EUVD-2008-5384

Malware in sbrugna...

EUVD-2006-6454

Malware in sbrugna...

EUVD-2018-17218

Malware in sbrugna...

EUVD-2001-0142

Malware in sbrugna...

EUVD-2018-15568

Malware in sbrugna...

EUVD-2022-32122

Malicious code in bioql PyPI...

xml2rfc has file inclusion irregularities

Version 3.12.0 changed xml2rfc so that it would not access local files without the presence of its new --allow-local-file-access flag. This prevented XML External Entity XXE injection attacks with xinclude and XML entity references. It was discovered that xml2rfc does not respect...

CVE-2024-47578 Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)

Adobe Document Service allows an attacker with administrator privileges to send a crafted request from a vulnerable web application. It is usually used to target internal systems behind firewalls that are normally inaccessible to an attacker from the external network, resulting in a Server-Side...

PT-2024-16596 · WordPress · Product Input Fields For Woocommerce

Name of the Vulnerable Software and Affected Versions: Product Input Fields for WooCommerce plugin for WordPress versions up to, and including, 1.9 Description: The issue allows authenticated attackers with Contributor-level access and above to read the contents of arbitrary files on the server,...

SUSE-SU-2022:0334-1 Security update for containerd, docker

This update for containerd, docker fixes the following issues: - CVE-2021-41089: Fixed 'cp' can chmod host files bsc1191015. - CVE-2021-41091: Fixed flaw that could lead to data directory traversal in moby bsc1191434. - CVE-2021-41092: Fixed exposed user credentials with a misconfigured...

Citrix PVS vDisk is caching on server even though it is configured to cache to the machine

Scenario: PVS target devices streaming a new version of a vDisk are caching to the server instead of to the cache drive on the target device. Target devices streaming the original version of the vDisk work correctly. Attempts to create or edit a file on the write cache are denied. Inspecting the...

OPENSUSE-SU-2020:2064-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues: - DBD::File drivers can open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. bsc1176492, CVE-2014-10401, CVE-2014-10402 This update was imported from the SUSE:SLE-15-SP2:Update update...

NewStart CGSL MAIN 4.05 : thunderbird Multiple Vulnerabilities (NS-SA-2020-0022)

The remote NewStart CGSL host, running version MAIN 4.05, has thunderbird packages installed that are affected by multiple vulnerabilities: - Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent proces...

SUSE-SU-2019:14155-1 Recommended update for ghostscript-library

This update for ghostscript-library fixes the following issues: Security issue fixed: - CVE-2019-3838: Fixed various bugs which allows to reenable and misuse system Postscript operators to read files from within Postscript files and send them with the help of e.g. the %pipe% to the attacker...

Pligg <= 9.9.0 (XSS/LFI/SQL) Multiple Remote Vulnerabilities

No description provided by source. Pligg = 9.9.0 Multiple Vulnerabilities July 31, 2008 Vendor : Pligg, LLC URL : http://www.pligg.com/ Version : Pligg = 9.9.0 Risk : Multiple Vulnerabilities Description: Pligg is a popular open source, full featured, content management system written in php. The...

Pligg CMS 9.9.0 - Cross-Site Scripting Local File Inclusion SQL Injection

Pligg CMS 9.9.0 - Cross-Site Scripting Local File Inclusion SQL Injection GulfTech Security Research July 30, 2008 Vendor : Pligg LLC URL : http://www.pligg.com/ Version : Pligg alertdocument.cookie; The above example link would display the end users cookie to them. Of course this can also be use...

Design/Logic Flaw

The RtlDosPathNameToNtPathNameU API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly convert DOS style paths with trailing spaces into NT style paths, which allows context-dependent attackers to create files that cannot be accessed through the expected DOS path or...

XOOPS Module module 3.0 - Directory Traversal

XOOPS Module module 3.0 - Directory Traversal source: https://www.securityfocus.com/bid/12406/info Xoops Incontent module is reported prone to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input. A malicious user could...

IceWarp Web Mail 5.3 - login.html 'Username' Cross-Site Scripting

source: https://www.securityfocus.com/bid/12396/info Multiple remote vulnerabilities reportedly affect IceWarp Web Mail. The underlying issues are due to input and access validation errors. Multiple cross-site scripting and HTML injection vulnerabilities affect the vulnerable software. The produc...

QuiXplorer < 2.3.1 item Parameter Directory Traversal File Access

Binary data 1727.prm...