EUVD-2023-43786

Malicious code in bioql PyPI...

CVE-2023-2091

A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerability is the function adjustcpufreqscalinggoverner. The manipulation leads to os command injection. It is possible to launch the attack on the local host. The exploit has been...

Path traversal

A vulnerability classified as critical has been found in KylinSoft youker-assistant on KylinOS. Affected is the function restoreallsoundfile. The manipulation leads to path traversal: '../filedir'. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used...

CVE-2023-3098 KylinSoft youker-assistant restore_all_sound_file path traversal

A vulnerability classified as critical has been found in KylinSoft youker-assistant on KylinOS. Affected is the function restoreallsoundfile. The manipulation leads to path traversal: '../filedir'. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used...

CVE-2023-3098: Path Traversal: '../filedir'

A vulnerability classified as critical has been found in KylinSoft youker-assistant on KylinOS. Affected is the function restoreallsoundfile. The manipulation leads to path traversal: '../filedir'. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used...

KylinSoft youker-assistant 路径遍历漏洞

KylinSoft youker-assistant is a system management and configuration tool from KylinSoft China. A security vulnerability exists in KylinSoft youker-assistant versions prior to 3.0.2-0kylin6k70-23. An attacker could exploit the vulnerability to access files and directories stored outside of the web...

PT-2023-23100 · Kylinsoft · Youker-Assistant

Name of the Vulnerable Software and Affected Versions: KylinSoft youker-assistant versions prior to 3.0.2-0kylin6k70-23 Description: A critical issue was found in the delete file function of the dbus.SystemBus library in the Arbitrary File Handler component, leading to improper access controls...

CVE-2023-3099: Improper Access Control

A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerability is the function deletefile in the library dbus.SystemBus of the component Arbitrary File Handler. The manipulation leads to improper access controls. It is possible to launch...

CVE-2023-2091 KylinSoft youker-assistant adjust_cpufreq_scaling_governer os command injection

A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerability is the function adjustcpufreqscalinggoverner. The manipulation leads to os command injection. It is possible to launch the attack on the local host. The exploit has been...

CVE-2023-2091 KylinSoft youker-assistant adjust_cpufreq_scaling_governer os command injection

A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerability is the function adjustcpufreqscalinggoverner. The manipulation leads to os command injection. It is possible to launch the attack on the local host. The exploit has been...

CVE-2023-2091: Improper Neutralization of Special Elements used in an OS Command

A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerability is the function adjustcpufreqscalinggoverner. The manipulation leads to os command injection. It is possible to launch the attack on the local host. The exploit has been...

PT-2023-17699

Name of the Vulnerable Software and Affected Versions KylinSoft youker-assistant versions prior to 3.1.4.13 Description A critical issue was found in the adjust cpufreq scaling governer function, leading to os command injection. The attack can be launched on the local host. Recommendations For...