the victim to perform certain operations on the mobile phone during file transfer. Because the file is not properly processed, successfully...

CVE-2019-5211

The Huawei Share function of P20 phones with versions earlier than Emily-L29C 9.1.0.311 has an improper file management vulnerability. The attacker tricks the victim to perform certain operations on the mobile phone during file transfer. Because the file is not properly processed, successfully...

CVE-2019-5211

The CVE-2019-5211 issue affects Huawei P20 devices with Huawei Share prior to Emily-L29C 9.1.0.311, caused by improper file management during file transfers. The vulnerability could allow an attacker to cause deletion of files on the victim’s device after tricking the user into certain operations...

CVE-2019-5211: Undefined Security Weakness

The Huawei Share function of P20 phones with versions earlier than Emily-L29C 9.1.0.311 has an improper file management vulnerability. The attacker tricks the victim to perform certain operations on the mobile phone during file transfer. Because the file is not properly processed, successfully...

Huawei P20 File Mismanagement Vulnerability

Huawei P20 is a smartphone from Chinese company Huawei Huawei. A security vulnerability exists in the Huawei Share feature in Huawei P20, which stems from improper file management. An attacker can exploit the vulnerability by tricking a user into performing certain actions on his or her phone,...

Security Advisory - Improper File Management Vulnerability in Huawei Share

The Huawei Share function of some Huawei phones has an improper file management vulnerability. The attacker tricks the victim to perform certain operations on the mobile phone during file transfer. Because the file is not properly processed, successfully exploit may cause some files on the victim...

October 8, 2019—KB4520011 (OS Build 10240.18368)

None None...

Code Execution Vulnerability in UCMS Backend File Management

UCMS is a simple open source content management system. A code execution vulnerability exists in the UCMS backend file management, which can be exploited by an attacker to gain control of the web server...