Mitel MiCollab 安全漏洞

Mitel MiCollab is a mobile application that provides voice, video, messaging, audio conferencing, and team collaboration for employees from Mitel Canada. A security vulnerability exists in Mitel MiCollab that stems from insufficient input cleanup. An authenticated attacker with administrator...

CVE-2024-46939 Game Extension Engine Path Traversal Vulnerability

The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, which can overwrite local specific files...

CVE-2024-46939 Game Extension Engine Path Traversal Vulnerability

The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, which can overwrite local specific files...

PT-2024-32290 · Unknown · Game Extension Engine

Name of the Vulnerable Software and Affected Versions: Game extension engine versions 1.2.7.0 and earlier Description: The game extension engine exposes some components, allowing attackers to construct parameters for path traversal attacks. These attacks can overwrite local specific files...

Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability

Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerability that allows an attacker to read local files and execute code on the SSL VPN gateway...

CVE-2024-10126

Local File Inclusion vulnerability in M-Files Server in versions before 24.11 excluding 24.8 SR1, 24.2 SR3 and 23.8 SR7 allows an authenticated user to read server local files of a limited set of filetypes via document preview...

CVE-2024-10126

The CVE concerns M-Files Server with a Local File Inclusion (LFI) in the document preview feature. Affected versions are before 24.11 (excluding 24.8 SR1, 24.2 SR3, and 23.8 SR7). An authenticated user can read server-local files of a limited set of filetypes via the document preview. Root cause:...

CVE-2024-47595

An attacker who gains local membership to sapsys group could replace local files usually protected by privileged access. On successful exploitation the attacker could cause high impact on confidentiality and integrity of the application...

CVE-2024-47595

CVE-2024-47595 is a Local Privilege Escalation in SAP Host Agent. An attacker with membership in the sapsys group can replace local files usually protected by privileged access, impacting confidentiality and integrity of the application. Public details present in multiple sources confirm the loca...

UBUNTU-CVE-2024-43440

A flaw was found in moodle. A local file may include risks when restoring block backups...

Moodle 安全漏洞

Moodle is a free e-learning software platform open-sourced by Moodle, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle that stems from a possible risk in local files when restoring block backups...

Read from host file system via ImagePromptTemplate in langchain-core

Description You can create langchaincore.prompts.ImagePromptTemplate's and by extension the langchaincore.prompts.ChatPromptTemplate's with input variables that make it possible for the prompt template to read any user-specified path from the server file system. If the outputs of the prompt...

The vulnerability of the Passwork password manager, related to incorrect restrictions on the path to the restricted catalog, allows a intruder to gain unauthorized access to local files and directories on the server.

The vulnerability of the Passwork password manager is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to local files and directories on the server by manipulating URL...

CADClick 安全漏洞

CADClick is a software solution from CADClick, Inc. that creates interactive catalogs of 2D/3D CAD data for individual customer CAD catalogs. A security vulnerability exists in CADClick v1.11.0 and prior versions that stems from the presence of a path traversal vulnerability that allows remote...

CVE-2024-41511

CADClick v1.11.0 and earlier is affected by a Path Traversal (Local File Inclusion) vulnerability in BinaryFileRedirector.ashx, allowing an attacker to retrieve arbitrary local files via the path parameter. Affected component: BinaryFileRedirector.ashx in CADClick. Root cause: improper validation...

DataEase 代码问题漏洞

DataEase is a lightweight, high-performance self-service data visualization and analysis tool that helps users quickly explore and understand complex data, provides real-time data analysis and report generation capabilities, supports a variety of data sources, and is designed to improve data...

Firefox PDF.js Browser File Theft

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Firefox PDF.js Browser File Theft', 'Description' = %q This module abuses an XSS vulnerability in versions prior to Firefox 39.0.3, Firefox ESR...

Mac OS X Safari .webarchive File Format UXSS

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'uri' class MetasploitModule 'Mac OS X Safari .webarchive File Format UXSS', 'Description' = %q Generates a .webarchive file for Mac OS X Safari that will attemp...

GHSA-GHG6-32F9-2JP7 XXE in PHPSpreadsheet encoding is returned

Summary Bypassing the filter allows a XXE-attack. Which is turn allows attacker to obtain contents of local files, even if error reporting muted by @ symbol. LFI-attack Details Check $pattern = '/encoding=".?"/'; easy to bypass. Just use a single quote symbol '. So payload looks like this:...

CVE-2024-45048

PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Affected versions are subject to a bypassing of a filter which allows for an XXE-attack. This in turn allows attacker to obtain contents of local files, even if error reporting is muted. This vulnerability has been...