CVE-2021-35244

CVE-2021-35244 affects SolarWinds Orion Platform: the Log alert to a file action in Orion alert management allows an authenticated user with alert-management rights to write to arbitrary files, enabling an unrestricted file upload and remote code execution. Public disclosures (ZDI-22-375) describ...

CVE-2021-38484

The CVE-2021-38484 issue affects InHand Networks IR615 Router. The connected ICS advisory (Update A) specifies affected versions as 2.3.0.r5417 and earlier; initial description listed 2.3.0.r4724 and 2.3.0.r4870. The vulnerability is Unrestricted Upload of File with Dangerous Type, where the rout...

CVE-2021-36311

Dell EMC Networker versions prior to 19.5 contain an Improper Authorization vulnerability. Any local malicious user with networker user privileges may exploit this vulnerability to upload malicious file to unauthorized locations and execute it...

Exploit for Path Traversal in Vmware Cloud_Foundation

CVE-2021-21972 CVE-2021-21972 VMware vSphere Client Unauthor...

Exploit for Path Traversal in Vmware Cloud_Foundation

CVE-2021-21972 CVE-2021-21972 VMware vSphere Client Unauthor...

Cisco Application Policy Infrastructure Controller Multiple Vulnerabilities (cisco-sa-capic-mdvul-HBsJBuvW)

According to its self-reported version, Cisco Application Policy Infrastructure Controller APIC is affected by multiple vulnerabilities, including the following: - A command injection vulnerability exists in Cisco APIC due to invalid input validation. An authenticated, remote attacker can exploit...

OpenEMR 5.0.1.3 Shell Upload

Exploit Title: OpenEMR 5.0.1.3 - 'managesitefiles' Remote Code Execution Authenticated Date 12.06.2021 Exploit Author: Ron Jost Hacker5preme Vendor Homepage: https://www.open-emr.org/ Software Link: https://github.com/openemr/openemr/archive/refs/tags/v5013.zip Version: Prior to 5.0.1.4 Tested on...

CVE-2021-22736

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause a denial of service when an unauthorized file is uploaded...

CVE-2021-22736

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause a denial of service when an unauthorized file is uploaded...

CVE-2021-22740

Information Exposure vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause information to be exposed when an unauthorized file is uploaded...

Information disclosure

Information Exposure vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause information to be exposed when an unauthorized file is uploaded...

CVE-2021-22740

Information Exposure vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause information to be exposed when an unauthorized file is uploaded...

CVE-2021-22740

Information Exposure vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause information to be exposed when an unauthorized file is uploaded...

CVE-2021-22740

CVE-2021-22740 concerns Schneider Electric homeLYnk (Wiser For KNX) and spaceLYnk prior to or at 2.60, where an information disclosure occurs when an unauthorized file is uploaded. The availing connected documents confirm the affected products and the root cause (information exposure via unauthor...

CVE-2021-22736

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause a denial of service when an unauthorized file is uploaded...

Cisco HyperFlex HX 未授权文件上传漏洞（CVE-2021-1499 ）

Technical Analysis CVE-2021-1499 Arbitrary file upload RCE implied in the /upload endpoint. Patch --- unpatched/springpath.conf 2021-05-17 19:06:17.000000000 -0500 +++ patched/springpath.conf 2021-05-17 19:06:23.000000000 -0500 @@ -36,14 +36,7 @@ include uwsgiparams; - location /crossdomain.xml -...

Exploit for Path Traversal in Vmware Cloud_Foundation

CVE-2021-21972 VMware vSphere Client Unauthorized File Upload...

CVE-2021-20659

SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to upload arbitrary files via unspecified vectors. If the file is PHP script, an attacker may execute arbitrary code...

Unauthorized File Upload Vulnerability in Cisco Security Manager

Cisco Security Manager is an enterprise-class security management application that provides visibility and control over Cisco security and network devices. network devices. An unauthorized file upload vulnerability exists in Cisco Security Manager, which can be exploited to upload arbitrary files...

CVE-2020-15073

An issue was discovered in phpList through 3.5.4. An XSS vulnerability occurs within the Import Administrators section via upload of an edited text document. This also affects the Subscriber Lists section...