Ruby Unauthorized Operation Vulnerability

Ruby is a cross-platform, object-oriented, dynamically typed programming language from the software developer Gyohiro Matsumoto. A security vulnerability exists in Ruby. An attacker can exploit this vulnerability to create arbitrary files...

CVE-2020-4240

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to overwrite or create arbitrary files on the system. IBM X-Force ID: 175417...

The vulnerability of the Diagnostics Hub Standard Collector and Visual Studio Standard Collector components of the Microsoft Visual Studio software for developing applications, as well as Windows operating systems, allows a perpetrator to create files in arbitrary directories.

The vulnerability of the Diagnostics Hub Standard Collector and Visual Studio Standard Collector components of the Microsoft Visual Studio software and Windows operating systems is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to create files in...

Selesta Visual Access Manager Buffer Overflow Vulnerability

Selesta Visual Access Manager VAM is the Selesta Visual Access Manager. A security vulnerability exists in Selesta Visual Access Manager VAM versions 4.15.0 through 4.29, which results from the program failing to check for parameters, destination paths, or extensions used to specify the name of t...

CVE-2019-19988

An issue was discovered in Selesta Visual Access Manager VAM 4.15.0 through 4.29. A user with valid credentials is able to create and write XML files on the filesystem via /common/vameditXml.php in the web interface. The vulnerable PHP page checks none of these: the parameter that identifies the...

CVE-2020-5720

MikroTik WinBox before 3.21 is vulnerable to a path traversal vulnerability that allows creation of arbitrary files wherevere WinBox has write permissions. WinBox is vulnerable to this attack if it connects to a malicious endpoint or if an attacker mounts a man in the middle attack...

CVE-2013-1866

OpenSC OpenSC.tokend has an Arbitrary File Creation/Overwrite Vulnerability...

Design/Logic Flaw

Gemalto Tokend 2013 has an Arbitrary File Creation/Overwrite Vulnerability...

Design/Logic Flaw

OpenSC OpenSC.tokend has an Arbitrary File Creation/Overwrite Vulnerability...

CVE-2013-1867

Gemalto Tokend 2013 has an Arbitrary File Creation/Overwrite Vulnerability...

CVE-2013-1867

Technical details (affected product/version, root cause, impact, fixes) are not publicly provided in the connected documents; monitor for updates.

CVE-2013-1866

CVE-2013-1866 affects OpenSC OpenSC.tokend, with an Arbitrary File Creation/Overwrite vulnerability. Descriptions in multiple sources confirm the issue but do not provide concrete exploitation details, affected versions, or specific root-cause code paths. The connected documents do not specify mi...

CVE-2013-1866

OpenSC OpenSC.tokend has an Arbitrary File Creation/Overwrite Vulnerability...

ThinkPHP Arbitrary File Creation and Deletion Vulnerability

ThinkPHP is a lightweight homegrown PHP development framework created to simplify enterprise-level application development and agile WEB application development. ThinkPHP has an arbitrary file creation and deletion vulnerability, which can be exploited by attackers to create arbitrary files and...

CVE-2020-0641

An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'...

CVE-2020-0641

An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'...

Unspecified Vulnerability in Multiple HPE Products

HPE SimpliVity 380 Gen 9 and others are a server from Hewlett Packard Enterprise HPE in the United States. A security vulnerability exists in several HPE products. An attacker could exploit the vulnerability to create and delete arbitrary files...

Logic flaw vulnerability in Zendo project management system

Zendo is China's first open source project management software. It integrates product management , project management , quality management , document management , organization management and transaction management. Zendo project management system has a logic flaw vulnerability , an attacker can...

Microsoft Windows AppXsvc Deployment Extension - Privilege Escalation

Exploit Title: Microsoft Windows AppXsvc Deployment Extension - Privilege Escalation Date: 2019-11-22 Exploit Author: Abdelhamid Naceri Vendor Homepage: www.microsoft.com Tested on: Windows 10 1903 CVE : CVE-2019-1385 Windows: "AppX Deployment Service" AppXSVC elevation of privilege vulnerability...

ClipSoft REXPERT XML Injection Vulnerability

ClipSoft REXPERT is a report generation program from ClipSoft Korea. An injection vulnerability exists in ClipSoft REXPERT XML. An attacker can exploit this vulnerability to create and execute arbitrary files via the report printing function...