CVE-2021-34823

The ON24 ScreenShare aka DesktopScreenShare.app plugin before 2.0 for macOS allows remote file access via its built-in HTTP server. This allows unauthenticated remote users to retrieve files accessible to the logged-on macOS user. When a remote user sends a crafted HTTP request to the server, it...

Path traversal

The ON24 ScreenShare aka DesktopScreenShare.app plugin before 2.0 for macOS allows remote file access via its built-in HTTP server. This allows unauthenticated remote users to retrieve files accessible to the logged-on macOS user. When a remote user sends a crafted HTTP request to the server, it...

CVE-2021-34823

The ON24 ScreenShare aka DesktopScreenShare.app plugin before 2.0 for macOS allows remote file access via its built-in HTTP server. This allows unauthenticated remote users to retrieve files accessible to the logged-on macOS user. When a remote user sends a crafted HTTP request to the server, it...

CVE-2021-34823

CVE-2021-34823 affects the ON24 ScreenShare (DesktopScreenShare.app) plugin for macOS prior to version 2.0. An unauthenticated remote user can access files via the plugin’s built-in HTTP server. The vulnerability triggers a code path that downloads a configuration file from a remote machine over ...

ON24 ScreenShare 代码问题漏洞

ON24 ScreenShare is a plugin for screen sharing from ON24 USA. A security vulnerability exists in versions of the ON24 ScreenShare aka DesktopScreenShare.app plugin prior to version 2.0 for macOS, which allows an attacker to conduct remote file access via its built-in HTTP server...

Vulnerability of the /hcms/admin/index.php/language/ajax component of the Hongcms content management system. The Hongcms project has vulnerabilities related to name restrictions for directory paths, allowing attackers to view, edit, and delete any files they desire.

The vulnerability of the /hcms/admin/index.php/language/ajax component of the Hongcms content management system is related to a flaw in the path name restriction. Exploiting this vulnerability allows an attacker to remotely access, view, edit, and delete any files using a specially created POST...

NCH Quorum 路径遍历漏洞

NCH Quorum is a teleconference server software. It can turn any computer into a teleconference server. The caller dials into the server to participate in a conference call. A directory traversal and arbitrary file deletion vulnerability exists in NCH Quorum, which can be exploited by an attacker ...

Synology DiskStation Manager Injection Vulnerability

DiskStation Manager DSM is an operating system that runs on all Synology NAS and can be operated through an intuitive web interface. A security vulnerability exists in the File Sharing Management component of Synology DiskStation Manager prior to version 6.2.3-25426-3. A remote attacker can explo...

Motor theme < 3.1.0 - Unauthenticated Local File Inclusion

Lack of authentication or validation in motorloadmore, motorgalleryloadmore, motorquickview and motorprojectquickview AJAX handlers of the theme allows an unauthenticated attacker access to arbitrary files in the server file system, and to execute arbitrary php scripts found on the server file...

Motor theme < 3.1.0 - Unauthenticated Local File Inclusion

Lack of authentication or validation in motorloadmore, motorgalleryloadmore, motorquickview and motorprojectquickview AJAX handlers of the theme allows an unauthenticated attacker access to arbitrary files in the server file system, and to execute arbitrary php scripts found on the server file...

Synology Download Station Server-Side Request Forgery Vulnerability

Synology Download Station is a browser extension. It allows you to browse the Download Center suite of active and downloaded tasks and add tasks without accessing the web version of Synology. A server-side request forgery vulnerability exists in Synology Download Station before 3.8.15-3563, which...

Synology Docker Path Traversal Vulnerability

Docker is an open source application container engine. It supports creating a container lightweight virtual machine and deploying and running applications on a Linux system, as well as automating the installation, deployment, and upgrading of applications through configuration files. A path...

CVE-2020-4561

IBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in unauthenticated sessions. This allows a remote attacker who can access a valid CA endpoint to read and write files to the Cognos Analytics system. IBM X-Force ID: 183903...

CVE-2020-4561

IBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in unauthenticated sessions. This allows a remote attacker who can access a valid CA endpoint to read and write files to the Cognos Analytics system. IBM X-Force ID: 183903...

HongCMS Path Traversal Vulnerability

HongCMS Chinese and English website system is a lightweight website system with extremely fast access speed and easy to use. HongCMS version 4.0.0 suffers from a path traversal vulnerability. A remote attacker can exploit this vulnerability by sending a specially crafted POST request to the...

VulnCheck KEV: CVE-2018-7422

A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the ajaxpath parameter to editor/extensions/pagebuilder/includes/ajaxshortcodepattern.php, aka absolute path traversal...

Vulnerability fixed in IBM WebSphere Application Server

IBM WebSphere Application Server can let an attacker remotely access folders access folders. An attacker can send a specially crafted URL request with "dot-dot" strings /../ to send arbitrary files on the system. IBM has released updates to fix the vulnerability. For more information, see:...

CVE-2021-20354

IBM WebSphere Application Server 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 194883...

Johnson Controls Metasys Reporting Engine Web Services Path Traversal Vulnerability

Johnson Controls Metasys Reporting Engine Web Services is a system hardware from Johnson Controls USA. Providing this web controller uses the latest developments in information technology to ensure that Metasys systems easily integrate and connect to expanding browsers and remote operation center...

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an incorrect definition of the link before accessing a file. This allows a malicious user to write any files into the device’s file system.

The vulnerability of the Adobe Creative Cloud Desktop Application is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability could allow a malicious actor to write arbitrary files to the device’s file system remotely...