CVE-2022-42125

CVE-2022-42125 is a Zip slip vulnerability in Liferay’s FileUtil.unzip affecting Liferay Portal 7.4.3.5–7.4.3.35 and Liferay DXP 7.4 update 1–34. The issue allows an attacker to create or overwrite files on the filesystem by deploying a malicious plugin/module. Root cause: Zip slip in FileUtil.un...

CVE-2022-34482

An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an executable extension, and by extension potentially tricked the user into executing malicious code. While very similar, this is a separate issue from...

Privilege Escalation

webkit2gtk is vulnerable to privilege escalation. The vulnerability exists due to a VFS syscalls that manipulate its filesystem namespace that allows an attacker to escalate its privilege...

CVE-2020-5237

Multiple relative path traversal vulnerabilities in the oneup/uploader-bundle before 1.9.3 and 2.1.5 allow remote attackers to upload, copy, and modify files on the filesystem potentially leading to arbitrary code execution via the 1 filename parameter to BlueimpController.php; the 2 dzchunkindex...

Code injection

In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to another user's file on the underlying filesystem, then manipulate the user's data...

CVE-2017-1000438

In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to another user's file on the underlying filesystem, then manipulate the user's data...

CVE-2017-5946

The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses "../" pathname substrings to write arbitrary files to the filesystem...

Server: Deserialization of Untrusted Data in core

Due to the deserialization of unstrusted data in core an attacker might be able to delete arbitrary files from the filesystem or executing arbitrary SQL queries. This issue has been found in a widely used third-party library, we have removed the component due to general quality concerns from the...

Oracle Forms / Reports Remote Code Execution Exploit

This Metasploit module uses two vulnerabilities in Oracle forms and reports to get remote code execution on the host. The showenv url can be used to disclose information about a server. A second vulnerability that allows arbitrary reading and writing to the host filesystem can then be used to wri...

HP StorageWorks File Migration Agent Unauthorized Access

The remote HP StorageWorks File Migration Agent does not have any integrated authentication mechanism. An attacker can exploit this issue to modify archives and retrieve credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...