CVE-2021-36717

Synerion TimeNet version 9.21 contains a directory traversal vulnerability where, on the "Name" parameter, the attacker can return to the root directory and open the host file. This might give the attacker the ability to view restricted files, which could provide the attacker with more informatio...

Phoenix Contact AXL F BK and IL BK 信任管理问题漏洞

Phoenix Contact AXL F BK PN is a bus coupler from Phoenix Contact, Germany. A security vulnerability exists in the Phoenix Contact AXL F BK and IL BK that stems from the program having undocumented password-protected FTP access to the root directory...

CVE-2021-3041

A local privilege escalation vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables an authenticated local Windows user to execute programs with SYSTEM privileges. This requires the user to have the privilege to create files in the Windows root directory...

Rainy Novel cms has arbitrary file deletion vulnerability

Wild Rain Fiction cms hereinafter referred to as KYXSCMS provides a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. KYXSCMS has an arbitrary file deletion vulnerability. An attacker can use the vulnerability to delete any file in the root directory...

The vulnerability of the Secdo security incident investigation software lies in the insufficient validation of input data, allowing an intruder to add data to the root directory.

The vulnerability of the Secdo security incident investigation software exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to add data to the root catalog...

D-Link DIR-865L Path Traversal Vulnerability

The D-Link DIR-865L is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DIR-865L that stems from a failure to properly configure the SMB service. The vulnerability can be exploited to create a symbolic link to the root directory of the router's fil...

The vulnerability of IBM DB2 database management systems, including IBM DB2 Connect (and IBM DB2 Connect servers), is related to deficiencies in access control. This allows attackers to gain access to the root directory.

The vulnerabilities of IBM DB2 database management systems, including IBM DB2 Connect and the IBM DB2 Connect server, are related to deficiencies in access control. Exploiting these vulnerabilities could allow an attacker, operating locally, to gain access to the root directory...

The vulnerability lies in the built-in procedure executed by the system during the loading of the automation software for Application Policy Infrastructure Controller. This vulnerability allows a perpetrator to increase their privileges, gain access to root directories, and exercise full control over the device.

The vulnerability of the built-in procedure for executing system files during the installation of the Application Policy Infrastructure Controller software relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating locally, to increase their...

The vulnerability of the Junos operating system, allowing a hacker to inject code into the root directory

The vulnerability of the Junos operating system arises from buffer overflows. Exploiting this vulnerability allows a local attacker, who has only read access and permission to the Junos CLI configuration, to inject code into the root directory, thereby enhancing their privileges...

Root directory access in Cisco Secure ACS

By adding additional slah to URL after hostname it's possible to address root folder...

Ошибка в RaidenFTP

При попытке обращения к файлу в корневом каталоге файл удаляется...

4.3 Security: local DoS via clean-tmps

Tested in 4.3-RELEASE only: If /etc/periodic/daily/clean-tmps is enabled, then it's possible for any local user to trick it into calling unlink or rmdir on anything in the root directory. The problem is that "find -delete" can be made to do chdir".." multiple times followed by unlink and/or rmdir...

IBM HTTP SERVER / APACHE

I haven't seen any advisories for IBM HTTP SERVER running Apache. There is a crucial number of "/" forward slash you can use to retrieve the contents of the root directory of this particular Web Server. Using this vulnerability, you can retrieve any files or scripts running from that directory an...