Lucene search
+L

1550 matches found

Vulnrichment
Vulnrichment
•added 2024/05/26 4:00 a.m.•24 views

CVE-2024-5353 anji-plus AJ-Report ZIP File decompress path traversal

A vulnerability classified as critical has been found in anji-plus AJ-Report up to 1.4.1. This affects the function decompress of the component ZIP File Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

6.5CVSS6.9AI score0.00802EPSS
SaveExploits1References4
CVE
CVE
•added 2024/05/26 4:00 a.m.•78 views

CVE-2024-5353

CVE-2024-5353 affects anji-plus AJ-Report up to 1.4.1. The issue is a path traversal in the ZIP File Handler decompress function, allowing remote initiation. Exploit has been disclosed publicly. No remediation details are provided in the connected documents; no explicit fixes or patched versions ...

9.8CVSS6.5AI score0.00802EPSS
SaveExploits1References4Affected Software1
Mend
Mend
•added 2024/05/26 4:00 a.m.•2 views

CVE-2024-5353

A vulnerability classified as critical has been found in anji-plus AJ-Report up to 1.4.1. This affects the function decompress of the component ZIP File Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

9.8CVSS0.00802EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/05/26 12:00 a.m.•20 views

AJ-Report 路径遍历漏洞

AJ-Report is a fully open source, drag-and-drop editing visual design tool from anji-plus open source. A path traversal vulnerability exists in anji-plus AJ-Report 1.4.1 and earlier versions, which stems from a path traversal vulnerability in the function decompress of the component ZIP File...

9.8CVSS6.5AI score0.00802EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/05/26 12:00 a.m.•4 views

PT-2024-35771

Name of the Vulnerable Software and Affected Versions anji-plus AJ-Report versions up to 1.4.1 Description A critical issue has been found in the ZIP File Handler component, specifically affecting the decompress function, leading to path traversal. This can be initiated remotely. Recommendations...

9.8CVSS0.00802EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/26 12:00 a.m.•5 views

CVE-2024-5353: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability classified as critical has been found in anji-plus AJ-Report up to 1.4.1. This affects the function decompress of the component ZIP File Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

9.8CVSS5.1AI score0.00802EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2024/05/16 12:00 a.m.•17 views

The vulnerability of the Temp File Handler component in the Plan 9 rc command line interface allows a hacker to create arbitrary temporary files.

The vulnerability of the Temp File Handler component in the Plan 9 rc shell environment is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to create arbitrary temporary files...

7.8CVSS7.3AI score0.01317EPSS
SaveExploits0References5Affected Software2
Redos
Redos
•added 2024/05/07 12:00 a.m.•37 views

ROS-20240507-04

A vulnerability in the Temp File Handler component of rc is related to the creation of temporary files. Exploitation The exploitation of the vulnerability may allow an intruder to gain unauthorized access to protected information...

7.5CVSS6.9AI score0.01317EPSS
SaveExploits0
NVD
NVD
•added 2024/04/07 10:15 p.m.•24 views

CVE-2024-3430

A vulnerability was found in QKSMS up to 3.9.4 on Android. It has been classified as problematic. This affects an unknown part of the file androidmanifest.xml of the component Backup File Handler. The manipulation leads to exposure of backup file to an unauthorized control sphere. It is possible ...

2.4CVSS3.5AI score0.00225EPSS
SaveExploits0References4
CVE
CVE
•added 2024/04/07 10:00 p.m.•79 views

CVE-2024-3430

CVE-2024-3430 affects QKSMS up to version 3.9.4 on Android, impacting the Backup File Handler component via manipulation of an area in androidmanifest.xml. The vulnerability leads to exposure of backup files to an unauthorized control sphere and can be exploited on a physical device. Public explo...

2.4CVSS3.5AI score0.00225EPSS
SaveExploits0References4
OSV
OSV
•added 2024/04/07 10:00 p.m.•17 views

CVE-2024-3430 QKSMS Backup File androidmanifest.xml backup

A vulnerability was found in QKSMS up to 3.9.4 on Android. It has been classified as problematic. This affects an unknown part of the file androidmanifest.xml of the component Backup File Handler. The manipulation leads to exposure of backup file to an unauthorized control sphere. It is possible ...

