CVE-2024-3803 Vesystem Cloud Desktop fileupload.php unrestricted upload

A vulnerability classified as critical was found in Vesystem Cloud Desktop up to 20240408. This vulnerability affects unknown code of the file /Public/webuploader/0.1.5/server/fileupload.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely...

CVE-2024-3803

CVE-2024-3803 affects Vesystem Cloud Desktop up to 20240408. The vulnerability resides in /Public/webuploader/0.1.5/server/fileupload.php, where manipulating the file parameter enables an unrestricted upload. The issue is exploitable remotely and the exploit has been publicly disclosed. Affected ...

Vesystem Cloud Desktop 代码问题漏洞

Vesystem Cloud Desktop is a cloud desktop system from China's Hexin Chuangtian Vesystem. A code issue vulnerability exists in Vesystem Cloud Desktop 20240408 and prior versions, which stems from the parameter file in the file /Public/webuploader/0.1.5/server/fileupload2.php that can lead to...

Vesystem Cloud Desktop 代码问题漏洞

Vesystem Cloud Desktop is a cloud desktop system from China's Hexin Chuangtian Vesystem. A code issue vulnerability exists in Vesystem Cloud Desktop 20240408 and prior versions, which stems from the parameter file in the file /Public/webuploader/0.1.5/server/fileupload.php that can lead to...

CVE-2024-3804: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, has been found in Vesystem Cloud Desktop up to 20240408. This issue affects some unknown processing of the file /Public/webuploader/0.1.5/server/fileupload2.php. The manipulation of the argument file leads to unrestricted upload. The attack may b...

PT-2024-27879

Name of the Vulnerable Software and Affected Versions Vesystem Cloud Desktop up to 20240408 Description A critical issue has been found in the processing of the file /Public/webuploader/0.1.5/server/fileupload2.php. The manipulation of the file argument leads to unrestricted upload. The attack ma...

PT-2024-27878 · Vesystem · Vesystem Cloud Desktop

Name of the Vulnerable Software and Affected Versions: Vesystem Cloud Desktop versions up to 20240408 Description: A critical vulnerability was found in Vesystem Cloud Desktop, affecting the file /Public/webuploader/0.1.5/server/fileupload.php. The manipulation of the file argument leads to...

CVE-2024-3803: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical was found in Vesystem Cloud Desktop up to 20240408. This vulnerability affects unknown code of the file /Public/webuploader/0.1.5/server/fileupload.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely...

PT-2024-23076

Name of the Vulnerable Software and Affected Versions Evolution Controller versions 2.04.560.31.03.2024 and below Description The Web interface of Evolution Controller contains poorly configured access control on the DESKTOP EDIT USER GET CARD endpoint, allowing an unauthenticated attacker to...

CVE-2024-25545

An issue in Weave Weave Desktop v.7.78.10 allows a local attacker to execute arbitrary code via a crafted script to the nwjs framework component...

CVE-2024-25545

An issue in Weave Weave Desktop v.7.78.10 allows a local attacker to execute arbitrary code via a crafted script to the nwjs framework component...

Weave Desktop 安全漏洞

Weave Desktop is a development tool for creating and managing microservices from Weave. A security vulnerability exists in Weave Desktop version v.7.78.10, which originates from a vulnerability that allows a local attacker to execute arbitrary code via the nwjs framework component...

CVE-2024-25545

An issue in Weave Weave Desktop v.7.78.10 allows a local attacker to execute arbitrary code by providing a crafted script to the nwjs framework component. This vulnerability is associated with CWE-358 (Improperly Implemented Security Check for Standard). As a temporary workaround, users are advis...

PT-2024-20997 · Weave · Weave Desktop

Name of the Vulnerable Software and Affected Versions: Weave Weave Desktop version 7.78.10 Description: An issue in Weave Weave Desktop allows a local attacker to execute arbitrary code via a crafted script to the nwjs framework component. Recommendations: For Weave Weave Desktop version 7.78.10,...

CVE-2024-25545: Improperly Implemented Security Check for Standard

An issue in Weave Weave Desktop v.7.78.10 allows a local attacker to execute arbitrary code via a crafted script to the nwjs framework component...

CVE-2024-25545

An issue in Weave Weave Desktop v.7.78.10 allows a local attacker to execute arbitrary code via a crafted script to the nwjs framework component...

CVE-2024-25545

An issue in Weave Weave Desktop v.7.78.10 allows a local attacker to execute arbitrary code via a crafted script to the nwjs framework component...

Zoom Desktop Client for Linux Cross-Site Scripting Vulnerability

Zoom Desktop Client for Linux is a client application designed for virtualized desktop environments such as Windows 365 Cloud PC. A cross-site scripting vulnerability exists in Zoom Desktop Client for Linux, which stems from the application's lack of effective filtering and escaping of...

CVE-2024-26362

HTML injection vulnerability in Enpass Password Manager Desktop Client 6.9.2 for Windows and Linux allows attackers to run arbitrary HTML code via creation of crafted note...

CVE-2024-20770

Photoshop Desktop versions 24.7.2, 25.3.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in th...