PT-2016-6805

Name of the Vulnerable Software and Affected Versions KArchive versions prior to 5.24 Description A directory traversal issue allows remote attackers to write to arbitrary files via a ../ dot dot slash in a filename in an archive file. This is related to KNewsstuff downloads. Recommendations For...

UBUNTU-CVE-2016-6232

Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ dot dot slash in a filename in an archive file, related to KNewsstuff downloads...

The vulnerability of the Security SiteProtector System, a website security protection system, allows a hacker to write arbitrary files.

The vulnerability of the Security SiteProtector System’s security protection mechanism exists due to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability allows a malicious actor to remotely write arbitrary files...

CVE-2016-4971

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource...

CVE-2016-4971: Undefined Security Weakness

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource...

PT-2016-6415

Name of the Vulnerable Software and Affected Versions libarchive versions 3.2.0 and earlier Description The issue is related to the sandboxing code in libarchive, which incorrectly handles hardlink archive entries with non-zero data size. This could potentially allow remote attackers to write to...

CVE-2016-1435

Cisco 8800 phones with software 11.01 do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access, aka Bug ID CSCuz03014...

UBUNTU-CVE-2016-4971

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource...

PT-2016-4029

Name of the Vulnerable Software and Affected Versions Symantec Embedded Security: Critical System Protection SES:CSP versions 1.0.x through 1.0 before MP5 Embedded Security: Critical System Protection for Controllers and Devices SES:CSP version 6.5.0 before MP1 Critical System Protection SCSP...

Arbitrary File Write Vulnerability in SiteServer CMS Backend

SiteServer CMS is a website content management system developed by Beijing Billion Software Technology Development Co., Ltd. and is widely used in state ministries, group companies and large-scale portal sites. The information collection function in the management background of SiteServer CMS doe...

CVE-2016-3096

The createscript function in the lxccontainer module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on 1 /opt/.lxc-attach-script, 2 the archived container in the archivepath directory, or the 3...

CVE-2016-3096: Improper Link Resolution Before File Access

The createscript function in the lxccontainer module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on 1 /opt/.lxc-attach-script, 2 the archived container in the archivepath directory, or the 3...

CactiEZ_weathermap插件任意文件写入

No description provided by source...

VMware Player Multiple Vulnerabilities (May 2016) - Linux

VMware Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:player"; ifdescription...

VMware Player Multiple Vulnerabilities (May 2016) - Windows

VMware Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:player"; ifdescription...

VMware Workstation Multiple Vulnerabilities (May 2016) - Linux

VMware Workstation is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:workstation";...

VMware Workstation Multiple Vulnerabilities (May 2016) - Windows

VMware Workstation is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:workstation";...

VMware Fusion Privilege Escalation Vulnerability (May 2016) - Mac OS X

VMware Fusion is prone to host privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:fusion"...

Magento Arbitrary File Write Vulnerability

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engine and payment gateway and other functions. Magento 2.0.6 before the version of arbitrary file write vulnerability exists. Attackers can use this vulnerability...

Magento < 2.0.6 - Arbitrary Unserialize / Arbitrary Write File

arbitrary write file // Date: 18/05/206 // Exploit Author: agix discovered by NETANEL RUBIN // Vendor Homepage: https://magento.com // Version: /shipping-information // in the response check the payment method it may vary from checkmo // // If you didn't provide whereToWrite, it will execute...