2.4CVSS4.7AI score
SaveExploits0References6
CNNVD
CNNVD
•added 2024/04/07 12:00 a.m.•17 views

QKSMS 安全漏洞

QKSMS is an open source alternative to the Stock Messaging application on Android by Moez Bhatti Personal Developer. A security vulnerability exists in QKSMS 3.9.4 and earlier versions, which stems from a security flaw in the file androidmanifest.xml of the component Backup File Handler...

2.4CVSS4.2AI score0.00225EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/04/07 12:00 a.m.•5 views

PT-2024-25780

Name of the Vulnerable Software and Affected Versions QKSMS versions up to 3.9.4 Description A vulnerability was found in QKSMS, affecting an unknown part of the file androidmanifest.xml of the component Backup File Handler. The manipulation leads to exposure of backup file to an unauthorized...

2.4CVSS5.1AI score0.00225EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/07 12:00 a.m.•3 views

CVE-2024-3430: Exposure of Backup File to an Unauthorized Control Sphere

A vulnerability was found in QKSMS up to 3.9.4 on Android. It has been classified as problematic. This affects an unknown part of the file androidmanifest.xml of the component Backup File Handler. The manipulation leads to exposure of backup file to an unauthorized control sphere. It is possible ...

2.4CVSS5AI score0.00225EPSS
SaveExploits0References2
NVD
NVD
•added 2024/04/01 3:16 p.m.•31 views

CVE-2024-3128

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as problematic, has been found in Replify-Messenger 1.0 on Android. This issue affects some unknown processing of the file androidmanifest.xml of the component Backup File Handler. The manipulation leads to exposure of backup file to...

2.4CVSS3.6AI score0.00267EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/04/01 12:31 p.m.•20 views

CVE-2024-3124 fridgecow smartalarm Backup File androidmanifest.xml backup

A vulnerability classified as problematic has been found in fridgecow smartalarm 1.8.1 on Android. This affects an unknown part of the file androidmanifest.xml of the component Backup File Handler. The manipulation leads to exposure of backup file to an unauthorized control sphere. It is possible...

2.4CVSS6.7AI score0.00284EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/04/01 12:31 p.m.•32 views

CVE-2024-3124 fridgecow smartalarm Backup File androidmanifest.xml backup

A vulnerability classified as problematic has been found in fridgecow smartalarm 1.8.1 on Android. This affects an unknown part of the file androidmanifest.xml of the component Backup File Handler. The manipulation leads to exposure of backup file to an unauthorized control sphere. It is possible...

2.4CVSS4AI score0.00284EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/04/01 12:00 a.m.•15 views

Replify-Messenger 安全漏洞

Replify-Messenger is a text messenger with tons of features by Vidit Gupta Personal Developer. A security vulnerability exists in Replify-Messenger version 1.0, which stems from some unknown handling in the presence of androidmanifest.xml in the component Backup File Handler, leading to the...

2.4CVSS4.3AI score0.00267EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/04/01 12:00 a.m.•14 views

Smart Alarm 安全漏洞

Smart Alarm is a privacy-focused sleep tracker by the individual developer of fridgecow. A security vulnerability exists in Smart Alarm v1.8.1, which stems from an unknown part of the androidmanifest.xml in the component Backup File Handler, leading to the exposure of the backup file...

2.4CVSS4.2AI score0.00284EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/04/01 12:00 a.m.•12 views

PT-2024-23881 · Unknown · Fridgecow Smartalarm

Name of the Vulnerable Software and Affected Versions: fridgecow smartalarm version 1.8.1 Description: A problematic vulnerability has been found in the component Backup File Handler, affecting an unknown part of the file androidmanifest.xml. This leads to exposure of backup files to an...

2.4CVSS7AI score0.00284EPSS
SaveExploits0References7
Rows per page
Query Builder