EUVD-2023-2824

Malicious code in bioql PyPI...

PT-2023-29481

Name of the Vulnerable Software and Affected Versions Yamcs version 5.8.6 Description The issue allows attackers to delete arbitrary files via crafted HTTP DELETE request to the storage functionality of the API. This is achieved through a Directory Traversal vulnerability. Recommendations For Yam...

Yamcs Path Traversal Vulnerability

Yamcs is an open source software framework from Yamcs Open Source. It is used to command and control spacecraft, satellites, payloads, ground stations and ground equipment. A security vulnerability exists in Yamcs version 5.8.6, which stems from a directory traversal vulnerability in the API...

CVE-2022-35569

Blogifier v3.0 was discovered to contain an arbitrary file upload vulnerability at /api/storage/upload/PostImage. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted file...

CVE-2022-35569: Improper Neutralization of Input During Web Page Generation

Blogifier v3.0 was discovered to contain an arbitrary file upload vulnerability at /api/storage/upload/PostImage. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted file...

PT-2022-22906

Name of the Vulnerable Software and Affected Versions Blogifier version 3.0 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted file, exploiting an arbitrary file upload vulnerability at the /api/storage/upload/PostImage API endpoint. This enables attacke...

Unitrends Backup api/storage input validation vulnerability

Added: 11/29/2017 Background Unitrends Backup is an enterprise backup, ransomware detection, and cloud continuity solution. Problem Unitrends Backup does not properly validate the hostname parameter in a JSON request to the api/storage resource, allowing a remote attacker to bypass authentication...

CVE-2017-12478: Improper Authentication

It was discovered that the api/storage web interface in Unitrends Backup UB before 10.0.0 has an issue in which one of its input parameters was not validated. A remote attacker could use this flaw to bypass authentication and execute arbitrary commands with root privilege on the target system...

PT-2017-2842

Name of the Vulnerable Software and Affected Versions Unitrends Backup versions prior to 10.0.0 Description The issue is related to the api/storage web interface, where an input parameter was not validated, allowing a remote attacker to bypass authentication and execute arbitrary commands with ro...