6394 matches found
Dell Client Platform和Dell Dock Firmware 后置链接漏洞
Dell Client Platform and Dell Dock Firmware are both products of Dell Inc.Dell Client Platform is a client platform.Dell Dock Firmware is a firmware. A backlink vulnerability exists in Dell Dock Firmware and Dell Client Platform that stems from improper link resolution during installation, which...
CVE-2023-43078: Improper Link Resolution Before File Access
Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which could lead to Privilege Escalation or Denial of Service...
PT-2024-13076 · Dell · Dell Dock Firmware +1
Name of the Vulnerable Software and Affected Versions: Dell Dock Firmware affected versions not specified Dell Client Platform affected versions not specified Description: The issue is related to an Improper Link Resolution vulnerability during installation, resulting in arbitrary folder deletion...
CVE-2024-8170
A vulnerability classified as problematic has been found in SourceCodester Zipped Folder Manager App 1.0. This affects an unknown part of the file /endpoint/add-folder.php. The manipulation of the argument folder leads to unrestricted upload. It is possible to initiate the attack remotely. The...
CVE-2024-8170
A vulnerability classified as problematic has been found in SourceCodester Zipped Folder Manager App 1.0. This affects an unknown part of the file /endpoint/add-folder.php. The manipulation of the argument folder leads to unrestricted upload. It is possible to initiate the attack remotely. The...
CVE-2024-8170 SourceCodester Zipped Folder Manager App add-folder.php unrestricted upload
A vulnerability classified as problematic has been found in SourceCodester Zipped Folder Manager App 1.0. This affects an unknown part of the file /endpoint/add-folder.php. The manipulation of the argument folder leads to unrestricted upload. It is possible to initiate the attack remotely. The...
CVE-2024-8170
CVE-2024-8170 affects the SourceCodester Zipped Folder Manager App 1.0. The vulnerability is in an unknown part of /endpoint/add-folder.php where manipulation of the folder argument enables unrestricted file uploads, allowing remote initiation. Public exploit information exists. Concrete details ...
CVE-2024-8170 SourceCodester Zipped Folder Manager App add-folder.php unrestricted upload
A vulnerability classified as problematic has been found in SourceCodester Zipped Folder Manager App 1.0. This affects an unknown part of the file /endpoint/add-folder.php. The manipulation of the argument folder leads to unrestricted upload. It is possible to initiate the attack remotely. The...
node-tar: denial of service while parsing a tar file due to lack of folders depth validation
A flaw was found in ISAACS's node-tar, where it is vulnerable to a denial of service, caused by the lack of folder count validation. The vulnerability exists due to the application not properly controlling the consumption of internal resources while parsing a tar file. By sending a specially...
SourceCodester Zipped Folder Manager App 代码问题漏洞
SourceCodester Zipped Folder Manager App is an open source zipped folder manager application from SourceCodester. A code issue vulnerability exists in version 1.0 of the SourceCodester Zipped Folder Manager App that stems from improper handling of the parameter folder, resulting in unrestricted...
PT-2024-38855 · Sourcecodester · Sourcecodester Zipped Folder Manager App
Name of the Vulnerable Software and Affected Versions: SourceCodester Zipped Folder Manager App version 1.0 Description: A vulnerability has been found in the SourceCodester Zipped Folder Manager App, affecting an unknown part of the file /endpoint/add-folder.php. The manipulation of the folder...
CVE-2024-8170: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as problematic has been found in SourceCodester Zipped Folder Manager App 1.0. This affects an unknown part of the file /endpoint/add-folder.php. The manipulation of the argument folder leads to unrestricted upload. It is possible to initiate the attack remotely. The...
CMSsite 1.0 Shell Upload
============================================================================================================================================= | Title : CMSsite 1.0 php code injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 129.0.1 64 bits ...
PT-2024-38419 · WordPress · File Manager Pro
Name of the Vulnerable Software and Affected Versions: File Manager Pro plugin for WordPress versions up to, and including, 8.3.7 Description: The File Manager Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and capability checks in the mk file...
PT-2024-14814 · WordPress · Backwpup
Name of the Vulnerable Software and Affected Versions: BackWPup plugin for WordPress versions up to, and including, 4.0.1 Description: The issue allows authenticated attackers to store backups in arbitrary folders on the server, provided they can be written to by the server. This is achieved via...
CVE-2023-5505: Improper Limitation of a Pathname to a Restricted Directory
The BackWPup plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.0.1 via the job-specific backup folder. This allows authenticated attackers to store backups in arbitrary folders on the server provided they can be written to by the server. Additionally,...
CraftOS-PC 2 安全漏洞
CraftOS-PC 2 is a fast, modern, feature-rich ComputerCraft simulator written in C++ by the individual developer JackMacWindows. A security vulnerability exists in CraftOS-PC 2 versions prior to 2.8.3, which stems from the fact that a user can obfuscate ... bypassing an internal check that prevent...
CVE-2024-38165
Windows Compressed Folder Tampering Vulnerability...