PT-2023-29956 · Unknown · Sd-Webui-Infinite-Image-Browsing

Name of the Vulnerable Software and Affected Versions: sd-webui-infinite-image-browsing extension versions before 977815a Description: The issue allows remote attackers to read any local file via the "/file?path=" endpoint in the URL, as demonstrated by reading /proc/self/environ to discover...

CP-8031 MASTER MODULE Privilege Escalation

The vulnerability of the web server of the microprogramming software for communication module control devices CP-8031 MASTER MODULE and CP-8050 MASTER MODULE is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious...

Titan SFTP MFT NextGen Path Traversal

The vulnerability of the Titan SFTP and Titan MFT NextGen server software lies in improper restrictions on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to remotely read arbitrary files from the file system...

Remote file inclusion

On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected...

CVE-2023-44962

File Upload vulnerability in Koha Library Software 23.05.04 and before allows a remote attacker to read arbitrary files via the upload-cover-image.pl component...

Microsoft Visual Studio Name Reference Arbitrary File Write

The vulnerability of the Microsoft Visual Studio software relates to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a malicious actor to write arbitrary files into the system remotely...

CVE-2023-5492

A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. Affected is an unknown function of the file /sysmanage/licence.php. The manipulation of the argument fileupload leads to unrestricted...

PT-2023-32127 · Byzoro · Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform

Name of the Vulnerable Software and Affected Versions: Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform versions up to 20230928 Description: A critical issue affects some unknown functionality of the file /sysmanage/updatelib.php. The manipulation of the file upload...

CVE-2023-45353

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system by leveraging the Common Management Portal web interface for Authenticated remote upload and creation of arbitrary files affecting...

CVE-2022-47892

All versions of NetMan 204 could allow an unauthenticated remote attacker to read a file config.cgi containing sensitive information, like credentials...

CVE-2023-5284

A vulnerability classified as critical has been found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file uploadsavestudent.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to launch the attack remotely. The...

Out-of-bounds

A vulnerability has been found in OpenRapid RapidCMS 1.3.1 and classified as critical. Affected by this vulnerability is the function isImg of the file /admin/config/uploadicon.php. The manipulation of the argument fileName leads to unrestricted upload. The attack can be launched remotely. The...

CVE-2023-43654 TorchServe Server-Side Request Forgery

TorchServe is a tool for serving and scaling PyTorch models in production. TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This issue could be taken advantage of to compromise the integrity...

CVE-2023-5146

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231 and classified as critical. Affected by this issue is some unknown functionality of the file /sysmanage/updatelib.php. The manipulation of the argument fileupload leads to unrestricted upload. The...

PT-2023-7768 · Nagios Xi · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI affected versions not specified Description: The issue is related to the backup xi.sh script in Nagios XI, which is vulnerable due to uncontrolled recursion when processing the name and rootdir parameters. This could allow a remote...

Out-of-bounds

A vulnerability classified as problematic was found in SourceCodester My Food Recipe 1.0. This vulnerability affects unknown code of the file index.php of the component Image Upload Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

MAGLINK LX Web Console Path Traversal

The vulnerability of the MAGLINK LX Web Console, which manages fuel tanks, is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to gain access to system files remotely...

Teller Cross-Site Scripting Vulnerability

Teller is a financial services application that allows you to perform online transactions such as sending and receiving money, purchasing airtime, paying bills, and more. A security vulnerability exists in Teller version v.4.4.0, which originates from a remote attacker who can execute arbitrary...

CMPapp Component Arbitrary File Load

The vulnerability of the CMPapp component in CODESYS software products is related to the use of files and directories accessible from external parties. Exploiting this vulnerability allows a malicious actor to upload arbitrary files into the system remotely...

IBM Cognos Analytics File Upload

The vulnerability of the online business analytics service IBM Cognos Analytics lies in the lack of restrictions on file uploads. Exploiting this vulnerability allows a malicious actor to upload any files they desire remotely...