Malicious Package

Overview bootstrap-v4 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Weak password vulnerability in TOTOLINK N300RH V4

The TOTOLINK N300RH V4 is a wireless router. The TOTOLINK N300RH V4 suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

GO-2022-1159 Path traversal in github.com/containers/podman/v4

The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality...

CVE-2022-45942

A Remote Code Execution RCE vulnerability was found in includes/baijiacms/common.inc.php in baijiacms v4...

Remote code execution

A Remote Code Execution RCE vulnerability was found in includes/baijiacms/common.inc.php in baijiacms v4...

PT-2022-27696 · Baijiacms · Baijiacms

Name of the Vulnerable Software and Affected Versions: baijiacms version v4 Description: A Remote Code Execution RCE vulnerability was found in includes/baijiacms/common.inc.php. Recommendations: For baijiacms version v4, consider restricting access to the includes/baijiacms/common.inc.php file...

CVE-2022-45942

A Remote Code Execution RCE vulnerability was found in includes/baijiacms/common.inc.php in baijiacms v4...

CVE-2022-45942

A Remote Code Execution RCE vulnerability was found in includes/baijiacms/common.inc.php in baijiacms v4...

CVE-2022-46139

Summary : CVE-2022-46139 affects TP-Link TL-WR940N V4, specifically versions 3.16.9 and earlier. The issue allows an authenticated attacker to trigger a Denial of Service by uploading a crafted firmware image during the firmware update process. What’s affected : The vulnerable device is the TP-Li...

CVE-2022-46139: Insufficient Verification of Data Authenticity

TP-Link TL-WR940N V4 3.16.9 and earlier allows authenticated attackers to cause a Denial of Service DoS via uploading a crafted firmware image during the firmware update process...

CVE-2020-36565 Directory traversal on Windows in github.com/labstack/echo/v4

Due to improper sanitization of user input on Windows, the static file handler allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read...

Cross site request forgery (csrf)

perfSONAR v4.x = v4.4.5 was discovered to contain a Cross-Site Request Forgery CSRF which is triggered when an attacker injects crafted input into the Search function...

CVE-2022-41413

CVE-2022-41413 affects perfSONAR v4.x through v4.4.5, with a Cross-Site Request Forgery (CSRF) vulnerability triggered when crafted input is injected into the Search function. The issue is a partial blind CSRF that can cause the client to issue background requests to arbitrary URLs, bypassing the...

CVE-2022-37197

IOBit IOTransfer V4 is vulnerable to Unquoted Service Path...

Path traversal

IOBit IOTransfer V4 is vulnerable to Unquoted Service Path...

CVE-2022-37197: Unquoted Search Path or Element

IOBit IOTransfer V4 is vulnerable to Unquoted Service Path...

CVE-2022-37197

IOBit IOTransfer V4 is vulnerable to Unquoted Service Path...

CVE-2022-37197

CVE-2022-37197 concerns IOBit IOTransfer V4 with an Unquoted Service Path, specifically the IOTUpdaterSvc binary path (C:\Program Files (x86)\IOTransfer\Updater\IOTUpdater.exe). Public sources (NVD/Red Hat/CVE lists, Exploit-DB, PT Security) confirm a local vulnerability where an unquoted service...

IOTransfer V4 - Unquoted Service Path Vulnerability

Exploit Title: IOTransfer V4 - Unquoted Service Path Exploit Author: BLAY ABU SAFIAN Inveteck Global Vendor Homepage: http://www.iobit.com/en/index.php Software Link: https://iotransfer.itopvpn.com/download/ Tested Version: V4 Vulnerability Type: Unquoted Service Path Tested on OS: Microsoft...

IOTransfer V4 - Unquoted Service Path

Exploit Title: IOTransfer V4 - Unquoted Service Path Exploit Author: BLAY ABU SAFIAN Inveteck Global Discovery Date: 2022-28-07 Vendor Homepage: http://www.iobit.com/en/index.php Software Link: https://iotransfer.itopvpn.com/download/ Tested Version: V4 Vulnerability Type: Unquoted Service Path...