CVE-2024-50588

The HASOMED Elefant exercise software and its associated components are vulnerable to unauthorized access due to the use of known default credentials . Specifically, Elefant Firebird database versions prior to 24.03.03 , HASOMED Elefant versions prior to 24.04.00 , and Elefant Software Updater ve...

AZL-52417 CVE-2024-9902 affecting package ansible for versions less than 2.17.11-1

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

RHEL 7 : instack-undercloud (RHSA-2017:2726)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2017:2726 advisory. instack-undercloud provides a collection of scripts and elements that can be used to install an OpenStack undercloud using python-instack. The...

hornetq vulnerable to file overwrite, sensitive information disclosure

An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information...

GHSA-R7MV-MV7M-PJW3 hornetq vulnerable to file overwrite, sensitive information disclosure

An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information...

CVE-2024-51127

An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information...

HornetQ 安全漏洞

HornetQ is an open source project from HornetQ Open Source for building multi-protocol, embeddable, very high performance clustered asynchronous messaging systems. A security vulnerability exists in HornetQ version v2.4.9, which stems from the createTempFile function allowing an attacker to...

CVE-2024-51127

A flaw exists in the createTempFile method of hornetq , specifically within the org.hornetq/hornetq-core-client component. This vulnerability allows attackers to arbitrarily overwrite files or access sensitive information . The issue has been identified in various Red Hat JBoss Enterprise Applica...

PT-2024-34531 · Hornetq · Hornetq

Name of the Vulnerable Software and Affected Versions: hornetq version 2.4.9 Description: An issue in the createTempFile method allows attackers to arbitrarily overwrite files or access sensitive information. Recommendations: For hornetq version 2.4.9, consider disabling the createTempFile method...

CVE-2024-51127: Improper Limitation of a Pathname to a Restricted Directory

An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information...

CVE-2024-51127

An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information...

CVE-2024-51127

An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information...

GHSA-HC5W-C9F8-9CC4 Langchain Path Traversal vulnerability

A path traversal vulnerability exists in the getFullPath method of langchain-ai/langchainjs version 0.2.5. This vulnerability allows attackers to save files anywhere in the filesystem, overwrite existing text files, read .txt files, and delete files. The vulnerability is exploited through the...

CVE-2024-5823

A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions = 20240410. This vulnerability allows an attacker to gain unauthorized access to overwrite critical configuration files within the system. Exploiting this vulnerability can lead to unauthorized changes in system behavior...

CVE-2024-5823 File Overwrite Vulnerability in gaizhenbiao/chuanhuchatgpt

A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions = 20240410. This vulnerability allows an attacker to gain unauthorized access to overwrite critical configuration files within the system. Exploiting this vulnerability can lead to unauthorized changes in system behavior...

CVE-2024-5823 File Overwrite Vulnerability in gaizhenbiao/chuanhuchatgpt

A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions = 20240410. This vulnerability allows an attacker to gain unauthorized access to overwrite critical configuration files within the system. Exploiting this vulnerability can lead to unauthorized changes in system behavior...

CVE-2024-5823

A CVE-2024-5823 entry concerns a file overwrite vulnerability in gaizhenbiao/chuanhuchatgpt versions <= 20240410. The root cause: an insecure file handling path enables an attacker to overwrite critical configuration files, which can lead to unauthorized changes in system behavior or security ...

CVE-2024-5823 File Overwrite Vulnerability in gaizhenbiao/chuanhuchatgpt

A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions = 20240410. This vulnerability allows an attacker to gain unauthorized access to overwrite critical configuration files within the system. Exploiting this vulnerability can lead to unauthorized changes in system behavior...

ChuanhuChatGPT 安全漏洞

ChuanhuChatGPT is an application by the individual developer Chuan Hu. It provides a fast and easy-to-use web graphical interface and many additional features for many LLMs such as ChatGPT. A security vulnerability exists in ChuanhuChatGPT 20240410 and prior versions, which stems from the presenc...

CVE-2024-5823: External Control of File Name or Path

A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions = 20240410. This vulnerability allows an attacker to gain unauthorized access to overwrite critical configuration files within the system. Exploiting this vulnerability can lead to unauthorized changes in system behavior...