230 matches found
Alcatel-Lucent OmniVista 4760 Directory Traversal and Insecure File Upload Vulnerability
LE Alcatel-Lucent Omnivista 4760 is a network management system from ALE France. The product includes features such as alarm notification, OmniPCX configuration, performance analysis and Voice over IP monitoring. A security vulnerability exists in the ALE Alcatel-Lucent OmniVista 4760. An attacke...
CVE-2019-20049
The CVE-2019-20049 entry affects Alcatel-Lucent OmniVista 4760 devices. A remote, unauthenticated attacker can chain a directory traversal vulnerability (located in the __construct() method) with an insecure file upload (in SetSkinImages()) to achieve Remote Code Execution as SYSTEM. This combine...
CVE-2019-18288
A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with valid authentication at the RMI interface could be able to gain remote code execution through an unsecured file upload. Please note that an attacker needs to have access to th...
CVE-2019-15936
Intesync Solismed 3.3sp allows Insecure File Upload...
CVE-2019-15936
Intesync Solismed 3.3sp allows Insecure File Upload...
Unrestricted file upload
Intesync Solismed 3.3sp allows Insecure File Upload...
CVE-2019-15936
Intesync Solismed 3.3sp allows Insecure File Upload...
CVE-2019-15936
The CVE-2019-15936 entry concerns Intesync Solismed 3.3sp, where an insecure file upload vulnerability is reported. Multiple connected sources (CNVD, RH Red Hat, PRION, NVD, CVE List) identify this issue and, in some entries, indicate potential for remote code execution due to arbitrary file uplo...
Siemens SPPA-T3000 Application Server File Upload Vulnerability
SPPA-T3000 is a distributed control system mainly used in thermal power plants and large-scale renewable energy power plants.Application Server is the application server in it, which provides the main system services including access control, distribution of data to thin clients and archiving. A...
CVE-2019-17352
In JFinal cos before 2019-08-13, as used in JFinal 4.4, there is a vulnerability that can bypass the isSafeFile function: one can upload any type of file. For example, a .jsp file may be stored and almost immediately deleted, but this deletion step does not occur for certain exceptions...
Design/Logic Flaw
In JFinal cos before 2019-08-13, as used in JFinal 4.4, there is a vulnerability that can bypass the isSafeFile function: one can upload any type of file. For example, a .jsp file may be stored and almost immediately deleted, but this deletion step does not occur for certain exceptions...
CVE-2019-10267
An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. It is possible to upload a file into any directory of the server. One can insert a JSP shell into the web server's directory and execute it. This leads to full access to the system, as the...
Design/Logic Flaw
An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. It is possible to upload a file into any directory of the server. One can insert a JSP shell into the web server's directory and execute it. This leads to full access to the system, as the...
CVE-2019-10267
CVE-2019-10267 affects Ahsay Cloud Backup Suite 8.1.0.50 . The vulnerability is an insecure file upload that allows placing a file in any server directory; an attacker can upload a JSP shell to the web root and execute it, resulting in full access to the system under the configured user (e.g., Ad...
Ahsay Backup 7.x / 8.x File Upload / Remote Code Execution
Exploit Title: Authenticated insecure file upload and code execution flaw in Ahsay Backup v7.x - v8.1.1.50. POC Date: 26-6-2019 Exploit Author: Wietse Boonstra Vendor Homepage: https://ahsay.com Software Link: http://ahsay-dn.ahsay.com/v8/81150/cbs-win.exe Version: 7.x 8.1.1.50 Tested on: Windows...
Ahsay Backup 7.x - 8.1.1.50 - Authenticated Arbitrary File Upload / Remote Code Execution (Metasploit)
Exploit Title: Authenticated insecure file upload and code execution flaw in Ahsay Backup v7.x - v8.1.1.50. Metasploit Date: 26-6-2019 Exploit Author: Wietse Boonstra Vendor Homepage: https://ahsay.com Software Link: http://ahsay-dn.ahsay.com/v8/81150/cbs-win.exe Version: 7.x 'Ahsay Backup...
Oracle Siebel CRM 19.0 - Persistent Cross-Site Scripting
Exploit Title: Oracle Siebel CRM 19.0 - Persistent Cross-Site Scripting Date: 2019-07-17 Exploit Author: Sarath Nair aka AceNeon13 Contact: @AceNeon13 Vendor Homepage: www.oracle.com Software Link: https://www.oracle.com/applications/siebel/ Version: Siebel CRM UI Framework Version 19.0 and prior...
PRODSECBUG-2177: Insufficient server side validations leads to Insecure File upload vulnerability
More info at https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13...