3062 matches found
PT-2023-18761 · Pandora · Pandora
Name of the Vulnerable Software and Affected Versions: Pandora aka pandora-analysis/pandora version 1.3.0 Description: The issue allows a denial of service when an attacker submits a deeply nested ZIP archive, also known as a ZIP bomb. This can be exploited through the workers/extractor.py...
monmouthcastlemuseum-archives.org.uk Cross Site Scripting vulnerability OBB-3131402
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SSZipArchive 后置链接漏洞
SSZipArchive is ZipArchive open source a simple utility class . It is used to compress and uncompress files on iOS, macOS and tvOS. A security vulnerability exists in SSZipArchive 2.5.3 and prior versions, which stems from its lack of sanitization of symbolic link paths causing SSZipArchive to...
Improper Access Control
github.com/usememos/memos is vulnerable to improper access control. Access control bypass through insecure direct object references allows an attacker to archive victim's memos...
SUSE-SU-2023:0006-1 Security update for nautilus
This update for nautilus fixes the following issues: - CVE-2022-37290: Fixed a denial of service caused by pasted ZIP archives bsc1205418...
GHSA-7QPW-2J9M-RW8C usememos/memos has Insufficient Granularity of Access Control
An Insufficient Granularity of Access Control in usememos/memos prior to 0.9.0 can allow an attacker to delete a memo from the archives...
IDOR to delete memo from archives
Description Insecure direct object references IDOR are a type of access control vulnerability that arises when an application uses user-supplied input to access objects directly. Proof of Concept 1 Login into your account at demo.usememos.com 2 Turn on your burpsuite proxy 3 Go to archived memos ...
[SECURITY] Fedora 36 Update: libtar-1.2.20-26.fc36
libtar is a C library for manipulating tar archives. It supports both the strict POSIX tar format and many of the commonly-used GNU extensions...
[SECURITY] Fedora 37 Update: libtar-1.2.20-26.fc37
libtar is a C library for manipulating tar archives. It supports both the strict POSIX tar format and many of the commonly-used GNU extensions...
GHSA-JPF8-H7H7-3PPM tar-utils Path Traversal vulnerability
Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...
Unzip vulnerable to path traversal
Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...
tar-utils Path Traversal vulnerability
Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...
Fedora: Security Advisory for libtar (FEDORA-2022-88772d0a2d)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-25046
Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...
CVE-2020-36566
Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...
Input validation
Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...
Input validation
Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...
Input validation
Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...
CVE-2020-36566 Path traversal in github.com/whyrusleeping/tar-utils
Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...