1937 matches found
CVE-2022-28945
An issue in Webbank WeCube v3.2.2 allows attackers to execute a directory traversal via a crafted ZIP file...
Design/Logic Flaw
An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file...
Directory traversal
An issue in Webbank WeCube v3.2.2 allows attackers to execute a directory traversal via a crafted ZIP file...
CVE-2022-28945: Improper Limitation of a Pathname to a Restricted Directory
An issue in Webbank WeCube v3.2.2 allows attackers to execute a directory traversal via a crafted ZIP file...
CVE-2022-28945
CVE-2022-28945 affects Webbank WeCube v3.2.2. The vulnerability enables a directory traversal through a crafted ZIP file, due to insufficient validation of file paths when processing directory requests. Impact described as the ability to access restricted files via crafted archives; no remediatio...
CVE-2022-28945
An issue in Webbank WeCube v3.2.2 allows attackers to execute a directory traversal via a crafted ZIP file...
CVE-2022-28945
An issue in Webbank WeCube v3.2.2 allows attackers to execute a directory traversal via a crafted ZIP file...
CVE-2022-30506
CVE-2022-30506 affects MCMS 5.2.7. The vulnerability is an arbitrary file upload via a crafted ZIP file that allows an attacker to execute arbitrary code on the server. Connected sources corroborate a low-barrier remote vector and potential code execution; however, explicit patch details or versi...
CVE-2022-30506
An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file...
Arbitrary command execution in Minidoc
An arbitrary file upload vulnerability in Mindoc v2.1-beta.5 allows attackers to execute arbitrary commands via a crafted Zip file...
CVE-2022-30506: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file...
CVE-2022-29637
An arbitrary file upload vulnerability in Mindoc v2.1-beta.5 allows attackers to execute arbitrary commands via a crafted Zip file...
CVE-2022-29637
An arbitrary file upload vulnerability in Mindoc v2.1-beta.5 allows attackers to execute arbitrary commands via a crafted Zip file...
CVE-2022-29637
An arbitrary file upload vulnerability in Mindoc v2.1-beta.5 allows attackers to execute arbitrary commands via a crafted Zip file...
Privilege escalation
An arbitrary file upload vulnerability in Mindoc v2.1-beta.5 allows attackers to execute arbitrary commands via a crafted Zip file...
CVE-2022-29637
An arbitrary file upload vulnerability in Mindoc v2.1-beta.5 allows attackers to execute arbitrary commands via a crafted Zip file...
CVE-2022-29637
CVE-2022-29637 affects Mindoc v2.1-beta.5, where an arbitrary file upload vulnerability in the Unzip/ZIP handling allows an attacker to execute arbitrary commands through a crafted Zip file. Multiple sources (Veracode and Snyk entries referencing Mindoc’s unzip/ziptil code paths) describe the iss...
CVE-2022-29637: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in Mindoc v2.1-beta.5 allows attackers to execute arbitrary commands via a crafted Zip file...
EulerOS 2.0 SP3 : unzip (EulerOS-SA-2022-1768)
According to the versions of the unzip package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound...