4 matches found
CVE-2022-42002
SonicJS through 0.6.0 allows file overwrite. It has the following mutations that are used for updating files: fileCreate and fileUpdate. Both of these mutations can be called without any authentication to overwrite any files on a SonicJS application, leading to Arbitrary File Write and Delete...
PT-2022-26207 · Sonicjs · Sonicjs
Name of the Vulnerable Software and Affected Versions: SonicJS versions 0.6.0 and earlier Description: The issue allows for file overwrite due to the lack of authentication required for certain file update mutations. Specifically, the fileCreate and fileUpdate mutations can be called without...
CVE-2022-42002: Out-of-bounds Write
SonicJS through 0.6.0 allows file overwrite. It has the following mutations that are used for updating files: fileCreate and fileUpdate. Both of these mutations can be called without any authentication to overwrite any files on a SonicJS application, leading to Arbitrary File Write and Delete...
VirtualDJ Trial 6.0.6 'New Year Edition' - '.m3u' Local Overflow
/VirtualDJ Trial v6.0.6 "New Year Edition" PC 0day This is a poc for the latest VJ by fl0 fl0w Author: fl0 fl0w Tested on: Windows xp sp2 Code : exploit code/ include include include include include /----prototypes---/ int fileCreatechar; int bufferWrite; int cpychar,char; char path;...