CVE-2024-6396

A vulnerability in the backuprun function in aimhubio/aim version 3.19.3 allows remote attackers to overwrite any file on the host server and exfiltrate arbitrary data. The vulnerability arises due to improper handling of the runhash and repo.path parameters, which can be manipulated to create an...

CVE-2025-0626

The CVE-2025-0626 issue concerns Contec CMS8000 CMS8000 Patient Monitor firmware where the monitor binary attempts to mount to a hard-coded routable IP, bypassing device network settings, and can enable the network interface if it is disabled. Triggered during a device update from the user menu, ...

CVE-2025-0659

A path traversal vulnerability exists in the Rockwell Automation DataEdge Platform DataMosaix Private Cloud. By specifying the character sequence in the body of the vulnerable endpoint, it is possible to overwrite files outside of the intended directory. A threat actor with admin privileges could...

CVE-2025-0659

DataMosaix Private Cloud (Rockwell Automation DataEdge Platform) is affected by a path traversal vulnerability. Affects an endpoint where supplying a particular character sequence in the request body allows overwriting files outside the intended directory. An attacker with admin privileges could ...

Rockwell Automation DataEdge Platform DataMosaix Private Cloud 安全漏洞

Rockwell Automation DataEdge Platform DataMosaix Private Cloud is an industrial data platform from Rockwell Automation USA designed to help organizations enable smart manufacturing, Internet of Things IoT and industrial data integration. Rockwell Automation DataEdge Platform DataMosaix Private...

CVE-2024-54520

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to overwrite arbitrary files...

CVE-2024-54520

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to overwrite arbitrary files...

SUSE SLES12 Security Update : git (SUSE-SU-2025:0197-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0197-1 advisory. - CVE-2024-32002: Fix recursive clones on case-insensitive filesystems that support symbolic links are susceptible to case confusion. bsc122416...

Security update for git

This update for git fixes the following issues: CVE-2024-32002: Fix recursive clones on case-insensitive filesystems that support symbolic links are susceptible to case confusion. bsc1224168 CVE-2024-32004: Fixed arbitrary code execution during local clones. bsc1224170 CVE-2024-32020: Fix file...

[SECURITY] [DSA 5846-1] libreoffice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5846-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 19, 2025 https://www.debian.org/security/faq -...

Debian dsa-5846 : fonts-opensymbol - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5846 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5846-1 [email protected] https://www.debian.org/securit...

BIT-PHP-MIN-2021-21706 ZipArchive::extractTo may extract outside of destination dir

In PHP versions 7.3.x below 7.3.31, 7.4.x below 7.4.24 and 8.0.x below 8.0.11, in Microsoft Windows environment, ZipArchive::extractTo may be tricked into writing a file outside target directory when extracting a ZIP file, thus potentially causing files to be created or overwritten, subject to OS...

CVE-2024-55566

ColPack 1.0.10 through 9a7293a has a predictable temporary file located under /tmp with a name derived from an unseeded RNG. The impact can be overwriting files or making ColPack graphing unavailable to other users...

CVE-2024-55566

ColPack 1.0.10 through 9a7293a has a predictable temporary file located under /tmp with a name derived from an unseeded RNG. The impact can be overwriting files or making ColPack graphing unavailable to other users...

CVE-2024-55566

ColPack 1.0.10 through 9a7293a has a predictable temporary file located under /tmp with a name derived from an unseeded RNG. The impact can be overwriting files or making ColPack graphing unavailable to other users...

CVE-2024-55566

CVE-2024-55566 affects ColPack 1.0.10 through 9a7293a. A predictable temporary file in /tmp (name derived from an unseeded RNG) can lead to overwriting files or making ColPack graphing unavailable to other users. The provided documents do not specify the exact patched version; Fedora advisories n...

Insecure File Upload

agnai is vulnerable to an Insecure File Upload. The vulnerability is due to insufficient validation of user-uploaded files, allows attackers to choose the location where the files are stored on the server. potentially leading to overwriting existing files or uploading files to unintended...

CVE-2024-52291

CraftCMS has a local file system validation bypass flaw (CVE-2024-52291) that can be triggered by a double file:// scheme to point the base filesystem at sensitive folders. The root cause stems from FileHelper::normalizePath only removing a leading file://, enabling bypass when a second file:// i...

Trend Micro VPN 安全漏洞

Trend Micro VPN is a best-of-breed virtual private network service from Trend Micro. A security vulnerability exists in Trend Micro VPN version 5.8.1012 and prior versions, which stems from a vulnerability to arbitrary file overwriting under certain conditions, resulting in elevated privileges...

PT-2024-25117 · Tiptel · Tiptel Ip 286

Name of the Vulnerable Software and Affected Versions: Tiptel IP 286 version 2.61.13.10 Description: The issue allows attackers to overwrite arbitrary files on the phone via the Ringtone upload function in the web interface. This is due to a Directory Traversal vulnerability. Recommendations: For...