CVE-2023-1545 SQL Injection in nilsteampassnet/teampass

SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23...

TeamPass SQL注入漏洞

TeamPass is an open source password manager from the individual developer Nils Laumaillé. A SQL injection vulnerability exists in versions prior to teampass 3.0.0.23, which stems from the presence of SQL injection...

Improper Authorization in nilsteampassnet/teampass

Improper Authorization in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23...

CVE-2023-1463

Authorization Bypass Through User-Controlled Key in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23...

Authorization

Authorization Bypass Through User-Controlled Key in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23...

CVE-2023-1463 Authorization Bypass Through User-Controlled Key in nilsteampassnet/teampass

Authorization Bypass Through User-Controlled Key in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23...

PT-2023-17001 · Teampass · Teampass

Name of the Vulnerable Software and Affected Versions: teampass versions prior to 3.0.0.23 Description: The issue is related to improper authorization in the teampass GitHub repository. It allows for authorization bypass through a user-controlled key. There is no information provided about the...

TeamPass 授权问题漏洞

TeamPass is an open source password manager from the individual developer Nils Laumaillé. A vulnerability exists in TeamPass versions prior to 3.0.0.23 for authorization issues. An attacker could exploit this vulnerability to bypass authorization by controlling keys...

CVE-2023-1463 Authorization Bypass Through User-Controlled Key in nilsteampassnet/teampass

Authorization Bypass Through User-Controlled Key in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23...

TeamPass <= 2.1.26 XSS Vulnerability - Active Check

TeamPass is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:teampass:teampass"...

The vulnerability of the TeamPass password manager, related to improper external management of the username or file path, allows attackers to delete any files they desire.

The vulnerability of the TeamPass password manager is related to improper external management of the username or file path. Exploiting this vulnerability allows a malicious actor to delete any files at will...

TeamPass < 3.0.0.23 Multiple Vulnerabilities

TeamPass is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:teampass:teampass"; ifdescription...

TeamPass < 3.0.0.22 Arbitrary File Deletion Vulnerability

TeamPass is prone to an arbitrary file deletion vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:teampass:teampass"...

TeamPass < 3.0 XSS Vulnerability

TeamPass is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:teampass:teampass"...

Arbitrary File Write

nilsteampassnet/teampass is vulnerable to External Control Of File Name. The vulnerability is due to a lack of santization in the path element, which allows an attacker to write arbitrary files outside the expected directory...

TeamPass 安全漏洞

TeamPass is an open source password manager from the individual developer Nils Laumaillé. A security vulnerability exists in versions prior to TeamPass 3.0.0.22, which stems from a security issue in the teampass-seckey.txt file...

CVE-2023-1070 External Control of File Name or Path in nilsteampassnet/teampass

External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...

CVE-2023-1070 External Control of File Name or Path in nilsteampassnet/teampass

External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...

PT-2023-1646 · Teampass · Teampass

Name of the Vulnerable Software and Affected Versions: TeamPass versions prior to 3.0.0.22 Description: The issue is related to external control of file name or path in the TeamPass password manager, which can be exploited by a remote attacker to delete arbitrary files. Recommendations: For...

Arbitrary txt files deletion (authenticated)

Description The file sources/export.queries.php can be exploited by any authenticated user to remove arbitrary txt files. If the system administrator configured the base path for the teampass-seckey.txt to be /var/teampass, as shown in the official example, it is possible to remove it causing a...