open-vm-tools: Insecure file handling

A vulnerability was found in open-vm-tools. A malicious actor with non-administrative privileges on a guest virtual machine VM may tamper with the local files to trigger insecure file operations within that VM...

CVE-2022-50931

TeamSpeak 3.5.6 contains an insecure file permissions vulnerability that allows local attackers to replace executable files with malicious binaries. Attackers can replace system executables like ts3clientwin32.exe with custom files to potentially gain SYSTEM or Administrator-level access...

CVE-2022-50931

TeamSpeak 3.5.6 has an insecure file permissions vulnerability allowing local attackers to replace system executables (e.g., ts3client_win32.exe) with malicious binaries, potentially yielding SYSTEM/Administrator privileges. Documented CVSS: LOCAL, HIGH impact (C/H/I/A). Exploit details are repor...

CVE-2022-50931 TeamSpeak 3.5.6 - Insecure File Permissions

TeamSpeak 3.5.6 contains an insecure file permissions vulnerability that allows local attackers to replace executable files with malicious binaries. Attackers can replace system executables like ts3clientwin32.exe with custom files to potentially gain SYSTEM or Administrator-level access...

TeamSpeak 安全漏洞

TeamSpeak is a voice software from the American company TeamSpeak. A security vulnerability exists in TeamSpeak version 3.5.6, which stems from insecure file permissions and could lead to a local attacker replacing executable files...

PT-2026-2407

Name of the Vulnerable Software and Affected Versions TeamSpeak version 3.5.6 Description TeamSpeak 3.5.6 has a file permissions issue that allows local attackers to replace executable files with malicious binaries. An attacker can replace system executables, such as ts3client win32.exe, with...

Dell SupportAssist OS Recovery 安全漏洞

Dell SupportAssist OS Recovery is a Dell USA company that provides a recovery environment that contains tools for diagnosing and resolving problems that may occur before the computer boots into the operating system. A security vulnerability exists in Dell SupportAssist OS Recovery versions prior ...

CVE-2021-31217

In SolarWinds DameWare Mini Remote Control Server 12.0.1.200, insecure file permissions allow file deletion as SYSTEM...

CVE-2022-42198

In Simple Exam Reviewer Management System v1.0 the User List function suffers from insecure file upload...

CVE-2019-20049

An issue was discovered on Alcatel-Lucent OmniVista 4760 devices. A remote unauthenticated attacker can chain a directory traversal which helps to bypass authentication with an insecure file upload to achieve Remote Code Execution as SYSTEM. The directory traversal is in the construct whereas the...

CVE-2020-12608

An issue was discovered in SolarWinds MSP PME Patch Management Engine Cache Service before 1.1.15 in the Advanced Monitoring Agent. There are insecure file permissions for %PROGRAMDATA%\SolarWinds MSP\SolarWinds.MSP.CacheService\config\. This can lead to code execution by changing the...

CVE-2024-27480

givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload...

CVE-2024-27480

givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload...

CVE-2024-27480

givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload...

VvvebJs 安全漏洞

VvvebJs is a drag-and-drop website generator from Givan Personal Developers. A security vulnerability exists in VvvebJs version 1.7.2, which stems from an insecure file upload...

CVE-2024-27480

CVE-2024-27480 involves givanz VvvebJs, version 1.7.2, which is vulnerable to an Insecure File Upload. The connected Red Hat/NVD entries confirm this specific version is affected and that the vulnerability can impact confidentiality, integrity, and availability (per CVSS 3.1 metrics: AV:N/AC:L/PR...

CVE-2024-27480

givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload...

PT-2025-53791

Name of the Vulnerable Software and Affected Versions givanz VvvebJs version 1.7.2 Description givanz VvvebJs version 1.7.2 is susceptible to Insecure File Upload. This allows for the potential upload of malicious files. Recommendations At the moment, there is no information about a newer version...

CVE-2024-27480

givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload...

📄 Backdoor.Win32.Poison.jh Insecure File Permissions / Privilege Escalation

This python script demonstrates a local privilege escalation exploit targeting a vulnerability in the Backdoor.Win32.Poison.jh malware sample. The exploit leverages insecure file permissions created by the malware itself, allowing any local user to replace the malicious executable with arbitrary...