20346 matches found
CrushFTP Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'CrushFTP Unauthenticated RCE', 'Description' = %q This exploit module leverages an Improperly Controlled Modification of Dynamically-Determined...
nginxWebUI 路径遍历漏洞
nginxWebUI is an nginx web configuration tool. A path traversal vulnerability exists in nginxWebUI, which stems from the failure of the dir parameter of the findCountByQuery method of the /adminPage/www/addOver file to correctly filter for special elements in the path of a resource or file. An...
GHSA-MWC7-64WG-PGVJ NiceGUI allows potential access to local file system
NiceGUI is an easy-to-use, Python-based UI framework. A local file inclusion is present in the NiceUI leaflet component when requesting resource files under the /nicegui/version/resources/key/path:path route. As a result any file on the backend filesystem which the web server has access to can be...
ROS-20240412-03
Atril document viewer vulnerability is related to incorrect path restriction to a restricted directory. Exploitation of the vulnerability could allow an attacker to write arbitrary files anywhere in the file system...
CVE-2024-29937
NFS in a BSD derived codebase, as used in OpenBSD through 7.4 and FreeBSD through 14.0-RELEASE, allows remote attackers to execute arbitrary code via a bug that is unrelated to memory corruption...
OpenBSD 安全漏洞
OpenBSD is a cross-platform, BSD-based, UNIX-like operating system from the Canadian OpenBSD project team. A security vulnerability exists in OpenBSD NFS versions 7.4 through 14.0 that originates from a vulnerability that allows remote attackers to execute arbitrary code...
Apache Zeppelin Input Validation Error Vulnerability (CNVD-2024-17934)
Apache Zeppelin is a Web-based open source laptop application from the Apache USA Foundation. The program supports interactive data analysis and collaborative documentation. Apache Zeppelin suffers from an input validation error vulnerability that can be exploited by an attacker to view a server...
Qdrant 代码问题漏洞
Qdrant is a vector similarity search engine and vector database. A code issue vulnerability exists in Qdrant. An attacker exploiting this vulnerability could upload and overwrite any file on the file system...
lollms-webui 安全漏洞
LoLLMs is a Web UI for a large language multimodal system by the individual developer Saifeddine ALOUI. A security vulnerability exists in lollms-webui. An attacker exploiting this vulnerability could read any file on a file system accessible to the web server...
Esri Portal for ArcGIS Path Traversal Vulnerability
Esri Portal For ArcGIS is a component of esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A path traversal vulnerability exists in Esri Portal for ArcGIS that stems from the program failing to properly filter for specif...
CVE-2024-29066
Windows Distributed File System DFS Remote Code Execution Vulnerability...
CVE-2024-28905
Microsoft Brokering File System Elevation of Privilege Vulnerability...
CVE-2024-28904
Microsoft Brokering File System Elevation of Privilege Vulnerability...
CVE-2024-28907
Microsoft Brokering File System Elevation of Privilege Vulnerability...
CVE-2024-28904
Microsoft Brokering File System Elevation of Privilege Vulnerability...
CVE-2024-28907
Microsoft Brokering File System Elevation of Privilege Vulnerability...
CVE-2024-28905
Microsoft Brokering File System Elevation of Privilege Vulnerability...
CVE-2024-26226
Windows Distributed File System DFS Information Disclosure Vulnerability...