59 matches found
CVE-2022-22828
CVE-2022-22828 Synametrics - SynaMan version 4.9 Summary Viden Labs has found an Insecure Direct Object Reference IDOR vulnerability in Synametric's SynaMan. This vulnerability is present in versions 4.9 and earlier. This vulnerability has since been patched in version 5.0. “Insecure direct objec...
Synametrics Syncrify 6.2 build 1178 - Path Traversal in the PublicLink Chunk-Upl — Detect
Fingerprint / reachability check for Synametrics Syncrify 6.2 build 1178 - Path Traversal in the PublicLink Chunk-Upload Branch CWE-22 Leading to Root Command Execution !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Synametrics Syncrify 6.2 build 1178 - Path Traversal in the PublicLin...
Synametrics Syncrify 6.2 Build 1178 PublicLink Path Traversal / Root Command Execution
Synametrics Syncrify version 6.2 build 1178 contains a path traversal issue in the PublicLink chunk-upload handler. An authenticated backup user can write a cron fragment outside the intended upload directory, resulting in root command execution when the service runs as root and cron is active...
EUVD-2015-3222
Malware in sbrugna...
EUVD-2012-2555
Malware in sbrugna...
EUVD-2018-2883
Malware in sbrugna...
EUVD-2018-2833
Malware in sbrugna...
EUVD-2015-3221
Malware in sbrugna...
EUVD-2022-27966
Malicious code in bioql PyPI...
CVE-2022-22828
An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string...
CVE-2022-22828
An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string...
CVE-2022-22828
Synametrics SynaMan prior to version 5.0 is affected by CVE-2022-22828 due to an insecure direct object reference in the file-download URL. An attacker can access unshared files by modifying the base64-encoded filename string, enabling remote file disclosure. The vulnerability is exposed via the ...
CVE-2022-22828: Authorization Bypass Through User-Controlled Key
An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string...
PT-2022-15698
Name of the Vulnerable Software and Affected Versions Synametrics SynaMan versions prior to 5.0 Description The issue is related to an insecure direct object reference for the file-download URL, allowing a remote attacker to access unshared files via a modified base64-encoded filename string...
CVE-2015-3140
Multiple cross-site request forgery CSRF vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567...
CVE-2015-3140
Multiple cross-site request forgery CSRF vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567...
CVE-2015-3140
CVE-2015-3140 affects Synametrics products: SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567, vulnerable to cross-site request forgery (CSRF). Root cause: CSRF in multiple web app components allowing attacker to trigger actions in an authenticated use...
CVE-2015-3140: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567...