ai.hyacinth.framework:core-service-config-server (=0.5.24), cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (=3.1.0.RELEASE) +63 more potentially affected by CVE-2025-22232 via org.springframework.cloud:spring-cloud-config-server (>=2.2.0.RELEASE <=3.1.1)

org.springframework.cloud:spring-cloud-config-server MAVEN version =2.2.0.RELEASE, =2.2.1.RELEASE, =0.0.1.RELEASE, =0.0.1-RELEASE, =1.1.1, =1.0.0, =1.0.0.RELEASE, =1.0.1 - com.github.niupengyu:ahead-frame-commons =1.2.5-RELEASE - com.github.niupengyu:ahead-frame-core =1.2.5-RELEASE -...

Spring Cloud Config Server Directory Traversal

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Directory Traversal in Spring Cloud Config Server', 'Description' = %q This module exploits an unauthenticated directory traversal vulnerability...

Spring Cloud Config Server Directory Traversal

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Spring Cloud Config Server Directory Traversal', 'Description' = %q This module exploits an unauthenticated directory traversal vulnerability whi...

cloud-init security, bug fix, and enhancement update

23.1.1-11.0.2 - Fix Oracle Datasource network and getdata methods for OCI OL Orabug: 35950168 23.1.1-11.0.1 - Increase retry value and add timeout for OCI Orabug: 35329883 - Fix log file permission Orabug: 35302969 - Update detection logic for OL distros in config template Orabug: 34845400 - Adde...

PT-2023-26699 · Unknown · Dango-Translator

Name of the Vulnerable Software and Affected Versions: Dango-Translator version 4.5.5 Description: A remote command execution RCE issue was found in Dango-Translator via the app/config/cloud config.json component. Recommendations: For Dango-Translator version 4.5.5, at the moment, there is no...

VMware Spring Cloud Config 2.1 < 2.1.9 / 2.2 < 2.2.3 Directory Traversal

The version of Spring Cloud Config running on the remote host is affected by a directory traversal vulnerability. Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the...

VMware Spring Cloud Config Installed

Binary data vmwarespringcloudconfiginstalled.nbin...

The vulnerability of the Spring Cloud Config server arises due to an incorrect path name limitation for the restricted access catalog, allowing attackers to expose the protected information.

The vulnerability of the Spring Cloud Config server exists due to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability allows a malicious actor to expose the protected information using a specially created URL address...

The vulnerability of the /cloud_config/router_post/login function in TP-LINK’s WR-886N router software allows a attacker to execute arbitrary code.

The vulnerability of the /cloudconfig/routerpost/login function in TP-LINK’s WR-886N router software arises due to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted request...

VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability

Spring, by VMware Tanzu, Cloud Config contains a path traversal vulnerability that allows applications to serve arbitrary configuration files...

CVE-2021-44632

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloudconfig/routerpost/upgradeinfo feature, which allows malicious users to execute arbitrary code on the system via a crafted post request...

CVE-2021-44630

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloudconfig/routerpost/modifyaccountpwd feature, which allows malicious users to execute arbitrary code on the system via a crafted post request...

CVE-2021-44628

A Buffer Overflow vulnerabiltiy exists in TP-LINK WR-886N 20190826 2.3.8 in thee /cloudconfig/routerpost/login feature, which allows malicious users to execute arbitrary code on the system via a crafted post request...

CVE-2021-44625

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in /cloudconfig/clouddevice/info interface, which allows a malicious user to executee arbitrary code on the system via a crafted post request...

TP-Link WR886N 安全漏洞

A buffer overflow vulnerability exists in TP-Link TL-WR886N 20190826 version 2.3.8, which originates from the /cloudconfig/routerpost/resetcloudpwd function when executing operations on memory An authenticated attacker could use this vulnerability to execute arbitrary code on the system via a...

TP-Link WR886N 安全漏洞

The TP-Link TL-WR886N is a wireless router from China P&L. A stack overflow vulnerability exists in the TP-Link TL-WR886N /cloudconfig/routerpost/getregverifycode, which can be exploited by a remote attacker to submit a special request that can crash an application or can be used to execute...

TP-Link WR886N 安全漏洞

TP-Link TL-WR886N is a wireless router from China Pulink.A buffer overflow vulnerability exists in TP-Link TL-WR886N 20190826 2.3.8, which stems from a failure to properly validate data boundaries when executing operations on memory in the /cloudconfig/routerpost/login function. An authenticated...

CVE-2021-44628

A Buffer Overflow vulnerabiltiy exists in TP-LINK WR-886N 20190826 2.3.8 in thee /cloudconfig/routerpost/login feature, which allows malicious users to execute arbitrary code on the system via a crafted post request...

CVE-2021-44623

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 via the /cloudconfig/routerpost/checkresetpwdverifycode interface...

VulnCheck KEV: CVE-2020-5410

Spring, by VMware Tanzu, Cloud Config contains a path traversal vulnerability that allows applications to serve arbitrary configuration files...