NPM: Vitest Browser: Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCE

NPM: Vitest Browser: Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCE vulnerability discovered by ? in WordPress Npm vite-plus versions = 0.1.23...

EUVD-2023-48662

Malicious code in bioql PyPI...

CVE-2020-13451

An incomplete-cleanup vulnerability in the Office rendering engine of Gotenberg through 6.2.1 allows an attacker to overwrite LibreOffice configuration files and execute arbitrary code via macros...

CVE-2023-44306

Dell DM5500 contains a path traversal vulnerability in the appliance. A remote attacker with high privileges could potentially exploit this vulnerability to overwrite configuration files stored on the server filesystem...

CVE-2023-44306: Improper Limitation of a Pathname to a Restricted Directory

Dell DM5500 contains a path traversal vulnerability in the appliance. A remote attacker with high privileges could potentially exploit this vulnerability to overwrite configuration files stored on the server filesystem...

CVE-2021-44737

PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite internal configuration files...

CVE-2021-44737: Improper Limitation of a Pathname to a Restricted Directory

PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite internal configuration files...

PT-2022-12215

Name of the Vulnerable Software and Affected Versions Lexmark devices affected versions not specified Description The issue concerns a PJL directory traversal vulnerability that can be leveraged to overwrite internal configuration files. This vulnerability affects Lexmark devices and can...

PT-2019-18261

Name of the Vulnerable Software and Affected Versions BIG-IP versions 11.5.9 through 11.5.10 BIG-IP versions 11.6.4 through 11.6.5 BIG-IP versions 12.1.4.1 through 12.1.5 BIG-IP versions 13.1.1.5 through 13.1.3.1 BIG-IP versions 14.0.0.5 through 14.0.1 BIG-IP versions 14.1.0.2 through 14.1.2.2...

CVE-2017-6774

A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify sensitive system files. The vulnerability is due to the inclusion of sensitive system files within specific FTP...