66 matches found
Malicious code in baeltraverse (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5521deb024dc261aa5752ce50bb07c2abb01b57a9150edc884d71557be491041 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Use After Free
Overview Affected versions of this package are vulnerable to Use After Free via the function exprtraversenodespost in libyasm/expr.c. Remediation There is no fixed version for yasm. References - GitHub Gist - GitHub Issue Credit: Clingto...
CVE-2021-33462
An issue was discovered in yasm version 1.3.0. There is a use-after-free in exprtraversenodespost in libyasm/expr.c...
GSD-2022-1001348 btrfs: zoned: traverse devices under chunk_mutex in btrfs_can_activate_zone
btrfs: zoned: traverse devices under chunkmutex in btrfscanactivatezone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.20 by commit...
OSAS Traverse Extension 11 - (travextensionhostsvc) Unquoted Service Path Vulnerability
Exploit Title: OSAS Traverse Extension 11 - 'travextensionhostsvc' Unquoted Service Path Exploit Auth: Tech Johnny Vendor Homepage: https://www.osas.com Version: 11 x86 Tested on: Windows 2012R2 Details: C:\Windows\system32wmic service get name, pathname, displayname, startmode | findstr /i "Auto...
OSAS Traverse Extension 11 - 'travextensionhostsvc' Unquoted Service Path
Exploit Title: OSAS Traverse Extension 11 - 'travextensionhostsvc' Unquoted Service Path Exploit Auth: Tech Johnny Vendor Homepage: https://www.osas.com Version: 11 x86 Tested on: Windows 2012R2 Details: C:\Windows\system32wmic service get name, pathname, displayname, startmode | findstr /i "Auto...
OSAS Traverse Extension 11 Unquoted Service Path
Exploit Title: OSAS Traverse Extension 11 - 'travextensionhostsvc' Unquoted Service Path Exploit Auth: Tech Johnny Vendor Homepage: https://www.osas.com Version: 11 x86 Tested on: Windows 2012R2 Details: C:\Windows\system32wmic service get name, pathname, displayname, startmode | findstr /i "Auto...
CVE-2019-19287
A vulnerability has been identified in XHQ All Versions 6.1. The web interface could allow attackers to traverse through the file system of the server based by sending specially crafted packets over the network without authentication...
Kaseya Traverse Command Injection Vulnerability
Kaseya is Kaseya develops network monitoring software and Traverse is its network monitoring and management platform. A command injection vulnerability exists in Kaseya Traverse versions prior to 9.5.20. The vulnerability stems from a failure of a network system or product to properly filter...
UBUNTU-CVE-2019-1010065
The Sleuth Kit 4.6.0 and earlier is affected by: Integer Overflow. The impact is: Opening crafted disk image triggers crash in tsk/fs/hfsdent.c:237. The component is: Overflow in fls tool used on HFS image. Bug is in tsk/fs/hfs.c file in function hfscattraverse in lines: 952, 1062. The attack...
Security Bulletin: A vulnerability in Samba affects IBM Spectrum Scale SMB protocol access method (CVE-2019-3880)
Summary A Samba vulnerability affects IBM Spectrum Scale SMB protocol access method that could allow a remote authenticated attacker to traverse a symbolic link on the system and write files outside the SMB share. Vulnerability Details This vulnerability only affects systems having SMB1 and...
LibreOffice RCE Vulnerability (Feb 2019) - Windows
LibreOffice is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
I is how to pass the ASP Secrets read Get 1. 7 million USD reward-vulnerability warning-the black bar safety net
ASP. NET application in the more common vulnerability is a local file disclosure. If you have never develop or use such technology, then the LFD exploit can be very difficult, and no practical effect. In this article, I describe how to attack a presence in the LFD vulnerability of the application...
DEBIAN-CVE-2018-19497
In The Sleuth Kit TSK through 4.6.4, hfscattraverse in tsk/fs/hfs.c does not properly determine when a key length is too large, which allows attackers to cause a denial of service SEGV on unknown address with READ memory access in a tskgetu16 call in hfsdiropenmetacb in tsk/fs/hfsdent.c...
PT-2018-14975 · Tsk +1 · The Sleuth Kit +1
Name of the Vulnerable Software and Affected Versions: The Sleuth Kit TSK versions 4.6.4 and earlier Description: The issue allows attackers to cause a denial of service. It is related to the function hfs cat traverse in tsk/fs/hfs.c, which does not properly determine when a key length is too...
Fedora 27 : 2:nmap (2018-d4d7108de8)
Fix directory traverse Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenab...
CVE-2018-2366
SAP Business Process Automation BPA By Redwood, 9.0, 9.1, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing 'traverse to parent directory' are passed through to the file APIs...
CVE-2017-1279
IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 124757...
ZenCart Authentication Code Execution Vulnerability
ZenCart is an open source shopping cart system developed by Zen Cart team, it is mainly used to establish online stores, which can support a variety of payment methods, multi-language options, online shopping mall batch update and so on. A security vulnerability exists in the...
