5 matches found
nmap-CVE-2022-29464
nmap-CVE-2022-29464 nmap-CVE-2022-29464 is an NSE script for detecting CVE-2022-29464 vulnerability. Unauthorized and unrestricted arbitrary file transfer vulnerability that allows unauthenticated attackers to obtain RCEs on WSO2 servers by sending malicious JSP files. Vulnerability See good...
Exploit for Path Traversal in Wso2 Api_Manager
nmap-CVE-2022-29464 nmap-CVE-2022-29464 is an NSE script for d...
CVE-2018-8714: Exposure of Sensitive Information to an Unauthorized Actor
Honeywell MatrikonOPC OPC Controller before 5.1.0.0 allows local users to transfer arbitrary files from a host computer and consequently obtain sensitive information via vectors related to MSXML libraries...
CVE-2007-4909: Undefined Security Weakness
Interpretation conflict in WinSCP before 4.0.4 allows remote attackers to perform arbitrary file transfers with a remote server via file-transfer commands in the final portion of a 1 scp, and possibly a 2 sftp or 3 ftp, URL, as demonstrated by a URL specifying login to the remote server with a...
WinSCP URL Protocol Handler Arbitrary File Transfer
According to its version, the installation of WinSCP on the remote host fails to completely sanitize input to the SCP and SFTP protocol handlers. If an attacker can trick a user on the affected host into clicking on a malicious link, a file transfer can be initiated to or from the affected host. ...