10656 matches found
VMware vRealize Log Insight Unauthenticated Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/proto/thrift' require 'rex/stopwatch' class MetasploitModule 'VMware vRealize Log Insight Unauthenticated RCE', 'Description' = %q VMware vRealize Log...
PT-2023-5202
Name of the Vulnerable Software and Affected Versions Apache Commons Compress versions 1.22 through 1.23 Description The issue is related to uncontrolled resource consumption due to insufficient input validation when processing TAR archive headers. This can be exploited by a remote attacker to...
Oracle Linux 7 : unzip (ELSA-2019-2159)
The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-2159 advisory. 6.0-20 - Fix CVE-2018-18384 Resolves: CVE-2018-18384 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...
Oracle Linux 7 : perl-Archive-Tar (ELSA-2019-2097)
The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-2097 advisory. 1.92-3 - CVE-2018-12015 - Directory traversal in Archive::Tar bug 1592803 Tenable has extracted the preceding description block directly from the Oracle Linux...
Oracle Linux 8 : python38:3.8 (ELSA-2020-4641)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4641 advisory. - Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote...
sok.stadsarkivet.stockholm.se Cross Site Scripting vulnerability OBB-3650380
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar
CVE-2023-38831 - RARLAB WinRAR Code Execution Vulnerability...
PT-2023-30443 · Ibos Oa · Ibos Oa
Name of the Vulnerable Software and Affected Versions: IBOS OA version 4.5.5 Description: A critical vulnerability was found in the Delete Draft Handler component, affecting an unknown part of the file at the endpoint "?r=email/api/delDraft&archiveId=0". The manipulation leads to SQL injection, a...
SUSE CVE-2023-36811
borgbackup is an opensource, deduplicating archiver with compression and authenticated encryption. A flaw in the cryptographic authentication scheme in borgbackup allowed an attacker to fake archives and potentially indirectly cause backup data loss in the repository. The attack requires an...
Remote Code Execution (RCE)
rar is vulnerable to Remote Code Execution RCE. This vulnerability exists due to a flaw in the way WinRAR parses recovery volume names in the old RAR 3.0 format. A remote attacker can exploit this vulnerability by tricking the victim to open a specially crafted archive, which could lead to...
Arbitrary File Write via Archive Extraction (Zip Slip)
Overview Affected versions of this package are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip due to improper input sanitization in the unzipFile function which allows an attacker to exploit this vulnerability by using a crafted zip file. Details It is exploited using a...
GHSA-R285-Q736-9V95 Filename spoofing in archive
An issue in Archive v3.3.7 allows attackers to spoof zip filenames which can lead to inconsistent filename parsing...
Path traversal in Archive
An issue in Archive v3.3.7 allows attackers to execute a path traversal via extracting a crafted zip file...
GHSA-9V85-Q87Q-G4VG Path traversal in Archive
An issue in Archive v3.3.7 allows attackers to execute a path traversal via extracting a crafted zip file...
Filename spoofing in archive
An issue in Archive v3.3.7 allows attackers to spoof zip filenames which can lead to inconsistent filename parsing...
Path traversal in Archive
An issue in Archive v3.3.7 allows attackers to execute a path traversal via extracting a crafted zip file...
RARLabs WinRAR Code Execution Vulnerability - Windows
WinRAR is prone to multiple code execution vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:rarlab:winrar";...
Filename spoofing in archive
An issue in Archive v3.3.7 allows attackers to spoof zip filenames which can lead to inconsistent filename parsing...
