extract-zip Symbolic Link RCE

The vulnerability of the npm library extract-zip’s mechanism for handling symbolic links is related to errors in link processing. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

Microsoft Partner Center Hypertext Link Error

The vulnerability of the Microsoft Partner Center software is related to errors in processing hypertext links. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

Nomad Application Hypertext Link Data Compromise

The vulnerability of Nomad application developers is related to errors in processing hypertext links. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

Acronis Backup Data Restoration Privilege Escalation

The vulnerability of the backup and data restoration plugins on Acronis Backup software for computers and servers, as well as for cPanel & WHM, Plesk, and DirectAdmin operating systems on Linux, is related to errors in link processing. Exploiting this vulnerability allows a malicious actor to...

PT-2023-6373 · Wago · Wago

Name of the Vulnerable Software and Affected Versions: Wago products affected versions not specified Description: The issue allows a remote attacker with administrative privileges to access files through an undocumented local file inclusion. This access is logged in a different log file than...

Acronis Agent Link Processing

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to errors in handling links. Exploiting this vulnerability can allow attackers to enhance their privileges...

WWebView Component Privilege Escalation

The vulnerability of the categoryId parameter in the WWebView component of the MCE Systems lifecycle management system is related to errors in link processing before accessing a file, as well as deserialization of the PendingDynamicLinkData structure from the Intent Extra array with the key...

StarOS FTP Unauthorized Access

The vulnerability of the FTP SFTP protocol implementation on the StarOS operating system of Cisco ASR 5000 routers is related to errors in link processing. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information from a remote location...

NVIDIA GeForce Quadro Tesla Code Execution

The vulnerability of 3D vision software from NVIDIA’s GeForce, Quadro, and Tesla products is related to errors in link processing. Exploiting this vulnerability can allow attackers to execute arbitrary code, cause service failures, or gain increased privileges...