135 matches found
CVE-2024-55459
An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the getfile function...
PT-2025-3118 · Keras · Keras
Name of the Vulnerable Software and Affected Versions: Keras version 3.7.0 Description: The issue allows attackers to write arbitrary files to the user's machine by downloading a crafted tar file through the get file function. This enables attackers to potentially compromise the user's system by...
CVE-2024-52677
HkCms = v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.php...
PT-2024-35410 · Hkcms · Hkcms
Name of the Vulnerable Software and Affected Versions: HkCms versions prior to 2.3.2.240702 Description: The issue concerns a file upload vulnerability in the getFileName method located in /app/common/library/Upload.php. Recommendations: For versions prior to 2.3.2.240702, consider disabling the...
PT-2024-16571 · WordPress · Code Embed
Name of the Vulnerable Software and Affected Versions: Code Embed plugin for WordPress versions up to 2.5 Description: The Code Embed plugin for WordPress is vulnerable to Server-Side Request Forgery via the ce get file function. This makes it possible for authenticated attackers, with...
PT-2024-38101 · WordPress · Tainacan
Name of the Vulnerable Software and Affected Versions: Tainacan plugin for WordPress versions up to, and including, 0.21.7 Description: The issue is related to a missing capability check on the get file function, which is also vulnerable to directory traversal. This allows authenticated attackers...
UBUNTU-CVE-2024-40899
In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefilesondemandgetfd We got the following issue in a fuzz test of randomly issuing the restore command: ================================================================== BUG: KASAN:...
PT-2024-36068 · Unknown · Phpmybackuppro
Name of the Vulnerable Software and Affected Versions: PhpMyBackupPro version 2.3 Description: A vulnerability has been discovered that could allow an attacker to execute XSS through the "/phpmybackuppro/get file.php" API endpoint, using the view parameter. This could allow an attacker to create ...
PT-2024-25731 · Smanga · Smanga
Name of the Vulnerable Software and Affected Versions: smanga version 3.2.7 Description: The issue is related to a path traversal vulnerability. It occurs because the file parameter at the "PHP/get file flow.php" interface is not properly filtered, allowing for arbitrary file reading...
The vulnerability in the get_file_size function of the share.cgi file on QTS, QuTS hero, and QuTScloud operating systems, as well as on Qnap network devices, allows a hacker to execute arbitrary code.
The vulnerability of the getfilesize function in the share.cgi file of QTS, QuTS, Hero, and QuTScloud operating systems, as well as QNAP network devices, is related to the possibility of buffer overflow based on a stack-based mechanism. Exploiting this vulnerability allows a remote attacker to...
PT-2023-26374 · Ivanti · Ivanti Endpoint Manager
Name of the Vulnerable Software and Affected Versions: Ivanti Endpoint Manager versions prior to 2022 SU4 Description: A file disclosure issue exists in the GetFileContents SOAP action exposed via "/landesk/managementsuite/core/core.secure/OsdScript.asmx". The application does not sufficiently...
Ivanti Endpoint Manager Security Vulnerability
Ivanti Endpoint Manager is a suite of endpoint security managers from Ivanti USA.Contents is a product analytics solution and innovation enabler for the Countly Team team. Helps teams track product performance, customer journeys and behaviors across mobile, web and desktop applications. A securit...
SUSE CVE-2022-24828
Composer is a dependency manager for the PHP programming language. Integrators using Composer code to call VcsDriver::getFileContent can have a code injection vulnerability if the user can control the $file or $identifier argument. This leads to a vulnerability on packagist.org for example where...
SUSE CVE-2022-37049
The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parsempls at common/get.c:150. NOTE: this is different from CVE-2022-27942...
PT-2022-27882 · Nbnbk · Nbnbk
Name of the Vulnerable Software and Affected Versions: nbnbk affected versions not specified Description: The issue is related to an arbitrary file read vulnerability. This vulnerability is exploited via the /api/Index/getFileBinary API endpoint. Recommendations: At the moment, there is no...
CVE-2022-42965 Exponential ReDoS in snowflake-connector-python leads to denial of service
An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented getfiletransfertype method...
Appneta Tcpreplay 缓冲区错误漏洞
Appneta Tcpreplay is a suite of open source utilities for editing and replaying network traffic on UNIX-based operating systems from Appneta, Inc. A security vulnerability exists in Tcpreplay version v4.4.1, which stems from a heap-based buffer overflow contained in parsempls in common/get.c:150 ...
nbnbk 代码问题漏洞
nbnbk is based on thinkphp5 cms management system , B2C e-commerce open source php mall system platform , tp5 open source cms , thinkphp enterprise website source code for blogs , small and medium-sized enterprises to build a station secondary development . nbnbk 3 version of a security...
composer 参数注入漏洞
composer is a software application . It provides a declaration to manage and install dependencies for PHP projects. composer suffers from a parameter injection vulnerability that stems from a lack of input validation. An attacker can execute commands via VcsDriver::getFileContent...