627 matches found
CVE-2021-26293
An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled. They allow directory traversal to create new files such as an executable file under the web root. This is related to DAVServer.php in 8.x and DAV/Server.php in 7.x...
CVE-2021-26293
An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled. They allow directory traversal to create new files such as an executable file under the web root. This is related to DAVServer.php in 8.x and DAV/Server.php in 7.x...
Directory traversal
An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled. They allow directory traversal to create new files such as an executable file under the web root. This is related to DAVServer.php in 8.x and DAV/Server.php in 7.x...
CVE-2021-26293
CVE-2021-26293 affects AfterLogic Aurora and WebMail Pro (DAV enabled). The vulnerability stems from directory traversal in the WebDAV handling (DAVServer.php/DAV/Server.php) that allows creating files under the web root, enabling potential remote code execution via uploaded files. Severity is hi...
CVE-2021-26293
An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled. They allow directory traversal to create new files such as an executable file under the web root. This is related to DAVServer.php in 8.x and DAV/Server.php in 7.x...
AfterLogic Aurora 路径遍历漏洞
Afterlogic Aurora is a set of U.S. Afterlogic Inc. using PHP language written in the enterprise mail server platform. The platform includes features such as e-mail, file storage and address book management. A path traversal vulnerability exists in AfterLogic Aurora through 8.5.3 and WebMail Pro...
Penguin Aurora Box has an unauthorized access vulnerability
Penguin Aurora Box is a high-end network HD set-top box produced by Tencent Video in conjunction with Skyworth Digital. An unauthorized access vulnerability exists in Penguin Aurora Box. An attacker can exploit the vulnerability to gain unauthorized access to a specific link to remotely control a...
The vulnerability of the PresentationAvailabilityObserver::AvailabilityChanged method in the Sailfish Browser application of the Aurora operating system allows a perpetrator to trigger a service failure.
The vulnerability of the PresentationAvailabilityObserver::AvailabilityChanged method in the Sailfish Browser application for the Aurora operating system is related to the use of dynamic memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
Skyworth Digital Technology Limited Penguin Aurora Box has Denial of Service Vulnerability
Penguin Aurora Box is a high-end network HD set-top box produced by Tencent Video in conjunction with Skyworth Digital. A denial of service vulnerability exists in the Skyworth Digital Technology Limited Penguin Aurora Box, which can be exploited by attackers to cause a denial of service...
Aurora PDF Reader has a dll hijacking vulnerability (NVD-C-2020-294256)
Aurora PDF Reader is a PDF file viewing software. Aurora PDF Reader has a dll hijacking vulnerability that can be exploited by attackers to load malicious dlls and execute malicious code...
Command Execution Vulnerability in Aurora PDF Reader pc Client Software
Aurora PDF Reader is a reading conversion tool. Aurora PDF Reader pc client software has a command execution vulnerability that can be exploited by an attacker to gain control of the server...
WordPress Import XML and RSS Feeds plugin <= 2.0.1 - Server-Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability discovered by Suzhou Aurora Infinity Information Technology Co., Ltd. in WordPress Import XML and RSS Feeds plugin versions = 2.0.1. Solution Update the WordPress Import XML and RSS Feeds plugin to the latest available version at least 2.0.2...
aurora-nekretnine.hr Cross Site Scripting vulnerability OBB-1337541
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
auroraoverheaddoor.ca Cross Site Scripting vulnerability OBB-1271612
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
WordPress Podcast Importer SecondLine plugin <= 1.1.4 - Server-Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability discovered by Suzhou Aurora Infinity Information Technology Co., Ltd. in WordPress Podcast Importer SecondLine plugin versions = 1.1.4. Solution Update the WordPress Podcast Importer SecondLine plugin to the latest available version at least 1.1.5...
aurora.co.th Cross Site Scripting vulnerability OBB-1212831
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Aurora DAO Security Breach
Aurora DAO AURA is a decentralized trading system for Ether ECR-20 tokens. A security vulnerability exists in AURA's Owned smart contract implementation. An attacker could exploit the vulnerability to gain ownership of the contract, causing a denial of service...
How we Developed a Unified Binary Store (UBS): Part 1
Like most technology companies, VMware Carbon Black has a combination of acquired and built technologies that all utilize their own data stores. As our products have evolved to include the benefits of a centralized cloud offering, our data stores needed to similarly evolve. A new goal was formed:...