CVE-2024-25620

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...

CVE-2023-43697

Modification of Assumed-Immutable Data MAID in RDT400 in SICK APU allows an unprivileged remote attacker to make the site unable to load necessary strings via changing file paths using HTTP requests...

Saho ADM100 、ADM-100FP 访问控制错误漏洞

The Saho ADM100 and Saho ADM-100FP are both full-service security appliances from Saho Corporation. An access control error vulnerability exists in the Saho ADM100 and ADM-100FP, which could allow an unauthenticated attacker to bypass authentication by modifying the path to a Web site, read syste...

NCH Express Invoice 7.25 Cleartext Password

Exploit Title: NCH Express Invoice - Clear Text Password Storage and Account Takeover Google Dork:: intitle:ExpressInvoice - Login Date: 07/Apr/2020 Exploit Author: Tejas Nitin Pingulkar https://cvewalkthrough.com/ Vendor Homepage: https://www.nchsoftware.com/ Software Link:...

MDT AutoSave 路径遍历漏洞

MDT AutoSave is a software application. It provides an automated change management function. A path traversal vulnerability exists in MDT Autosave. An attacker could exploit this vulnerability to allow a specified path to be changed to another path, causing an existing file to be replaced with a...

CVE-2019-12825

Unauthorized Access to the Container Registry of other groups was discovered in GitLab Enterprise 12.0.0-pre. In other words, authenticated remote attackers can read Docker registries of other groups. When a legitimate user changes the path of a group, Docker registries are not adapted, leaving...

Observium 0.16.7533 - (Authenticated) Arbitrary Command Execution

Exploit title: Observium Commercial - Authenticated RCE Author: Dolev Farhi Contact: dolevf at protonmail.com Date: 28-04-2016 Vendor homepage: http://observium.org/ Software version: CE 0.16.7533 Authenticated remote code execution Using either CSRF or by editing the whois binary field in the...

How to Change Veeam Report Viewer Default VMR Storage Location

Purpose This article documents how to change the default path that Veeam Report Viewer uses to store VMR files. Solution The per-user configuration settings for Veeam Report Viewer are contained within the user.config file for the process. The path to the user.config varies between deployments an...