CVE-2024-23459

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7...

CVE-2023-41971

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Windows allows a system file to be overwritten.This issue affects Client Connector on Windows: before 3.7...

CVE-2023-41971 Windows ZCC Upgrade DoS And Privilege Escalation Through RPC Control

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Windows allows a system file to be overwritten.This issue affects Client Connector on Windows: before 3.7...

CVE-2024-23459: Improper Link Resolution Before File Access

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7...

PT-2024-13024

Name of the Vulnerable Software and Affected Versions Zscaler Client Connector on Windows versions prior to 3.7 Description An Improper Link Resolution Before File Access 'Link Following' issue allows a system file to be overwritten. Recommendations For versions prior to 3.7, update to version 3....

PT-2024-19881

Name of the Vulnerable Software and Affected Versions Zscaler Client Connector on Mac versions prior to 3.7 Description An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten. Recommendations For...

CVE-2023-41971: Improper Link Resolution Before File Access

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Windows allows a system file to be overwritten.This issue affects Client Connector on Windows: before 3.7...

CVE-2023-50915

The GOG Galaxy (Beta) game client (versions 2.0.67.2 through 2.0.71.2 ) contains a vulnerability in GalaxyClientService.exe . This issue stems from improper file handling where the privileged service writes logs as NT AUTHORITY/SYSTEM into a directory where standard users possess read, write, and...

PT-2024-27570 · Scadapro · Scadapro

Name of the Vulnerable Software and Affected Versions: ScadaPro affected versions not specified Description: The entire parent directory - C:ScadaPro and its sub-directories and files are configured by default to allow users, including unprivileged users, to write or overwrite files...

RHEL 6 / 7 : rh-ruby24-ruby (RHSA-2017:3485)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3485 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

RHEL 6 / 7 : rh-ruby23-ruby (RHSA-2018:0585)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0585 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

RHEL 6 / 7 : rh-ruby22-ruby (RHSA-2018:0583)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0583 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

CVE-2024-32258

The network server of fceux 2.7.0 has a path traversal vulnerability, allowing attackers to overwrite any files on the server without authentication by fake ROM...

UBUNTU-CVE-2024-32258

The network server of fceux 2.7.0 has a path traversal vulnerability, allowing attackers to overwrite any files on the server without authentication by fake ROM...

CVE-2024-32258

The network server of fceux 2.7.0 has a path traversal vulnerability, allowing attackers to overwrite any files on the server without authentication by fake ROM...

PT-2024-24474 · Fceux · Fceux

Name of the Vulnerable Software and Affected Versions: fceux version 2.7.0 Description: The network server of fceux has a path traversal vulnerability, allowing attackers to overwrite any files on the server without authentication by using a fake ROM. Recommendations: For fceux version 2.7.0, as ...

CVE-2024-32258

The network server of fceux 2.7.0 has a path traversal vulnerability, allowing attackers to overwrite any files on the server without authentication by fake ROM...

CVE-2024-32258

The network server of fceux version 2.7.0 contains a path traversal vulnerability that allows unauthenticated attackers to overwrite any file on the server by providing a fake ROM . The root cause is that the server fails to filter special characters in ROM names sent by the client during remote ...

fceux 路径遍历漏洞

fceux is an open source NES Emulator for Windows and Unix from TAS Emulators on GitHub. A path traversal vulnerability exists in fceux version 2.7.0, which stems from a vulnerability that allows an attacker to overwrite any file on a server without authentication via a fake ROM...

PT-2024-40332 · Jadx · Jadx

Name of the Vulnerable Software and Affected Versions: jadx affected versions not specified Description: The issue arises when jadx parses a resource file, specifically with an escape problem related to style files. This can lead to overwriting other files in the directory when saving the...