EUVD-2022-39849

Malicious code in bioql PyPI...

CVE-2022-24562

In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write access to the entire file-system with admin privileges on the victim's endpoint, which can result in data theft and remote code execution...

CVE-2022-37197

IOBit IOTransfer V4 is vulnerable to Unquoted Service Path...

Path traversal

IOBit IOTransfer V4 is vulnerable to Unquoted Service Path...

CVE-2022-37197

IOBit IOTransfer V4 is vulnerable to Unquoted Service Path...

CVE-2022-37197

IOBit IOTransfer V4 is vulnerable to Unquoted Service Path...

PT-2022-23867 · Iobit · Iobit Iotransfer

Name of the Vulnerable Software and Affected Versions: IOBit IOTransfer version 4 Description: The issue is related to an unquoted service path in IOBit IOTransfer. This could potentially allow for exploitation. Recommendations: For IOBit IOTransfer version 4, update to a newer version that fixes...

IOBit IOTransfer 代码问题漏洞

IOBit IOTransfer is an easy-to-use iOS file transfer tool, phone cleaner, and video downloader from IOBit. Easily transfer/synchronize/move/backup photos, music, videos, contacts and more. A security vulnerability exists in version V4 of IOBit IOTransfer, which stems from its unquoted service pat...

Remote code execution

In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write access to the entire file-system with admin privileges on the victim's endpoint, which can result in data theft and remote code execution...

CVE-2022-24562

In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write access to the entire file-system with admin privileges on the victim's endpoint, which can result in data theft and remote code execution...

CVE-2022-24562

IOTransfer 4.3.1.1561 exposes an unauthenticated remote-access flaw in the Airserv component. An attacker can send GET/POST requests to Airserv and gain arbitrary read/write access to the entire filesystem with admin privileges, enabling potential data theft and remote code execution. The issue i...