CVE-2024-27177 Remote Code Execution

An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying package name variable. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower th...

CVE-2024-27177 Remote Code Execution

An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying package name variable. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower th...

CVE-2024-27176 Remote Code Execution

An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying session ID variable. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than...

CVE-2024-27176 Remote Code Execution

An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying session ID variable. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than...

CVE-2024-27173

Toshiba e-STUDIO multi-function printers are affected by CVE-2024-27173 in the Remote Command program, enabling remote code execution by overwriting Python executables. Root cause involves execution of code via uploaded/modified Python files, with impact to confidentiality, integrity, and availab...

PT-2024-21711 · Toshiba · Toshiba

Name of the Vulnerable Software and Affected Versions: Toshiba product affected versions not specified Description: An attacker can achieve Remote Code Execution by overwriting files, which is enabled by falsifying the package name variable. This issue can be executed in combination with other...

CVE-2024-36587

Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting the binary dnscrypt-proxy...

PT-2024-21675 · Toshiba · Toshiba Printers

Name of the Vulnerable Software and Affected Versions: Toshiba printers affected versions not specified Description: The issue allows unauthorized access and remote exploitation of Toshiba printers through the web interface without authentication, enabling an attacker to overwrite insecure files...

DNSCrypt-proxy Security Vulnerability

DNSCrypt-proxy is a DNS proxy for the DNSCrypt project. A security vulnerability exists in DNSCrypt-proxy versions v2.0.0alpha9 through v2.1.5 that stems from improper privilege management. An attacker can exploit the vulnerability to elevate privileges to root by overwriting the binary...

PT-2024-27083 · Unknown · Adguardhome

Name of the Vulnerable Software and Affected Versions: AdGuardHome versions 0.93 through latest Description: The issue allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary. This is a privilege escalation vulnerability in AdGuardHome. Recommendations: For...

CVE-2024-36586

An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary...

CVE-2024-33606

An attacker could retrieve sensitive files medical images as well as plant new medical images or overwrite existing medical images on a MicroDicom DICOM Viewer system. User interaction is required to exploit this vulnerability...

CVE-2024-2624 Path Traversal and Arbitrary File Upload Vulnerability in parisneo/lollms-webui

A path traversal and arbitrary file upload vulnerability exists in the parisneo/lollms-webui application, specifically within the @router.get"/switchpersonalpath" endpoint in ./lollms-webui/lollmscore/lollms/server/endpoints/lollmsuser.py. The vulnerability arises due to insufficient sanitization...

PT-2025-30434

Name of the Vulnerable Software and Affected Versions ONNX version 1.17.0 Description A path traversal issue exists in the onnx.external data helper.save external data function. This allows attackers to overwrite arbitrary files by providing crafted external data.location paths containing travers...

SUSE-SU-2024:1854-1 Security update for git

This update for git fixes the following issues: - CVE-2024-32002: Fixed case confusion with recursive clones on case-insensitive filesystems that support symbolic links bsc1224168 - CVE-2024-32004: Fixed arbitrary code execution during local clones bsc1224170 - CVE-2024-32020: Fixed file...

CVE-2024-25975

The application implements an up- and downvote function which alters a value within a JSON file. The POST parameters are not filtered properly and therefore an arbitrary file can be overwritten. The file can be controlled by an authenticated attacker, the content cannot be controlled. It is...

SUSE CVE-2023-52871

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: llcc: Handle a second device without data corruption Usually there is only one llcc device. But if there were a second, even a failed probe call would modify the global drvdata pointer. So check if drvdata is valid...

HAWKI 跨站脚本漏洞

HAWKI is a university teaching interface based on the OpenAI API by the HAWK Digital Environments team in Germany. HAWKI has a security vulnerability that stems from a path traversal vulnerability due to not properly filtering POST parameters. An attacker can exploit the vulnerability to overwrit...

SUSE-SU-2024:1807-1 Security update for git

This update for git fixes the following issues: - CVE-2024-32002: Fixed recursive clones on case-insensitive filesystems that support symbolic links are susceptible to case confusion bsc1224168. - CVE-2024-32004: Fixed arbitrary code execution during local clones bsc1224170. - CVE-2024-32020: Fix...

CVE-2024-27946

CVE-2024-27946 affects Siemens RUGGEDCOM CROSSBOW (all versions before V5.5). The issue is a path traversal/file download weakness that lets an attacker overwrite arbitrary files in the installation directory by supplying a target filename, given the attacker has the required privileges. Affected...