Lucene search
+L

7932 matches found

OSV
OSV
added 2016/08/02 4:59 p.m.4 views

CVE-2016-6232

Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ dot dot slash in a filename in an archive file, related to KNewsstuff downloads...

7.5CVSS7.6AI score
SaveExploits0References10
CNVD
CNVD
added 2016/07/29 12:0 a.m.47 views

Libupnp Arbitrary File Write Vulnerability

libupnp is a portable open source provides an API and open source code UPnP development toolkit . A security vulnerability exists in libupnp. A remote attacker can exploit this vulnerability to read and write arbitrary files on the file system...

7.5CVSS7.7AI score0.2662EPSS
SaveExploits4References1
Cvelist
Cvelist
added 2016/07/26 5:0 p.m.29 views

CVE-2016-3992

cronic before 3 allows local users to write to arbitrary files via a symlink attack on a 1 cronic.out.$$, 2 cronic.err.$$, or 3 cronic.trace.$$ file in /tmp...

6.2AI score0.0035EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2016/07/26 5:0 p.m.28 views

CVE-2016-3992

cronic before 3 allows local users to write to arbitrary files via a symlink attack on a 1 cronic.out.$$, 2 cronic.err.$$, or 3 cronic.trace.$$ file in /tmp...

6.2CVSS6.2AI score0.0035EPSS
SaveExploits0
CVE
CVE
added 2016/07/26 5:0 p.m.63 views

CVE-2016-3992

CVE-2016-3992 affects cronic prior to version 3, enabling local users to write arbitrary files via a symlink attack against cronic.out.$$, cronic.err.$$, or cronic.trace.$$ in /tmp. Root cause: symlink manipulation in temporary files. Practical impact: local privilege or data tampering risk with ...

6.2CVSS6.1AI score0.0035EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2016/07/18 12:0 a.m.5 views

Arbitrary File Write Vulnerability on Server Side of NJ MAGAPP Products

MAGAPP is a forum mobile client management system developed for local urban communities, including iOS, Android cell phone, PC management system, independent Discuz and multi-platform sharing components, able to dock the urban community website database and run independently on the local...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2016/07/18 12:0 a.m.4 views

UBUNTU-CVE-2016-6232

Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ dot dot slash in a filename in an archive file, related to KNewsstuff downloads...

7.5CVSS7.2AI score0.04429EPSS
SaveExploits1References7
Prion
Prion
added 2016/07/13 1:59 a.m.26 views

Race condition

Race condition in the kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to bypass the Low Integrity protection mechanism and write to files by leveraging unspecified object-manager features, aka "Windows File System...

1.2CVSS6.6AI score0.00926EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:0 a.m.9 views

The vulnerability of the Security SiteProtector System, a website security protection system, allows a hacker to write arbitrary files.

The vulnerability of the Security SiteProtector System’s security protection mechanism exists due to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability allows a malicious actor to remotely write arbitrary files...

5.5CVSS5.6AI score0.01362EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2016/06/30 5:59 p.m.39 views

CVE-2016-4971

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource...

8.8CVSS3.3AI score
SaveExploits0References13
OSV
OSV
added 2016/06/30 5:59 p.m.5 views

ALPINE-CVE-2016-4971

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource...

8.8CVSS7.1AI score0.45935EPSS
SaveExploits8References1
Cvelist
Cvelist
added 2016/06/30 5:0 p.m.33 views

CVE-2016-4971

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource...

8.5AI score0.45935EPSS
SaveExploits8References13
CVE
CVE
added 2016/06/30 5:0 p.m.269 views

CVE-2016-4971

CVE-2016-4971 affects GNU Wget prior to 1.18. The issue occurs when following an HTTP redirect to an FTP resource: the filename provided by the server is trusted, which can cause wget to overwrite a local file with a name from the redirected resource. This could potentially allow arbitrary file o...

8.8CVSS8.3AI score0.45935EPSS
SaveExploits8References13Affected Software1
Packet Storm
Packet Storm
added 2016/06/30 12:0 a.m.45 views

RockLoader SQL Injection / Shell Upload

Exploit Title: RockLoader aka Bart Malware SQLi and shell file upload Date: 27-06-2016 Software Link Leak: https://github.com/colocation/RockLoader-source Exploit Author: Danail Velev Contact: ICQ: 209030 / [email protected] Website: http://colocation.bg/ Category: webapps / malware / private...

0.3AI score
SaveExploits0
OSV
OSV
added 2016/06/23 12:59 a.m.6 views

CVE-2016-1435

Cisco 8800 phones with software 11.01 do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access, aka Bug ID CSCuz03014...

7CVSS5.9AI score0.00272EPSS
SaveExploits0References2
zdt
zdt
added 2016/06/16 12:0 a.m.39 views

Gemalto Sentinel License Manager 18.0.1.55505 - Directory Traversal

Exploit for windows platform in category web applications Gemalto Sentinel License Manager 18.0.1 Directory Traversal Vulnerability Vendor: Gemalto NV | SafeNet, Inc Product web page: http://www.gemalto.com | http://www.safenet-inc.com Affected version: 18.0.1.55505 Summary: The Sentinel License...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2016/06/16 12:0 a.m.32 views

Gemalto Sentinel License Manager 18.0.1 Directory Traversal

Gemalto Sentinel License Manager 18.0.1 Directory Traversal Vulnerability Vendor: Gemalto NV | SafeNet, Inc Product web page: http://www.gemalto.com | http://www.safenet-inc.com Affected version: 18.0.1.55505 Summary: The Sentinel License Manager enforces and manages licensing in multi-user...

7.4AI score
SaveExploits0
OSV
OSV
added 2016/06/10 12:0 a.m.7 views

UBUNTU-CVE-2016-4971

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource...

8.8CVSS7.3AI score0.45935EPSS
SaveExploits8References4
UbuntuCve
UbuntuCve
added 2016/06/10 12:0 a.m.23 views

CVE-2016-4971

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource...

8.8CVSS7AI score0.45935EPSS
SaveExploits8References3
CNVD
CNVD
added 2016/06/07 12:0 a.m.10 views

Arbitrary File Write Vulnerability in SiteServer CMS Backend

SiteServer CMS is a website content management system developed by Beijing Billion Software Technology Development Co., Ltd. and is widely used in state ministries, group companies and large-scale portal sites. The information collection function in the management background of SiteServer CMS doe...

6.8AI score
SaveExploits0
Rows per page
Query Builder