5960 matches found
CVE-2021-20134: Improper Limitation of a Pathname to a Restricted Directory
Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vulnerability that allows a remote, authenticated attacker to set an arbitrary file on the router's filesystem as the log file used by either Quagga service zebra or ripd. Subsequen...
CVE-2021-21909
Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command. An attacker can provide malicious inputs to trigger this vulnerability...
PT-2021-14835
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue allows an attacker to trigger arbitrary file deletion through specially-crafted command line arguments in the del .cnt|.log file delete command...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
log4j Spring vulnerable POC This is a POC for a simple spring...
Exploit for CVE-2021-43224
CVE-2021-43224-POC Windows Common Log File System Driver...
Garrett Metal Detectors: Path traversal vulnerability
Garrett Metal Detectors is a walk-in metal detector from Garrett U.S. Garrett Metal Detectors has a path traversal vulnerability that can be exploited by attackers to delete arbitrary files in the del.CNT|.log file deletion command with specially crafted command line parameters...
FortiSIEM Windows Agent Credentials Stored Plain Text
The vulnerability of the FortiSIEM Windows Agent security management system lies in the fact that account data is stored as plain-text files in log files. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Microsoft Windows Event Tracing Remote Code Execution Vulnerability
Windows Event Tracing ETW is an efficient kernel-level tracing tool that allows you to log kernel- or application-defined events to a log file.Microsoft Windows Event Tracing is vulnerable to remote code execution. An attacker could exploit this vulnerability to execute code on the target host...
CVE-2021-43207
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
CVE-2021-43226
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
CVE-2021-43224
Windows Common Log File System Driver Information Disclosure Vulnerability...
CVE-2021-43224
Windows Common Log File System Driver Information Disclosure Vulnerability...
CVE-2021-43207
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
CVE-2021-43226
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
CVE-2021-43224
Windows Common Log File System Driver Information Disclosure Vulnerability...
Privilege escalation
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
Information disclosure
Windows Common Log File System Driver Information Disclosure Vulnerability...
Privilege escalation
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
CVE-2021-43226
CVE-2021-43226 pertains to the Windows Common Log File System (CLFS) Driver. The available documents identify a local privilege-escalation vulnerability in CLFS that could allow a privileged attacker on a Windows host to gain higher privileges. The CVE is listed in the KEV catalog as a Microsoft ...
