Directory Traversal

github.com/grafana/loki is vulnerable to directory traversal. An attacker is able to input malicious rules files with a pathname in the header value X-Scope-OrgID that will expose the location and contents at that location...

The vulnerability of the Apache SpamAssassin spam filtering software lies in its failure to address the neutralization of special elements used in the operating system command line. This allows attackers to execute arbitrary commands on the target system.

The vulnerability of the Apache SpamAssassin spam filtering software exists because measures are not taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on the target system by loadi...

PT-2019-4594

Name of the Vulnerable Software and Affected Versions Apache SpamAssassin affected versions not specified Description The issue exists due to the failure to neutralize special elements used in operating system commands. This could allow a remote attacker to execute arbitrary commands on the targe...