Wings 后置链接漏洞

Wings is the server control interface for Pterodactyl Panel. A backlink vulnerability exists in Wings v1.7.x prior to v1.7.4, and v1.11.x prior to v1.11.4, which stems from the ability to recursively delete files and directories on the host system, which could be exploited by an attacker to...

Wings 后置链接漏洞

Wings is the server control interface for Pterodactyl Panel. A backlink vulnerability exists in Wings v1.7.x prior to v1.7.3, and v1.11.x prior to v1.11.3, which stems from the ability to create new files and directory structures on the host system that did not previously exist, potentially...

PT-2023-19941 · Wings · Wings

Name of the Vulnerable Software and Affected Versions: Wings versions prior to v1.11.3 Wings versions prior to v1.7.3 Description: The vulnerability in Wings allows attackers to create new files and directory structures on the host system, potentially enabling them to change resource allocations,...

[SECURITY] Fedora 37 Update: rust-bat-0.21.0-6.fc37

Cat1 clone with wings...

angelswingsfoundationthailand.org Improper Access Control vulnerability OBB-2249769

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Insecure Access Control

github.com/pterodactyl/wings allows insecure access to endpoints. An attacker is able to access resources on local networks that would otherwise be inaccessible due to lack of hostname verification...

Unchecked hostname resolution could allow access to local network resources by users outside the local network

Impact A newly implemented route allowing users to download files from remote endpoints was not properly verifying the destination hostname for user provided URLs. This would allow malicious users to potentially access resources on local networks that would otherwise be inaccessible. This...

Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings

Impact All versions of Pterodactyl Wings preior to 1.4.4 are vulnerable to system resource exhaustion due to improper container process limits being defined. A malicious user can consume more resources than intended and cause downstream impacts to other clients on the same hardware, eventually...

GHSA-JJ6M-R8JC-2GP7 Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings

Impact All versions of Pterodactyl Wings preior to 1.4.4 are vulnerable to system resource exhaustion due to improper container process limits being defined. A malicious user can consume more resources than intended and cause downstream impacts to other clients on the same hardware, eventually...

PT-2021-24355 · Pterodactyl · Pterodactyl Wings

Name of the Vulnerable Software and Affected Versions: Pterodactyl Wings versions prior to 1.11.2 Description: An authenticated user with access to a game server can bypass previously implemented access control, potentially accessing resources on local networks that would otherwise be inaccessibl...

CVE-2021-32699

Wings is the control plane software for the open source Pterodactyl game management system. All versions of Pterodactyl Wings prior to 1.4.4 are vulnerable to system resource exhaustion due to improper container process limits being defined. A malicious user can consume more resources than intend...

CVE-2021-32699

Wings is the control plane software for the open source Pterodactyl game management system. All versions of Pterodactyl Wings prior to 1.4.4 are vulnerable to system resource exhaustion due to improper container process limits being defined. A malicious user can consume more resources than intend...

Code injection

Wings is the control plane software for the open source Pterodactyl game management system. All versions of Pterodactyl Wings prior to 1.4.4 are vulnerable to system resource exhaustion due to improper container process limits being defined. A malicious user can consume more resources than intend...

CVE-2021-32699 Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings

Wings is the control plane software for the open source Pterodactyl game management system. All versions of Pterodactyl Wings prior to 1.4.4 are vulnerable to system resource exhaustion due to improper container process limits being defined. A malicious user can consume more resources than intend...

CVE-2021-32699

Wings (Pterodactyl Wings) pre-1.4.4 is affected by a resource-exhaustion vulnerability caused by improper container process limits. A malicious user can exhaust host resources, impacting other clients and potentially taking the physical server offline. Mitigation per multiple sources: upgrade to ...

PT-2021-19865 · Unknown · Pterodactyl Wings

Name of the Vulnerable Software and Affected Versions: Pterodactyl Wings versions prior to 1.4.4 Description: The issue concerns system resource exhaustion due to improper container process limits being defined. A malicious user can consume more resources than intended, causing downstream impacts...

Server-side Request Forgery (SSRF)

Overview github.com/pterodactyl/wings/router/downloader is a Wings is Pterodactyl's server control plane, built for the rapidly changing gaming industry and designed to be highly performant and secure. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF. It is...

SQL Injection Vulnerability in Electronic Evidence Management Software of Shenzhen Police Wing Intelligent Technology Co.

Shenzhen Police Wings Intelligent Technology Co., Ltd. is an enterprise in China's law enforcement recorder industry, integrating R&D, manufacturing, sales and service. Shenzhen Police Wing Intelligent Technology Co., Ltd. electronic evidence management software SQL injection vulnerability,...

File Upload Vulnerability in AIC Smart Campus System of Hainan Wings Wisdom Information Technology Co.

Hainan Wings Wisdom Information Technology Co., Ltd hereinafter referred to as "Wings Wisdom" was founded in May 2017, with a registered capital of 10 million yuan, is an enterprise specializing in consulting, planning, construction and services in the field of information technology in higher...

Shenzhen Police Wing Intelligent Technology Co., Ltd. website building system has arbitrary file download vulnerability

Shenzhen Police Wings Intelligent Technology Co., Ltd. is a leading enterprise in China's law enforcement recorder industry, focusing on providing law enforcement departments with law enforcement recorders as the core, including the Police Wings series of intelligent law enforcement equipment, th...