CVE-2023-25305

PolyMC Launcher = 1.4.3 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory...

CVE-2023-25305

PolyMC Launcher

CVE-2023-25305: Improper Limitation of a Pathname to a Restricted Directory

PolyMC Launcher = 1.4.3 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory...

CVE-2023-25304

An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...

CVE-2023-25304

An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...

Directory traversal

An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...

PT-2023-20018 · Unknown · Prism Launcher

Name of the Vulnerable Software and Affected Versions: Prism Launcher versions up to v6.1 Description: The issue allows attackers to perform a directory traversal via importing a crafted .mrpack file. This can be exploited by importing a specifically designed .mrpack file, potentially leading to...

CVE-2023-25304: Improper Limitation of a Pathname to a Restricted Directory

An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...

CVE-2023-25304

Prism Launcher (up to v6.1) is affected by a directory traversal vulnerability triggered by importing a crafted .mrpack file. The underlying issue exposes potential reading of arbitrary files on the host when handling the import, with CVSS 3.1 vector indicating Local access, no privileges require...

CVE-2023-25304

An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...

CVE-2023-25304

An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...

Prism 路径遍历漏洞

Prism is an application from the US-based individual developers of Prism. It is a lightweight, extensible syntax highlighting tool. A path traversal vulnerability exists in Prism Launcher version 6.1 and earlier. An attacker exploiting this vulnerability could read arbitrary files on the server...

CVE-2023-25304

An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...

SUSE CVE-2007-6531

Stack-based buffer overflow in the Panel xfce4-panel component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips. NOTE: a second buffer overflow over-read in the xfcemkdirhier function was also reported, but it might not be exploitable for a crash o...

SUSE CVE-2009-2676

Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE for Business in SDK and JRE 1.4.221 and earlier; allows remote attackers to create or modify arbitrary files via vecto...

SUSE CVE-2010-4450

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier for Solaris and Linux; 5.0 Update 27 and earlier for Solaris and Linux; and 1.4.229 and earlier for Solaris and Linux allows local standalone applications to affect...

SUSE CVE-2017-5018

Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, had an insufficiently strict content security policy on the Chrome app launcher page, which allowed a remote attacker to inject scripts or HTML into a privileged page via a crafted HTML page...

CWA for Mac - Second window created by published application doesn't work

Custom-built applications that act as a launcher for other applications Sporadically, both the seamless application window and the launched application window disappear on Mac clients In Citrix Viewer, the windows show as transparent and are not clickable, Mac menu barwould not work as well...

CVE-2023-20916

In getMainActivityLaunchIntent of LauncherAppsService.java, there is a possible way to bypass the restrictions on starting activities from the background due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2022-38395

HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance Tune-up...