CVE-2022-0401

Path Traversal in NPM w-zip prior to 1.0.12...

Path traversal

Path Traversal in NPM w-zip prior to 1.0.12...

CVE-2022-0401 Path Traversal in yuda-lyu/w-zip

Path Traversal in NPM w-zip prior to 1.0.12...

CVE-2022-0401 Path Traversal in yuda-lyu/w-zip

Path Traversal in NPM w-zip prior to 1.0.12...

CVE-2022-0401

Path Traversal in NPM w-zip prior to 1.0.12...

CVE-2022-0401

CVE-2022-0401 affects the npm package w-zip : a path traversal flaw during archive extraction exists in versions prior to 1.0.12. Root cause: improper handling of extraction paths enables directory traversal. Impact: as described in the entry, path traversal could lead to unauthorized file access...

PT-2022-13156

Name of the Vulnerable Software and Affected Versions w-zip versions prior to 1.0.12 Description The issue is related to Path Traversal in the w-zip package. Recommendations For versions prior to 1.0.12, update to version 1.0.12 or later to resolve the issue...

CVE-2022-0401: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal in NPM w-zip prior to 1.0.12...

W-Zip 路径遍历漏洞

W-Zip is a Zip and 7Z compression utility. A path traversal vulnerability exists in w-zip that stems from path traversal in NPM w-zip before 1.0.12...

WordPress EasyJobs plugin <= 1.4.7 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Jan w Oleju in WordPress EasyJobs plugin versions = 1.4.7. Solution Update the WordPress EasyJobs plugin to the latest available version at least 1.4.8...

PT-2022-37265

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

WordPress Catch Web Tools plugin <= 2.7 - Arbitrary Catch IDs Activation/Deactivation vulnerability

Arbitrary Catch IDs Activation/Deactivation vulnerability discovered by Jan w Oleju in WordPress Catch Web Tools plugin versions = 2.7. Solution Update the WordPress Catch Web Tools plugin to the latest available version at least 2.7.1...

WordPress Futurio Extra plugin <= 1.6.2 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability discovered by Jan w Oleju in WordPress Futurio Extra plugin versions = 1.6.2. Possible chained Cross-Site Scripting XSS vulnerability. Solution Update the WordPress Futurio Extra plugin to the latest available version at least 1.6.3...

Fix of CVE: CVE-2021-3973, CVE-2021-3974, CVE-2021-4019, CVE-2021-4069, CVE-2021-3984

CVE-2021-3974: fix using freed memory with regexp using a mark - CVE-2021-3984: fix illegal memory access when C-indenting - CVE-2021-3973: fix crash when using CTRL-W f without finding a file name - CVE-2021-4019: fix buffer overflow with long help argument - CVE-2021-4069: fix using freed...

CLSA-2021-1640621325 Fix of CVE: CVE-2021-3973, CVE-2021-3974, CVE-2021-4019, CVE-2021-4069, CVE-2021-3984

CVE-2021-3974: fix using freed memory with regexp using a mark - CVE-2021-3984: fix illegal memory access when C-indenting - CVE-2021-3973: fix crash when using CTRL-W f without finding a file name - CVE-2021-4019: fix buffer overflow with long help argument - CVE-2021-4069: fix using freed...

CVE-2021-20859

ELECOM LAN routers WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior,...

PT-2021-7388 · Vim +6 · Vim +6

Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue is related to a Heap-based Buffer Overflow in the vim text editor. It is associated with incorrect handling of CTRL-W f when no file name is present. Exploitation of this issue allows...

PT-2021-10913

Name of the Vulnerable Software and Affected Versions Irfanview version 4.53 Description The issue is related to an infinity loop in Irfanview via JPEG2000, specifically at ShowPlugInSaveOptions W+0x1ecd8. Recommendations For Irfanview version 4.53, consider avoiding the use of the JPEG2000 plugi...

e-w-e.ru Improper Access Control vulnerability OBB-2203272

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Path Traversal in yuda-lyu/w-zip

Description w-zip is vulnerable to Arbitrary File Write via Archive Extraction Zip Slip. Proof of Concept // PoC.js var wz = require'w-zip'; let fpUnzip = './testData/outputZip' let fpUnzipExtract = fpUnzip + '/extract' let fpZip1 = fpUnzip + '/zipslip.zip' async function checkzipslip //unzip...