58 matches found
CVE-2022-29464
WSO2 RCE CVE-2022-29464 漏洞利用与分析。 详情 CVE-2022-29464 是 WSO2 中的一个严重漏洞。该漏洞是一个未经授权、不受限制的任意文件上传漏洞，允许未授权用户将恶意 JSP 文件上传到 WSO2 服务器，从而获得远程代码执行（RCE）权限。 存在漏洞的上传路径是 /fileupload，由 FileUploadServlet servlet 处理。并且该路径没有受到 IAM 的保护，正如我们在 indentity.xml 配置文件中看到的那样：xml 函数 handleSecurity 负责保护 WSO2 提供的各个路由，并提供一种对收到的 HTT...
wso2-rce-cve-2022-29464
CVE-2022-29464 Exploit de WSO2 RCE CVE-2022-29464. Details CVE-2022-29464 es una vulnerabilidad crítica en WSO2 descubierta por Orange Tsai. La vulnerabilidad es una subida de archivos arbitrarios no autenticada y sin restricciones que permite a atacantes no autenticados obtener RCE en servidores...
CVE-2022-29464
CVE-2022-29464 Exploit e informe de WSO2 RCE CVE-2022-29464. Detalles CVE-2022-29464 es una vulnerabilidad crítica en WSO2 descubierta por Orange Tsai. La vulnerabilidad es una carga arbitraria de archivos sin restricciones y sin autenticación que permite a atacantes no autenticados obtener RCE e...
EUVD-2020-28646
Malware in sbrugna...
EUVD-2022-2796
Malicious code in bioql PyPI...
Exploit for Path Traversal in Wso2 Api_Manager
WSO2 RCE CVE-2022-29464 exploit and writeup. Details CVE-20...
Exploit for Path Traversal in Wso2 Api_Manager
CVE-2022-29464 WSO2 RCE CVE-2022-29464 exploit. Details C...
CVE-2020-7521
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in SFAPV9601 - APC Easy UPS On-Line Software V2.0 and earlier when accessing a vulnerable method of FileUploadServlet which may lead to uploading executable files to non-specified directories...
CVE-2020-7521
CVE-2020-7521 is a path-traversal vulnerability in SFAPV9601 APC Easy UPS On-Line Software (V2.0 and earlier). The flaw occurs in FileUploadServlet and can allow uploading executable files to arbitrary directories, potentially enabling remote code execution. Affected product: Schneider Electric A...
CVE-2020-7521
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in SFAPV9601 - APC Easy UPS On-Line Software V2.0 and earlier when accessing a vulnerable method of FileUploadServlet which may lead to uploading executable files to non-specified directories...
CVE-2020-7521: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in SFAPV9601 - APC Easy UPS On-Line Software V2.0 and earlier when accessing a vulnerable method of FileUploadServlet which may lead to uploading executable files to non-specified directories...
Schneider Electric APC Easy UPS On-Line FileUploadServlet Path Traversal Vulnerability
The Schneider Electric APC Easy UPS On-Line is a UPS solution. A path traversal vulnerability exists in the Schneider Electric APC Easy UPS On-Line FileUploadServlet, which can be exploited by a remote attacker to submit a special request to upload arbitrary files to an arbitrary directory...
Schneider Electric APC Easy UPS Online FileUploadServlet processRequest Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric APC Easy UPS Online. Authentication is not required to exploit this vulnerability. The specific flaw exists within the FileUploadServlet class. When parsing the filename parameter,...
Cisco Data Center Network Manager Unauthenticated Remote Code Execution Exploit
DCNM exposes a file upload servlet FileUploadServlet at /fm/fileUpload. An authenticated user can abuse this servlet to upload a WAR to the Apache Tomcat webapps directory and achieve remote code execution as root. This module exploits two other vulnerabilities, CVE-2019-1619 for authentication...
Cisco Data Center Network Manager Unauthenticated Remote Code Execution
DCNM exposes a file upload servlet FileUploadServlet at /fm/fileUpload. An authenticated user can abuse this servlet to upload a WAR to the Apache Tomcat webapps directory and achieve remote code execution as root. This module exploits two other vulnerabilities, CVE-2019-1619 for authentication...
HPE Intelligent Management Center (IMC) Remote Code Execution Vulnerability (CNVD-2019-23765)
HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A FileUploadServlet unrestricted file upload remote code execution vulnerability exists in HPE Intelligent...
(0Day) Hewlett Packard Enterprise Intelligent Management Center FileUploadServlet Unrestricted File Upload Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...
The vulnerability of the FileUploadServlet class in the software for managing workstations through the ManageEngine Desktop Central web interface allows a malicious individual to upload and execute any file they desire.
The vulnerability of the FileUploadServlet class in the software for managing workstations through the web interface of ManageEngine Desktop Central is related to the lack of restrictions on file uploads. Exploiting this vulnerability allows an unauthorized intruder, operating remotely, to upload...
ZOHO ManageEngine Desktop Central Arbitrary File Execution Vulnerability
ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. A security...