postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin

A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server...

Jackson-Databind NioPathHelper Arbitrary File Load

The vulnerability of the NioPathHelper.deserialize method in the Jackson-Databind library is related to insecure dynamic class loading. Exploiting this vulnerability could allow an attacker to load arbitrary files...

Cisco Finesse Remote File Inclusion Vulnerability

A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote locations into an active user session on an affected device, possibly leading to browser-based attacks. This vulnerability is due to insufficient validation of user-supplied input...

Fortinet FortiClient Path Traversal

The vulnerability of the Fortinet FortiClient security device is related to errors in processing relative paths. Exploiting this vulnerability can allow attackers to load arbitrary files into the system...

SINEC INS Web Interface Code Execution

The vulnerability in the web interface for managing software for managing network infrastructure SINEC INS exists due to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading arbitrar...

PT-2020-5935

Name of the Vulnerable Software and Affected Versions: HUAWEI P30 versions prior to 10.1.0.135C00E135R2P11 HUAWEI P30 Pro versions prior to 10.1.0.135C00E135R2P8 Description: The issue is related to insufficient integrity checking in the software of certain mobile phones. This could allow an...