12 matches found
EUVD-2003-1142
Malware in sbrugna...
EUVD-2019-6969
Malware in sbrugna...
EUVD-2002-1907
Malware in sbrugna...
EUVD-2022-5717
Malicious code in bioql PyPI...
EUVD-2024-48663
Malicious code in bioql PyPI...
EUVD-2025-7418
Malicious code in bioql PyPI...
CVE-2020-7616
express-mock-middleware through 0.0.6 is vulnerable to Prototype Pollution. Exported functions by the package can be tricked into adding or modifying properties of the Object.prototype. Exploitation of this vulnerability requires creation of a new directory where an attack code can be placed whic...
MODx 'ucfg' Parameter Arbitrary File Access
The installed version of MODx allows access to arbitrary files because it fails to perform sufficient validation on 'ucfg' parameter in 'assets/snippets/ajaxSearch/ajaxSearchPopup.php'. By supplying directory traversal strings such as '..%2F' in a specially crafted AjaxSearch 'POST' request, it i...
CVE-2004-0815
The unixcleanname function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via "/.////" style sequences in pathnames...
1st Class Mail Server 4.0 1 - Index Cross-Site Scripting
source: https://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail Server version 4.01 is reported to be prone to these issues,...
CVE-2001-0591
Directory traversal vulnerability in Oracle JSP 1.0.x through 1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 can allow a remote attacker to read or execute arbitrary .jsp files via a '..' dot dot attack...
anaconda clipper 3.3 - Directory Traversal
anaconda clipper 3.3 - Directory Traversal source: https://www.securityfocus.com/bid/2512/info Clipper is a headline-gathering tool from Anaconda! Partners which, in certain versions, is vulnerable to directory traversal attacks. By including '/../' sequences in requested URLs, an attacker can...