Cross-site Scripting (XSS)

nilsteampassnet/teampass is vulnerable to Cross-site Scripting XSS. The vulnerability exists because the library does not properly encode or escape outputs, allowing an attacker to inject and execute malicious javascript through the index.php?page=folders endpoint when creating a new folder...

Vasion PrinterLogic Client 安全漏洞

Vasion PrinterLogic Client is a print management solution from Vasion. A security vulnerability exists in Vasion PrinterLogic Client Windows versions prior to 25.0.0.818, which stems from a binary file that can be executed from a subfolder in C:WindowsTemp during installation...

PT-2023-23675 · Vasion · Vasion Printerlogic Client

Name of the Vulnerable Software and Affected Versions: Vasion PrinterLogic Client for Windows versions prior to 25.0.0.818 Description: An issue was discovered in the Vasion PrinterLogic Client for Windows. During installation, binaries are executed out of a subfolder in C:WindowsTemp. A standard...

QWE DL v2.0.1 iOS - Persistent Cross Site Vulnerability

Document Title: =============== QWE DL v2.0.1 iOS - Persistent Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2326 Release Date: ============= 2023-07-23 Vulnerability Laboratory ID VL-ID: ====================================...

PT-2023-25222 · Teampass · Teampass

Name of the Vulnerable Software and Affected Versions: TeamPass versions prior to 3.0.10 Description: The issue is related to improper encoding or escaping of output, which can lead to cross-site scripting filter bypass in folder names, potentially resulting in information disclosure...

Apache Zeppelin Improper Input Validation vulnerability

The improper Input Validation vulnerability in Move folder to Trash feature of Apache Zeppelin allows an attacker to delete the arbitrary files. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions...

GHSA-GM67-H5WR-W3CV Apache Zeppelin Improper Input Validation vulnerability

The improper Input Validation vulnerability in Move folder to Trash feature of Apache Zeppelin allows an attacker to delete the arbitrary files. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions...

PT-2023-3604

Name of the Vulnerable Software and Affected Versions: Copyparty versions prior to 1.8.2 Description: The issue is related to a path traversal vulnerability detected in the .cpr subfolder, allowing an attacker to access files, directories, and commands outside the web document root directory. Thi...

SUSE CVE-2023-2861

A flaw was found in the 9p passthrough filesystem 9pfs implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder...

UBUNTU-CVE-2023-2861

A flaw was found in the 9p passthrough filesystem 9pfs implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder...

CVAD 2203 CU2: Error: "Your OneDrive folder can't be created in the location you selected.”

On CVAD 2203 CU2, you followedhttps://docs.citrix.com/en-us/profile-management/current-release/configure/enable-the-onedrive-container.html to configure OneDrive Container with Citrix Profile Management but it does not work. The Policy was applied via Citrix Active Directory GPO...

CVE-2023-34598

Gibbon v25.0.0 is vulnerable to a Local File Inclusion LFI where it's possible to include the content of several files present in the installation folder in the server's response...

Design/Logic Flaw

Gibbon v25.0.0 is vulnerable to a Local File Inclusion LFI where it's possible to include the content of several files present in the installation folder in the server's response...

CVE-2023-34598

Gibbon v25.0.0 is vulnerable to a Local File Inclusion LFI where it's possible to include the content of several files present in the installation folder in the server's response...

PT-2023-24939 · Gibbon · Gibbon

Name of the Vulnerable Software and Affected Versions: Gibbon version 25.0.0 Description: The issue allows for a Local File Inclusion LFI where it is possible to include the content of several files present in the installation folder in the server's response. Recommendations: For Gibbon version...

CVE-2023-34422

A valid, authenticated LXCA user with elevated privileges may be able to delete folders in the LXCA filesystem through a specifically crafted web API call due to insufficient input validation...

Contour 安全漏洞

Contour is a Kubernetes entry controller that uses the Envoy agent. A security vulnerability exists in versions of Contour prior to 9.642.0 that stems from not checking whether a user has the right to create analytics for a given dataset. An attacker exploited the vulnerability to mess up the...

Exploit for Path Traversal in Gibbonedu Gibbon

Gibbon v25.0.0 - Local File Inclusion - CVE-2023-34598 Gibbon...

CVE-2022-42834

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13, macOS Big Sur 11.7.3. An app may be able to access mail folder attachments through a temporary directory used during compression...

Memory corruption

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13, macOS Big Sur 11.7.3. An app may be able to access mail folder attachments through a temporary directory used during compression...