SUSE CVE-2010-1646

The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable...

PT-2022-19705 · Google · Android Google Search App

Name of the Vulnerable Software and Affected Versions: Android Google Search app versions prior to 13.41 Description: The issue is caused by the incorrect usage of uri.getLastPathSegment, allowing a symbolic encoded string to bypass path logic and access unintended directories. This could lead to...

Google Search 路径遍历漏洞

Google Search is an Internet search engine from Google, Inc. The Google Search application suffers from a path traversal vulnerability that stems from the misuse of its uri.getLastPathSegment resulting in a symbolically encoded string that can bypass the path logic to access an unintended directo...

JMK's Picture Gallery admin login

dork: "JMK's Picture Gallery" and last path to add : admingallery.php3?action=add&upload=1 example:hhtp://www.site.com/path/.../admingallery.php3?action=add&upload=1 credits:AlpEren,tugr@...