2504 matches found
Drupal file REST resource does not properly validate
In Drupal 8 prior to 8.3.4; The file REST resource does not properly validate some fields when manipulating files. A site is only affected by this if the site has the RESTful Web Services rest module enabled, the file REST resource is enabled and allows PATCH requests, and an attacker can get or...
CVE-2022-23742
Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links...
Design/Logic Flaw
Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links...
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
PoC exploit for CVE-2022-1388, a vulnerability in the BIG-IP iCo...
F5 BIG-IP Missing Authentication Vulnerability
F5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deletion of files, or disabling services...
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
Vuln Impact This vulnerability may allow an unauthenticated...
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
CVE-2022-1388 BIG-IP iControl REST vulnerability CVE-2022-1388...
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
CVE-2022-1388 https://support.f5.com/csp/article/K23605346 T...
CVE-2022-24888 Possible Injection in Nextcloud Server
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 20.0.14.4, 21.0.8, 22.2.4, and 23.0.1, it is possible to create files and folders that have leading and trailing \n, \r, \t, and \v characters. The server rejects files and folders...
Exploit for Code Injection in Vmware Identity_Manager
!CVE-2022-22954https://socialify.git.ci/bewhale/CVE-2022-2295...
Exploit for Improper Initialization in Linux Linux_Kernel
PoC exploit for CVE-2022-0847, a kernel arbitrary file manipulat...
CVE-2022-23793
An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Extracting an specifilcy crafted tar package could write files outside of the intended path...
Design/Logic Flaw
The parsing mechanism that processes certain file types does not provide input sanitization for file paths. This may allow an attacker to craft malicious files that, when opened by Rockwell Automation Connected Components Workbench v12.00.00 and prior, can traverse the file system. If successfull...
GHSA-VW83-H3MQ-3QWJ Path Traversal in Spring-integration-zip
Addresses partial fix in CVE-2018-1263. Spring-integration-zip, versions prior to 1.0.4, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive affects other archives as well, bzip2, tar, xz, war, cpio, 7z, that holds path traversal filenames. So...
Exploit for Improper Initialization in Linux Linux_Kernel
Dirty Pipe automatic root exploit CVE-2022-0847 !eaeasse...
CVE-2022-25359
On ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 devices, unauthenticated remote attackers can overwrite, delete, or create files...
Code injection
On ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 devices, unauthenticated remote attackers can overwrite, delete, or create files...
CVE-2022-25359
On ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 devices, unauthenticated remote attackers can overwrite, delete, or create files...
CVE-2021-22448
There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause unauthorized read and write of some files...
CVE-2022-25365
CVE-2022-25365 affects Docker Desktop for Windows, stated as: before 4.5.1 allows attackers to move arbitrary files due to an incomplete fix for CVE-2022-23774. Connected evidence includes a GitHub exploit repository (exploit for CVE-2022-25365) listing PoC files (poc.py, createsymlink.exe, junct...