CVE-2023-50915

CVE-2023-50915 affects GOG Galaxy (Beta) 2.0.67.2–2.0.71.2. The issue exists in GalaxyClientService.exe and could allow an authenticated user to overwrite and corrupt critical system files by abusing a combination of an NTFS Junction and an RPC Object Manager symbolic link, potentially leading to...

RHEL 6 / 7 : rh-ruby22-ruby (RHSA-2018:0583)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0583 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

RHEL 6 / 7 : rh-ruby24-ruby (RHSA-2017:3485)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3485 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

RHEL 6 / 7 : rh-ruby23-ruby (RHSA-2018:0585)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0585 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

CVE-2024-32258

The network server of fceux 2.7.0 has a path traversal vulnerability, allowing attackers to overwrite any files on the server without authentication by fake ROM...

UBUNTU-CVE-2024-32258

The network server of fceux 2.7.0 has a path traversal vulnerability, allowing attackers to overwrite any files on the server without authentication by fake ROM...

CVE-2024-32258

The CVE-2024-32258 entry concerns FCEUX 2.7.0’s network server (NetPlay). A path traversal vulnerability exists due to inadequate filtering of ROM file names, allowing an unauthenticated attacker to overwrite arbitrary files on the server by sending a crafted ROM load request. Documentation in th...

PT-2024-24474 · Fceux · Fceux

Name of the Vulnerable Software and Affected Versions: fceux version 2.7.0 Description: The network server of fceux has a path traversal vulnerability, allowing attackers to overwrite any files on the server without authentication by using a fake ROM. Recommendations: For fceux version 2.7.0, as ...

CVE-2024-32258

The network server of fceux 2.7.0 has a path traversal vulnerability, allowing attackers to overwrite any files on the server without authentication by fake ROM...

CVE-2024-32258

The network server of fceux 2.7.0 has a path traversal vulnerability, allowing attackers to overwrite any files on the server without authentication by fake ROM...

fceux 路径遍历漏洞

fceux is an open source NES Emulator for Windows and Unix from TAS Emulators on GitHub. A path traversal vulnerability exists in fceux version 2.7.0, which stems from a vulnerability that allows an attacker to overwrite any file on a server without authentication via a fake ROM...

PT-2024-40332 · Jadx · Jadx

Name of the Vulnerable Software and Affected Versions: jadx affected versions not specified Description: The issue arises when jadx parses a resource file, specifically with an escape problem related to style files. This can lead to overwriting other files in the directory when saving the...

The vulnerability of the svc_topstats utility in the Dell Unity Operating Environment (OE) system allows a hacker to overwrite any files with root privileges.

The vulnerability of the svctopstats utility in the Dell Unity Operating Environment OE storage system exists because measures to neutralize special elements used in the operating system commands have not been taken. Exploiting this vulnerability could allow a malicious individual to rewrite any...

Exploit for CVE-2024-32258

Overview - CVE ID: CVE-2024-32258https://vulners.com/...

CVE-2024-2221

CVE-2024-2221 affects qdrant/qdrant. The vulnerability is a path traversal and arbitrary file upload via the /collections/{COLLECTION}/snapshots/upload endpoint, exploitable through the snapshot parameter, allowing an attacker to upload and overwrite any file on the filesystem and potentially ach...

PT-2024-5037 · Mailcow · Mailcow

Name of the Vulnerable Software and Affected Versions: mailcow:dockerized versions prior to 2024-04 Description: The issue is related to the rspamd maps function and involves improper path validation, allowing for path traversal and arbitrary code execution. This can enable an authenticated admin...

MesonLSP 安全漏洞

MesonLSP is an unofficial, unapproved language server for JCWasmx86 individual developers of mesons written in C++. A security vulnerability exists in MesonLSP versions prior to 4.1.4 that stems from the presence of a directory traversal vulnerability. An attacker can exploit this vulnerability t...

PT-2024-23301 · Mesonlsp · Mesonlsp

Name of the Vulnerable Software and Affected Versions: MesonLSP versions prior to 4.1.4 Description: A vulnerability in MesonLSP allows overwriting arbitrary files if an attacker can make the victim run the language server within a specific crafted project or execute mesonlsp --full...

Open Automation Software OAS Platform OAS Engine Tags Configuration file write vulnerability

Talos Vulnerability Report TALOS-2024-1950 Open Automation Software OAS Platform OAS Engine Tags Configuration file write vulnerability April 3, 2024 CVE Number CVE-2024-21870 SUMMARY A file write vulnerability exists in the OAS Engine Tags Configuration functionality of Open Automation Software...

PT-2024-19104 · Open Automation · Open Automation Software Oas Platform

Name of the Vulnerable Software and Affected Versions: Open Automation Software OAS Platform version 19.00.0057 Description: A file write issue exists in the OAS Engine Tags Configuration functionality. This can be exploited by sending a specially crafted series of network requests, leading to...