EUVD-2024-23537

Malicious code in bioql PyPI...

EUVD-2024-23536

Malicious code in bioql PyPI...

Hgiga OAKlouds 安全漏洞

HGiga OAKlouds is an enterprise collaborative work portal network of China Henderson Technology HGiga Company. It is used for just-in-time communication and resource reservation. HGiga OAKlouds suffers from a security vulnerability that originates from the fact that an unauthorized remote attacke...

The vulnerability of the file loading function of the corporate cloud storage system HGiga OAKlouds allows a attacker to execute arbitrary code.

The vulnerability of the file loading function of the corporate cloud storage system HGiga OAKlouds relates to the unlimited loading of dangerous types of files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending a specially crafted file...

CVE-2024-26261

The functionality for file download in HGiga OAKlouds' certain modules contains an Arbitrary File Read and Delete vulnerability. Attackers can put file path in specific request parameters, allowing them to download the file without login. Furthermore, the file will be deleted after being download...

CVE-2024-26260

The functionality for synchronization in HGiga OAKlouds' certain moudules has an OS Command Injection vulnerability, allowing remote attackers to inject system commands within specific request parameters. This enables the execution of arbitrary code on the remote server without permission...

CVE-2024-26260

The functionality for synchronization in HGiga OAKlouds' certain moudules has an OS Command Injection vulnerability, allowing remote attackers to inject system commands within specific request parameters. This enables the execution of arbitrary code on the remote server without permission...

Command injection

The functionality for synchronization in HGiga OAKlouds' certain moudules has an OS Command Injection vulnerability, allowing remote attackers to inject system commands within specific request parameters. This enables the execution of arbitrary code on the remote server without permission...

Design/Logic Flaw

The functionality for file download in HGiga OAKlouds' certain modules contains an Arbitrary File Read and Delete vulnerability. Attackers can put file path in specific request parameters, allowing them to download the file without login. Furthermore, the file will be deleted after being download...

CVE-2024-26261 Hgiga OAKlouds - Arbitrary File Read And Delete

The functionality for file download in HGiga OAKlouds' certain modules contains an Arbitrary File Read and Delete vulnerability. Attackers can put file path in specific request parameters, allowing them to download the file without login. Furthermore, the file will be deleted after being download...

CVE-2024-26261

CVE-2024-26261 affects HGiga OAKlouds where certain modules expose an Arbitrary File Read and Delete via path parameters, enabling attackers to download files without authentication and subsequently delete them. The vulnerability stems from a path traversal/unsafe file access flaw in the file-dow...

CVE-2024-26260 Hgiga OAKlouds - Command Injection

The functionality for synchronization in HGiga OAKlouds' certain moudules has an OS Command Injection vulnerability, allowing remote attackers to inject system commands within specific request parameters. This enables the execution of arbitrary code on the remote server without permission...

CVE-2024-26260

HGiga OAKlouds is affected by an OS command injection in the synchronization function of certain modules, enabling remote command execution via specific request parameters. Root cause is input/sanitization in those parameters leading to arbitrary code execution on the server; CVSS v3.1 base score...

CVE-2024-26260 Hgiga OAKlouds - Command Injection

The functionality for synchronization in HGiga OAKlouds' certain moudules has an OS Command Injection vulnerability, allowing remote attackers to inject system commands within specific request parameters. This enables the execution of arbitrary code on the remote server without permission...

HGiga OAKlouds Operating System Command Injection Vulnerability

Hgiga Oaklouds is an enterprise collaborative work portal network of China Henderson Technology Hgiga Company. It is used for just-in-time communication and resource reservation. An operating system command injection vulnerability exists in HGiga OAKlouds. A remote attacker could exploit this...

HGiga OAKlouds Path Traversal Vulnerability

Hgiga Oaklouds is an enterprise collaborative work portal network of China Henderson Technology Hgiga Company. It is used for just-in-time communication and resource reservation. A path traversal vulnerability exists in HGiga OAKlouds. An attacker can exploit this vulnerability to read and delete...

PT-2024-21314 · Hgiga · Hgiga Oaklouds

Name of the Vulnerable Software and Affected Versions: HGiga OAKlouds affected versions not specified Description: The issue concerns an Arbitrary File Read and Delete vulnerability in the file download functionality of certain HGiga OAKlouds modules. Attackers can exploit this by specifying a fi...

CVE-2023-25909

HGiga OAKlouds file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary command or disrupt service...

CVE-2023-25909

HGiga OAKlouds file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary command or disrupt service...

CVE-2023-25909

HGiga OAKlouds has a file upload function that does not restrict dangerous file types, enabling an unauthenticated remote attacker to upload and execute arbitrary executables and disrupt service. Multiple sources (NVD, CVE listings, and related reports) describe this as an arbitrary file upload f...