15 matches found
CVE-2026-25397: Path Traversal: '.../...//'
Path Traversal: '.../...//' vulnerability in Snowray Software File Uploader for WooCommerce file-uploader-for-woocommerce allows Path Traversal.This issue affects File Uploader for WooCommerce: from n/a through = 1.0.4...
EUVD-2023-43073
Malicious code in bioql PyPI...
CVE-2009-1526
JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a certain temporary directory, related to a request for this temporary file in the PATHINFO to the CMDDB script during a backup action...
CVE-2024-5935 CSRF Vulnerability in imartinez/privategpt
A Cross-Site Request Forgery CSRF vulnerability in version 0.5.0 of imartinez/privategpt allows an attacker to delete all uploaded files on the server. This can lead to data loss and service disruption for the application's users...
Remote Code Execution
pyloadng is vulnerable to remote code execution RCE. The vulnerability is due to improper file path handling and template rendering, allowing an authenticated user to upload and execute a crafted template file...
CVE-2023-31716
FUXA = 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log...
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Improper path santiziation in github.com/goadesign/goa before v3.0.9, v2.0.10, or v1.4.3 allow remote attackers to read files outside of the intended directory...
CVE-2022-33314
Multiple command injection vulnerabilities exist in the webserver action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The...
DLA-1698-1 file - security update
Bulletin has no description...
CVE-2017-1000199
tcmu-runner version 0.91 up to 1.20 is vulnerable to information disclosure in handlerqcow.so resulting in non-privileged users being able to check for existence of any file with root privileges...
CVE-2008-2266
uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam function. NOTE: this may be a CVE-2004-2265 regression...
CVE-2005-1002
logwebftbs2000.exe in Logics Software File Transfer LOG-FT allows remote attackers to read arbitrary files via modified 1 VARFTLANG and 2 VARFTTMPL parameters...
CVE-2005-1002
logwebftbs2000.exe in Logics Software File Transfer LOG-FT allows remote attackers to read arbitrary files via modified 1 VARFTLANG and 2 VARFTTMPL parameters...
CVE-2005-1002: Undefined Security Weakness
logwebftbs2000.exe in Logics Software File Transfer LOG-FT allows remote attackers to read arbitrary files via modified 1 VARFTLANG and 2 VARFTTMPL parameters...
