GHSA-PH62-8768-R87V Arbitrary file delete in ectouch/ectouch

ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...

Arbitrary file delete in ectouch/ectouch

ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...

CVE-2022-25098

ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...

Arbitrary file deletion

ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...

CVE-2022-25098

ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...

CVE-2022-25098

ECTouch v2 is affected by an arbitrary file deletion vulnerability caused by insufficient filtering of the filename parameter. The root cause cited is improper validation of file names, enabling deletion of files via this parameter. The connected documents in this set confirm the issue but do not...

CVE-2022-25098: Undefined Security Weakness

ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...

Security Bulletin: Vulnerabilities in Struts v2 affect IBM Spectrum Control (formerly Tivoli Storage Productivity Center) CVE-2016-1181, CVE-2016-1182

Summary Struts v2 vulnerabilities affet IBM Spectrum Control and Tivoli Storage Productivity Center. IBM Spectrum Control and Tivoli Storage Productivity Center have addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-1181 DESCRIPTION: Apache Struts could allow a remote attacker ...

CVE-2022-25130

A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T6 V3Firmware T6V3V4.1.5cu.748B20211015 and T10 V2Firmware V4.1.8cu.5207B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet...

CVE-2022-25130

A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T6 V3Firmware T6V3V4.1.5cu.748B20211015 and T10 V2Firmware V4.1.8cu.5207B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet...

PT-2022-17094

Name of the Vulnerable Software and Affected Versions TOTOLINK Technology T6 V3 Firmware version T6 V3 V4.1.5cu.748 B20211015 TOTOLINK Technology T10 V2 Firmware version V4.1.8cu.5207 B20210320 Description A command injection issue in the recvSlaveUpgstatus function of TOTOLINK Technology routers...

PT-2022-17093

Name of the Vulnerable Software and Affected Versions TOTOLINK Technology T6 V3 Firmware version T6 V3 V4.1.5cu.748 B20211015 TOTOLINK Technology T10 V2 Firmware version V4.1.8cu.5207 B20210320 Description A command injection issue in the meshSlaveUpdate function of TOTOLINK Technology routers...

PT-2022-17088

Name of the Vulnerable Software and Affected Versions TOTOLINK Technology T6 V3 Firmware version T6 V3 V4.1.5cu.748 B20211015 TOTOLINK Technology T10 V2 Firmware version V4.1.8cu.5207 B20210320 Description A command injection issue in the recvSlaveCloudCheckStatus function of TOTOLINK Technology...

The vulnerability of the upgrade_filter function implementation in D-Link DI-7200G V2.E1 router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the upgradefilter function in the microprogramming software for D-Link DI-7200G V2.E1 routers is related to insufficient cleaning of input data during the processing of parameters path and time. Exploiting this vulnerability allows an attacker operating remotely to execute...

containerd v1.2.x can be coerced into leaking credentials during image pull

Impact If a container image manifest in the OCI Image format or Docker Image V2 Schema 2 format includes a URL for the location of a specific image layer otherwise known as a “foreign layer”, the default containerd resolver will follow that URL to attempt to download it. In v1.2.x but not 1.3.0 o...

CVE-2022-21731

Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for ConcatV2 can be used to trigger a denial of service attack via a segfault caused by a type confusion. The axis argument is translated into concatdim in the ConcatShapeHelper helper function. Then, a...

Two pairs can have same tokens

Handle sirhashalot Vulnerability details Impact The createLPoolPair function in ControllerV1.sol tries to prevent a pair from being create if it already exists. It does this with the statement requirelpoolPairstoken0token1.lpool0 == address0 || lpoolPairstoken1token0.lpool0 == address0, 'pool pai...

Mageia: Security Advisory (MGASA-2018-0487)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-40596

The CVE-2021-40596 entry concerns a SQL injection in the Login.php file of the sourcecodester Online Learning System v2 (by oretnom23). The vulnerability is exploitable via the faculty_id parameter, allowing an attacker to execute arbitrary SQL commands. Public references in connected documents c...

CVE-2022-23858

A flaw was found in the REST API. An improperly handled REST API call could allow any logged user to elevate privileges up to the system account. This affects StarWind Command Center build 6003 v2...