EUVD-2020-28779

Malware in sbrugna...

CVE-2020-7847

The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code execution. This issue affects: pTIME NAS 1.4.36...

Remote code execution

The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code execution. This issue affects: pTIME NAS 1.4.36...

PT-2021-12670

Name of the Vulnerable Software and Affected Versions: ipTIME NAS version 1.4.36 Description: The ipTIME NAS product has an arbitrary file upload issue in the Manage Bulletins/Upload feature. This can be used to gain remote code execution. Recommendations: For ipTIME NAS version 1.4.36, update to...

CVE-2020-7847: Unrestricted Upload of File with Dangerous Type

The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code execution. This issue affects: pTIME NAS 1.4.36...

CVE-2018-18930: Unrestricted Upload of File with Dangerous Type

The Tightrope Media Carousel digital signage product 7.0.4.104 contains an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code execution. An authenticated attacker can upload a crafted ZIP file based on an exported backup of...

PT-2019-9672

Name of the Vulnerable Software and Affected Versions Tightrope Media Carousel digital signage product version 7.0.4.104 Description The issue allows an authenticated attacker to upload a crafted ZIP file containing a malicious file through the Manage Bulletins/Upload feature. This can lead to...