Drupal H5P Module 2.0.0 Zip Slip Traversal

------------------------------------------------------------------ Drupal H5P Module statIndex$i'name'; 892. 893. if pregmatch'/^.|/./', $fileName !== 0 894. continue; // Skip any file or folder starting with a . or 894. This regex check should be enough to prevent path traversal attacks through...

Directory Traversal

Overview @nubosoftware/node-static is a simple, compliant file streaming module for node Affected versions of this package are vulnerable to Directory Traversal due to improper file path sanitization in the startsWith method in the servePath function. PoC js curl --path-as-is...

Directory Traversal

Overview node-static is a rfc 2616 compliant HTTP static-file server module, with built-in caching. Affected versions of this package are vulnerable to Directory Traversal due to improper file path sanitization in the startsWith method in the servePath function. PoC js curl --path-as-is...

CVE-2022-40977

A path traversal vulnerability was discovered in Pilz PASvisu Server before 1.12.0. An unauthenticated remote attacker could use a zipped, malicious configuration file to trigger arbitrary file writes 'zip-slip'. File writes do not affect confidentiality or availability...

CVE-2022-40976

A path traversal vulnerability was discovered in multiple Pilz products. An unauthenticated local attacker could use a zipped, malicious configuration file to trigger arbitrary file writes 'zip-slip'. File writes do not affect confidentiality or availability...

CVE-2022-40976

A path traversal vulnerability was discovered in multiple Pilz products. An unauthenticated local attacker could use a zipped, malicious configuration file to trigger arbitrary file writes 'zip-slip'. File writes do not affect confidentiality or availability...

Path traversal

A path traversal vulnerability was discovered in multiple Pilz products. An unauthenticated local attacker could use a zipped, malicious configuration file to trigger arbitrary file writes 'zip-slip'. File writes do not affect confidentiality or availability...

Path traversal

A path traversal vulnerability was discovered in Pilz PASvisu Server before 1.12.0. An unauthenticated remote attacker could use a zipped, malicious configuration file to trigger arbitrary file writes 'zip-slip'. File writes do not affect confidentiality or availability...

CVE-2022-40977

CVE-2022-40977 concerns Pilz PASvisu Server prior to 1.12.0. An unauthenticated, remote attacker can abuse a zipped, malicious configuration file to trigger arbitrary file writes (zip-slip). This impacts the integrity of affected system data (high), while confidentiality and availability remain u...

CVE-2022-40976

The CVE-2022-40976 entry concerns a zip-slip path traversal in multiple Pilz products. An unauthenticated local attacker could supply a zipped, malicious configuration file to trigger arbitrary file writes during extraction. The impact is limited to file writes ; the description notes that confid...

CVE-2022-40976 PILZ: Multiple products affected by ZipSlip

A path traversal vulnerability was discovered in multiple Pilz products. An unauthenticated local attacker could use a zipped, malicious configuration file to trigger arbitrary file writes 'zip-slip'. File writes do not affect confidentiality or availability...

CVE-2022-44749

A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Analytics Platform 3.2.0 and above can result in arbitrary files being overwritten on the user's system. This vulnerability is also known as 'Zip-Slip'. An attacker can create a KNIME workflow that, when being...

CVE-2022-44748

A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Server since 4.3.0 can result in arbitrary files being overwritten on the server's file system. This vulnerability is also known as 'Zip-Slip'. An attacker can create a KNIME workflow that, when being uploaded, ca...

Directory traversal

A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Analytics Platform 3.2.0 and above can result in arbitrary files being overwritten on the user's system. This vulnerability is also known as 'Zip-Slip'. An attacker can create a KNIME workflow that, when being...

CVE-2022-44749 Opening workflows from untrusted resources may override arbitrary file system contents

A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Analytics Platform 3.2.0 and above can result in arbitrary files being overwritten on the user's system. This vulnerability is also known as 'Zip-Slip'. An attacker can create a KNIME workflow that, when being...

CVE-2022-44748 Uploading workflows to KNIME Server may override arbitrary file system contents

A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Server since 4.3.0 can result in arbitrary files being overwritten on the server's file system. This vulnerability is also known as 'Zip-Slip'. An attacker can create a KNIME workflow that, when being uploaded, ca...

PT-2022-27299 · Knime · Knime Analytics Platform

Name of the Vulnerable Software and Affected Versions: KNIME Analytics Platform versions 3.2.0 and above Description: A directory traversal vulnerability in the ZIP archive extraction routines can result in arbitrary files being overwritten on the user's system, also known as 'Zip-Slip'. An...

PT-2022-25646 · Pilz · Pilz Products

Name of the Vulnerable Software and Affected Versions: Pilz products affected versions not specified Description: A path traversal vulnerability was discovered in multiple Pilz products. An unauthenticated local attacker could use a zipped, malicious configuration file to trigger arbitrary file...

PT-2022-25647 · Pilz · Pasvisu Server

Name of the Vulnerable Software and Affected Versions: Pilz PASvisu Server versions prior to 1.12.0 Description: A path traversal vulnerability was discovered, allowing an unauthenticated remote attacker to use a zipped, malicious configuration file to trigger arbitrary file writes, also known as...

PT-2022-27298 · Knime · Knime Server

Name of the Vulnerable Software and Affected Versions: KNIME Server versions 4.3.0 through 4.13.5 KNIME Server versions 4.14.0 through 4.14.2 KNIME Server versions 4.15.0 through 4.15.2 Description: A directory traversal vulnerability in the ZIP archive extraction routines can result in arbitrary...