PT-2018-9646

Name of the Vulnerable Software and Affected Versions: cgminer version 4.10.0 bfgminer version 5.5.0 Description: The issue allows an authenticated remote attacker to write the miner configuration file to arbitrary locations on the server due to missing basedir restrictions, which is caused by an...

CVE-2015-7907: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web server on Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allows remote attackers to bypass authentication, and write to a configuration file or trigger a calibration or test, via unspecified vectors...