UBUNTU-CVE-2019-16892

In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofed. This allows attackers to cause a denial of service disk consumption...

FileThingie 2.5.7 - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: FileThingie 2.5.7 - Arbitrary File Upload Author: Cakes Vendor Homepage: www.solitude.dk/filethingie Software Link: https://github.com/leefish/filethingie/archive/master.zip Tested Version: 2.5.7 Tested on OS: CentOS 7 CVE: N/A...

PT-2019-4757 · Gnu +7 · Cpio +7

Name of the Vulnerable Software and Affected Versions: cpio versions prior to 2.13 Description: The issue is related to the improper validation of input files when generating TAR archives. This can lead to the creation of archives containing files with permissions or in paths that the attacker di...

Ubuntu 16.04 LTS / 18.04 LTS : NLTK vulnerability (USN-4106-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4106-1 advisory. Mike Salvatore discovered that NLTK mishandled crafted ZIP archives during extraction. A remote attacker could use this vulnerability to write arbitra...

USN-4106-1: NLTK vulnerability

Mike Salvatore discovered that NLTK mishandled crafted ZIP archives during extraction. A remote attacker could use this vulnerability to write arbitrary files to the filesystem...

USN-4106-1 NLTK vulnerability

Mike Salvatore discovered that NLTK mishandled crafted ZIP archives during extraction. A remote attacker could use this vulnerability to write arbitrary files to the filesystem...

The vulnerability of the IcedTea-Web plugin, related to an incorrect limitation on the path name to the restricted access catalog, allows a hacker to write arbitrary files to the device’s file system.

The vulnerability of the IcedTea-Web plugin is related to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to write arbitrary files to the device’s file system using a specially crafted file in formats: .tar, .jar, .war,...

CVE-2019-14771

CVE-2019-14771 affects Backdrop CMS: versions 1.12.x prior to 1.12.8 and 1.13.x prior to 1.13.3. The flaw lets an attacker upload entire-site configuration archives via the UI or CLI without validating archive contents, potentially permitting non-configuration scripts to be stored on the server. ...

CVE-2016-10792

cPanel before 59.9999.145 allows code execution in the context of other accounts via mailman list archives SEC-141...

CVE-2016-10792

cPanel before 59.9999.145 allows code execution in the context of other accounts via mailman list archives SEC-141...

CVE-2016-10792

cPanel before 59.9999.145 allows code execution in the context of other accounts via mailman list archives SEC-141...

CVE-2016-10792

CVE-2016-10792 affects cPanel prior to 59.9999.145. The vulnerability allows code execution in the context of other accounts via mailman list archives (SEC-141). This is the explicit impact described in connected references. The provided documents do not specify the exact vulnerable component or ...

unzip: Buffer overflow in list.c resulting in a denial of service

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12...

CVE-2017-18403

cPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archives SEC-337...

Code injection

cPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archives SEC-337...

CVE-2017-18403

CVE-2017-18403 affects cPanel prior to 68.0.15. The vulnerability allows code execution in the context of the nobody account via Mailman archives (SEC-337). Impact details in the provided documents indicate a potential compromise of systems running affected cPanel versions. The recommended remedi...

Design/Logic Flaw

Zipios before 0.1.7 does not properly handle certain malformed zip archives and can go into an infinite loop, causing a denial of service. This is related to zipheadio.h:readUint32 and zipfile.cpp:Zipfile::Zipfile...

CVE-2019-13453

Zipios before 0.1.7 does not properly handle certain malformed zip archives and can go into an infinite loop, causing a denial of service. This is related to zipheadio.h:readUint32 and zipfile.cpp:Zipfile::Zipfile...

UBUNTU-CVE-2019-13453

Zipios before 0.1.7 does not properly handle certain malformed zip archives and can go into an infinite loop, causing a denial of service. This is related to zipheadio.h:readUint32 and zipfile.cpp:Zipfile::Zipfile...

csorp.nationalarchives.ie Cross Site Scripting vulnerability

Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting csorp.nationalarchives.ie website and its users. Following...