Astra Linux - уязвимость в wireshark

Uncontrolled recursion in the Bluetooth DHT dissector in Wireshark versions 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows for denial of service through packet injection or crafted capture files...

CVE-2025-34319

TOTOLINK N300RT devices with firmware older than V3.4.0-B20250430 are affected by an OS command injection in the Boa formWsc handling functionality (discovered in V2.1.8-B20201030.1539). The vulnerability allows an unauthenticated attacker to execute commands via the targetAPSsid request paramete...

EUVD-2022-7504

Malicious code in bioql PyPI...

KubeSphere 3.4.0 Insecure Direct Object Reference

KubeSphere version 3.4.0 and KubeSphere Enterprise version 4.1.1 suffer from an insecure direct object reference vulnerability. Exploit Title: IDOR Vulnerability in KubeSphere v3.4.0 & KubeSphere Enterprise v4.1.1 Date: 3 September Exploit Author: Okan Kurtulus Vendor Homepage:...

SUSE CVE-2021-4184

Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...

Alist vulnerable to Path Traversal

Alist v3.4.0 is vulnerable to Directory Traversal,...

CVE-2022-45969

Alist v3.4.0 is vulnerable to Directory Traversal,...

CVE-2022-45969

Alist v3.4.0 is vulnerable to Directory Traversal,...

Directory traversal

Alist v3.4.0 is vulnerable to Directory Traversal,...

CVE-2022-45969

Alist v3.4.0 is vulnerable to Directory Traversal,...

CVE-2022-45969

CVE-2022-45969 targets Alist v3.4.0 and enables a Directory Traversal via bypass of the base path restriction, allowing an attacker to access or place files at arbitrary paths. Evidence from multiple sources confirms the affected product/version and the bypass path, with high-severity impacts (Co...

CVE-2022-45968

Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder even a password protected one...

CVE-2022-45968

Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder even a password protected one...

Default credentials

Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder even a password protected one...

CVE-2022-45968

Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder even a password protected one...

Alist 代码问题漏洞

Alist is a file listing program with multi-storage support by a Chinese Xhofe individual developer. A security vulnerability exists in Alist version v3.4.0, which stems from the existence of a file upload vulnerability that allows a user with only file upload privileges to upload any file to any...

CVE-2022-45968

Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder even a password protected one...

AList vulnerable to Improper Preservation of Permissions

Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder even a password protected one...

CVE-2022-45968

Alist v3.4.0 is affected by a File Upload vulnerability where a user with only upload permission can place files into any folder, including password-protected ones. This CVE entry (CVE-2022-45968) is corroborated by multiple connected records (Red Hat, GHSA, OSV, NVD) confirming the same vulnerab...

Moderate: Red Hat Security Advisory: Red Hat Quay v3.4.0 security update

Red Hat Quay 3.4.0 is now available with bug fixes and various enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...