7 matches found
CVE-2026-55530: Missing Authorization
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, astgreprewrite lacks the @requireapproval decorator used by sibling mutation tools. With dryrun=False, an agent-controlled call can pass --update-all and a broad path to rewrite matching files without the expected...
PT-2023-23194 · Unknown · Openharmony
Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.2.2 Description: The issue allows a local attacker to obtain confidential information or rewrite sensitive files due to incorrect default permissions. Recommendations: For OpenHarmony versions prior to 3.2.2,...
Cisco Firepower Management Center File Read/Write
The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves deficiencies in path name checking for the directory. Exploiting this vulnerability allows a malicious actor to read or re-record arbitrary files using specially created HTTPS requests...
Cisco IOS XR File Read/Write
The vulnerability of the SSH server on the Cisco IOS XR operating system is related to insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability allows a remote attacker to read and rewrite any files as desired...
Spring Framework Privilege Escalation
The vulnerability of the Spring Framework software is caused by privilege management errors. Exploiting this vulnerability allows an attacker to read and rewrite any files at will...
Cisco Unity Connection File Write
The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to re-write files in the...
F5 BIG-IP Denial of Service Vulnerability (CNVD-2018-21232)
F5 BIG-IP is an all-in-one network device from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A security vulnerability exists in the F5 BIG-IP. A remote attacker can exploit this vulnerability to cause a denial of service wh...