96 matches found
Path traversal
Path traversal in the static file service in Iodine less than 0.7.33 allows an unauthenticated, remote attacker to read files outside the public folder via malicious URLs...
CVE-2024-22050
Path traversal vulnerability in iodine’s static file server (Iodine) affects versions
CVE-2024-22050 Iodine Static File Server Path Traversal Vulnerability
Path traversal in the static file service in Iodine less than 0.7.33 allows an unauthenticated, remote attacker to read files outside the public folder via malicious URLs...
CVE-2024-22050: Improper Limitation of a Pathname to a Restricted Directory
Path traversal in the static file service in Iodine less than 0.7.33 allows an unauthenticated, remote attacker to read files outside the public folder via malicious URLs...
iodine Path Traversal Vulnerability
Iodine is a fast and concurrent web application server for real-time Ruby applications from Bo Individual Developers. A path traversal vulnerability exists in Iodine versions prior to 0.7.33, which stems from a path traversal in the static file service, and can be exploited by a remote attacker t...
Maggioli SpA Appalti & Contratti 安全漏洞
Maggioli SpA Appalti & Contratti is a modular platform of Maggioli SpA. It consists of several integrated web applications to support Italian public administrations in the computerization and telematics management of their processes. A security vulnerability exists in Maggioli SpA Appalti &...
Malicious code in ems-file-service (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4e58e84318b996fb78326860131dbdcee2904ae6f4b7376bb39f942323bc8da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2731 Malicious code in ems-file-service (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4e58e84318b996fb78326860131dbdcee2904ae6f4b7376bb39f942323bc8da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Synology DiskStation Manager Command Injection Vulnerability (CNVD-2022-67853)
Synology DiskStation Manager DSM is an operating system for use on networked storage servers NAS from Synology Inc. in Taiwan, China. The operating system manages information such as data, files, photos, music and more. A command injection vulnerability exists in Synology DiskStation Manager DSM,...
CVE-2022-22688
Improper neutralization of special elements used in a command 'Command Injection' vulnerability in File service functionality in Synology DiskStation Manager DSM before 6.2.4-25556-2 allows remote authenticated users to execute arbitrary commands via unspecified vectors...
CVE-2022-22688
Improper neutralization of special elements used in a command 'Command Injection' vulnerability in File service functionality in Synology DiskStation Manager DSM before 6.2.4-25556-2 allows remote authenticated users to execute arbitrary commands via unspecified vectors...
Command injection
Improper neutralization of special elements used in a command 'Command Injection' vulnerability in File service functionality in Synology DiskStation Manager DSM before 6.2.4-25556-2 allows remote authenticated users to execute arbitrary commands via unspecified vectors...
CVE-2022-22688
Improper neutralization of special elements used in a command 'Command Injection' vulnerability in File service functionality in Synology DiskStation Manager DSM before 6.2.4-25556-2 allows remote authenticated users to execute arbitrary commands via unspecified vectors...
CVE-2022-22688: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command 'Command Injection' vulnerability in File service functionality in Synology DiskStation Manager DSM before 6.2.4-25556-2 allows remote authenticated users to execute arbitrary commands via unspecified vectors...
PT-2022-15634 · Synology · Synology Diskstation Manager
Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.2.4-25556-2 Description: The issue is related to improper neutralization of special elements used in a command, allowing remote authenticated users to execute arbitrary commands via...
CVE-2022-22688
Improper neutralization of special elements used in a command 'Command Injection' vulnerability in File service functionality in Synology DiskStation Manager DSM before 6.2.4-25556-2 allows remote authenticated users to execute arbitrary commands via unspecified vectors...
APSB21-95 : Security update available for Adobe Character Animator
Adobe has released an update for Adobe Character Animator for Windows and macOS. This update resolves critical, important and moderate vulnerabilities. Successful exploitation could lead to arbitrary code execution and file service reads, privilege escalation, and application denial of service...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
CVE-2020-0796 Windows SMBv3 LPE Exploit Authors Daniel García Gutiérrez @danigargu Manuel Blanco Parajón @dialluvioso References https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0796 https://www.synacktiv.com/posts/exploit/im-smbghost-daba-dee-daba-da.html...
GHSA-66Q9-F7FF-MMX6 Local file inclusion vulnerability in http4s
Impact This vulnerability applies to all users of: org.http4s.server.staticcontent.FileService org.http4s.server.staticcontent.ResourceService org.http4s.server.staticcontent.WebjarService Path escaping URI normalization is applied incorrectly. Requests whose path info contain ../ or // can expos...
HomeGuard Pro 9.3.1 - Insecure Folder Permissions
HomeGuard Pro 9.3.1 - Insecure Folder Permissions Exploit Title: HomeGuard Pro 9.3.1 - Insecure Folder Permissions Exploit Author: boku Date: 2020-02-13 Vendor Homepage: https://veridium.net Software Link: https://veridium.net/filesu/hg-pro/exe/HomeGuardPro-Setup.exe Version 9.3.1 Tested On:...