CVE-2024-34313

CVE-2024-34313 Description VPL Jail System up to v4.0.2 was discovered to contain a Path Traversal vulnerability allowing arbitrary file overrides and thereby privilege escalation to root user. This vulnerability can be chained with CVE-2024-34312 to take over a Moodle instance remotely without a...

CVE-2024-34313

An issue in VPL Jail System up to v4.0.2 allows attackers to execute a directory traversal via a crafted request to a public endpoint...

EUVD-2004-0125

Malware in sbrugna...

EUVD-2024-23243

Malicious code in bioql PyPI...

CVE-2024-34313

An issue in VPL Jail System up to v4.0.2 allows attackers to execute a directory traversal via a crafted request to a public endpoint...

VPL-JAIL-SYSTEM Security Vulnerability

VPL-JAIL-SYSTEM is a library by the individual developer of jcrodriguez-dis. Provides an execution sandbox for the VPL Moodle plugin. A security vulnerability exists in VPL-JAIL-SYSTEM v4.0.2 and earlier versions, which stems from a path traversal issue...

CVE-2024-34313

An issue in VPL Jail System up to v4.0.2 allows attackers to execute a directory traversal via a crafted request to a public endpoint...

PT-2024-25785 · Unknown · Vpl Jail System

Name of the Vulnerable Software and Affected Versions: VPL Jail System versions up to 4.0.2 Description: The issue allows attackers to execute a directory traversal via a crafted request to a public endpoint. Recommendations: For VPL Jail System versions up to 4.0.2, update to a version later tha...

CVE-2024-34313: Improper Limitation of a Pathname to a Restricted Directory

An issue in VPL Jail System up to v4.0.2 allows attackers to execute a directory traversal via a crafted request to a public endpoint...

CVE-2024-34313

An issue in VPL Jail System up to v4.0.2 allows attackers to execute a directory traversal via a crafted request to a public endpoint...

CVE-2024-34313

The VPL Jail System up to v4.0.2 is vulnerable to a Path Traversal issue in its C++ server. The root cause lies in the ProcessMonitor::writeFile function within jail.cpp, which concatenates the jail user's home directory with a file name provided by the client without sufficient validation. This ...

CVE-2024-34313

An issue in VPL Jail System up to v4.0.2 allows attackers to execute a directory traversal via a crafted request to a public endpoint...

Exploit for CVE-2024-34313

CVE-2024-34313 !Producthttps://img.shields.io/badge/produc...

The vulnerability of the FreeBSD operating systems, related to improper process blocking, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the FreeBSD operating systems is related to improper blocking of processes. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information through system calls like jail...

CVE-2024-25941

The jail2 system call has not limited a visiblity of allocated TTYs the kern.ttys sysctl. This gives rise to an information leak about processes outside the current jail. Attacker can get information about TTYs allocated on the host or in other jails. Effectively, the information printed by "psta...

Design/Logic Flaw

The jail2 system call has not limited a visiblity of allocated TTYs the kern.ttys sysctl. This gives rise to an information leak about processes outside the current jail. Attacker can get information about TTYs allocated on the host or in other jails. Effectively, the information printed by "psta...

CVE-2024-25941

The jail(2) system call in FreeBSD operating systems fails to limit the visibility of allocated TTYs via the kern.ttys sysctl. This design flaw allows an attacker to perform an information leak by gaining visibility into TTYs allocated on the host or within other jails. Specifically, the informat...

FreeBSD : FreeBSD -- jail(2) information leak (46a29f83-cb47-11ee-b609-002590c1f29c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 46a29f83-cb47-11ee-b609-002590c1f29c advisory. - The jail2 system call has not limited a visiblity of allocated TTYs the kern.ttys sysctl. This gives...

FreeBSD Security Advisory (FreeBSD-SA-10:04.jail.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-10:04.jail.asc SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Security Advisory (FreeBSD-SA-05:17.devfs.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:17.devfs.asc ADV FreeBSD-SA-05:17.devfs.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft...