8 matches found
Nezha Monitoring: Pre-auth path traversal via /dashboard.. prefix confusion leaks jwt_secret_key
Summary fallbackToFrontend in the dashboard's NoRoute handler treats any URL whose raw string starts with /dashboard as an admin-frontend asset request. The check uses strings.HasPrefix, not a path-segment match, so the input /dashboard../data/config.yaml is accepted; strings.TrimPrefix leaves...
The vulnerability of the Ruijie EG-2000SE switch’s microprogramming software lies in the fact that passwords are stored in an open manner, allowing attackers to reset the passwords.
The vulnerability of the Ruijie EG-2000SE switch’s microprogramming software lies in the fact that passwords are stored in an open manner at /data/config.text. Exploiting this vulnerability allows a malicious actor to remotely reset the passwords...
CVE-2022-24387
With administrator or admin privileges the application can be tricked into overwriting files in appdata/Config folder, e.g. the systemsettings.xml file. THis is possible in SmarterTrack v100.0.8019.14010...
SmarterTools SmarterTrack 代码问题漏洞
SmarterTools SmarterTrack is a customer service software from SmarterTools UK. It improves customer service and reduces support costs. SmarterTools SmarterTrack 100.0.8019.14010 A security vulnerability exists where an application using administrator or administrator privileges could be tricked...
DEBIAN-CVE-2019-0193
In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen uses this to allow convenient debuggi...
CVE-2016-1525: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allows remote authenticated users to read arbitrary files via a .. dot dot in the realName parameter...
