GHSA-94X5-94WF-M445 Directory Traversal in gomeplus-h5-proxy

Affected versions of gomeplus-h5-proxy resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system...

gomeplus-h5-proxy path traversal vulnerability

gomeplus-h5-proxy is a module that can provide CDN resource proxies. A path traversal vulnerability exists in gomeplus-h5-proxy. An attacker can exploit this vulnerability by placing a '... /' sequence into a URL to access arbitrary files on the system...

CVE-2017-16037

gomeplus-h5-proxy is vulnerable to a directory traversal issue, allowing attackers to access any file in the system by placing '../' in the URL...

Directory traversal

gomeplus-h5-proxy is vulnerable to a directory traversal issue, allowing attackers to access any file in the system by placing '../' in the URL...

CVE-2017-16037

The CVE-2017-16037 entry concerns gomeplus-h5-proxy, where a directory traversal vulnerability exists due to improper handling of relative paths. Attackers can append sequences like ../../ to the URL to access files outside the intended directory root, potentially disclosing private system files....

CVE-2017-16037

gomeplus-h5-proxy is vulnerable to a directory traversal issue, allowing attackers to access any file in the system by placing '../' in the URL...

VMware vCenter Server 6.5.x < 6.5u1 H5 Client Stored XSS (VMSA-2017-0015)

The version of VMware vCenter Server installed on the remote host is 6.5.x prior to 6.5u1. It is, therefore, affected by a user-input validation error related to the 'H5 Client' that allows stored cross-site scripting XSS attacks. C Tenable Network Security, Inc. include"compat.inc"; if descripti...

VMSA-2017-0015 : VMware ESXi, vCenter Server, Fusion and Workstation updates resolve multiple security vulnerabilities

a. Out-of-bounds write vulnerability in SVGA VMware ESXi, Workstation and Fusion contain an out-of-bounds write vulnerability in SVGA device. This issue may allow a guest to execute code on the host. VMware would like to thank Nico Golde and Ralf-Philipp Weinmann of Comsecuris UG...

Many high-risk SVGA code execution vulnerability bug,VMware efforts to be patched-vulnerabilities and early warning-the black bar safety net

VMware this week announced a patch to fix a number of vulnerabilities flaws bug, contains a major vulnerability flaws bugs, exploits flaws bug touches the product containing ESXi, vCenter Server, Workstation and Fusion. This is the major vulnerability flaws bug number for CVE-2017-4924, which is ...

Directory Traversal

gomeplus-h5-proxy is vulnerable to directory traversal attacks. These attacks are possible by putting ../ in a url...

Directory Traversal

Overview Affected versions of gomeplus-h5-proxy resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable...