11715 matches found
CVE-2024-47558
Authenticated RCE via Path Traversal...
CVE-2024-47559
Authenticated RCE via Path Traversal...
CVE-2024-47559 Authenticated RCE via Path Traversal
Authenticated RCE via Path Traversal...
CVE-2024-47559 Authenticated RCE via Path Traversal
Authenticated RCE via Path Traversal...
CVE-2024-47558 Authenticated RCE via Path Traversal
Authenticated RCE via Path Traversal...
CVE-2024-47558
CVE-2024-47558 is described as an Authenticated RCE via Path Traversal affecting the Xerox FreeFlow Core platform. Connected sources corroborate the vulnerability pattern and indicate the impact as high (C/H/I/A) with an authenticated requirement and path traversal as the flaw vector. Public refe...
CVE-2024-47557
CVE-2024-47557 affects Xerox FreeFlow Core. The root cause is a path traversal flaw that enables pre-auth remote code execution . PT-2024-32656 corroborates a pre-auth RCE via path traversal but provides no specific affected versions or fix information. Exploitation details are not provided in th...
CVE-2024-47556 Pre-Auth RCE via Path Traversal
Pre-Auth RCE via Path Traversal...
CVE-2024-47556
CVE-2024-47556 relates to Xerox FreeFlow Core and is described as a Pre-Auth RCE via Path Traversal. The provided documents indicate: affected product is Xerox FreeFlow Core (vague on specific versions) and the underlying issue is a path traversal condition enabling pre-auth remote code execution...
Important: Red Hat Security Advisory: git security update
An update for git is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
Exploit for OS Command Injection in Postgresql
EN GenPostgresRCEExploit is a PoC tool designed to exploit...
Exploit for Injection in Atlassian Confluence_Data_Center
CVE-2023-22527 CVE-2023-22527 | RCE using SSTI in Confluence...
CVE-2024-44014 WordPress Vmax Project Manager plugin <= 1.0 - Local File Inclusion to RCE vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Vmaxstudio Vmax Project Manager allows PHP Local File Inclusion, Code Injection.This issue affects Vmax Project Manager: from n/a through 1.0...
CVE-2024-46486
TP-LINK TL-WDR5620 v2.3 was discovered to contain a remote code execution RCE vulnerability via the httpProcDataSrv function...
@saltcorn/server Remote Code Execution (RCE) / SQL injection via prototype pollution by manipulating `lang` and `defstring` parameters when setting localizer strings
Summary The endpoint /site-structure/localizer/save-string/:lang/:defstring accepts two parameter values: lang and defstring. These values are used in an unsafe way to set the keys and value of the cfgStrings object. It allows to add/modify properties of the Object prototype that result in severa...
GHSA-VFJ8-5PJ7-2F9G OpenC3 Cross-site Scripting in Login functionality (`GHSL-2024-128`)
Summary The login functionality contains a reflected cross-site scripting XSS vulnerability. Note: This CVE only affects Open Source Edition, and not OpenC3 COSMOS Enterprise Edition Impact This issue may lead up to Remote Code Execution RCE...
redis,valkey -- Multiple vulnerabilities
Redis core team reports: CVE-2024-31449 Lua library commands may lead to stack overflow and potential RCE. CVE-2024-31227 Potential Denial-of-service due to malformed ACL selectors. CVE-2024-31228 Potential Denial-of-service due to unbounded pattern matching...
CVE-2024-46084
Scriptcase 9.10.023 and before is vulnerable to Remote Code Execution RCE via the nmunzip function...
CVE-2024-46084
CVE-2024-46084 affects Scriptcase 9.10.023 and earlier, describing a Remote Code Execution via the nm_unzip function. Documents list the affected version and the vulnerability type, with CVSS v3.1 base score 8.0 (HIGH). A temporary workaround mentioned in PT-2024-31904 is to disable the nm_unzip ...