CVE-2021-28154: Missing Authorization

Camunda Modeler aka camunda-modeler through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states "The way we secured the app is that it...

CVE-2019-17371

gif2png 2.5.13 has a memory leak in the writefile function...

PT-2019-15748

Name of the Vulnerable Software and Affected Versions ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier Description The issue concerns the HMISimulator component, which uses the readFile/writeFile interface. It potentially allows access to files outside of the working directory due to pa...

CVE-2019-18997: Improper Protection of Alternate Path

The HMISimulator component of ABB PB610 Panel Builder 600 uses the readFile/writeFile interface to manipulate the work file. Path configuration in PB610 HMISimulator versions 2.8.0.424 and earlier potentially allows access to files outside of the working directory, thus potentially supporting...

CVE-2019-17371

gif2png 2.5.13 has a memory leak in the writefile function...

UBUNTU-CVE-2019-17371

gif2png 2.5.13 has a memory leak in the writefile function...

Memory corruption

gif2png 2.5.13 has a memory leak in the writefile function...

CVE-2019-17371

Removed by vendor...

CVE-2019-17371

gif2png 2.5.13 has a memory leak in the writefile function...

CVE-2019-17371

gif2png 2.5.13 has a memory leak in the writefile function...

CVE-2019-17371: Missing Release of Memory after Effective Lifetime

gif2png 2.5.13 has a memory leak in the writefile function...

PT-2019-4531

Name of the Vulnerable Software and Affected Versions gif2png version 2.5.13 libpng affected versions not specified Description The issue is related to a memory leak in the writefile function and concerns the png malloc warn and png create info struct functions of the libpng library. This is due ...

PB610 HMISimulator provides interface with access to arbitrary files

The HMISimulator component of ABB PB610 Panel Builder 600 uses the readFile/writeFile interface to manipulate the work file. Path configuration in PB610 HMISimulator versions 2.8.0.424 and earlier potentially allows access to files outside of the working directory, thus potentially supporting...

MemITM - Tool To Make In Memory Man In The Middle

The MemITM Mem In The Middle tool has been developped in order to easily intercept "messages" in Windows processes memory. We developped a lot of custom memory interception tools in order to capture network messages before encryption, or IPC messages, and to be able to inspect them or alter them ...

Advantech WebAccess WADashboard API Path Traversal Vulnerability

Advantech WebAccess is a set of HMI/SCADA software based on browser architecture from Advantech. The software supports dynamic graphical displays and real-time data control, and provides remote control and management of automation devices.WADashboard API is one of the dashboard API components. A...

PT-2018-13156

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions 8.3.1 through 8.3.2 Description The issue allows remote authenticated attackers to write or overwrite any file on the filesystem due to a directory traversal vulnerability in the writeFile API endpoint. This can be...

TRS WCM5.2 任意文件上传漏洞

漏洞影响版本WCM5.2，其他版本未测试TRS WCM的Web Service提供了向服务器写入文件的方式，可以直接写jsp文件获取webshell。通过访问http://xxx.com/wcm/services可以查看TRS WCM的Web...

Chilkat Crypt ActiveX WriteFile Unsafe Method

No description provided by source. $Id: chilkatcryptwritefile.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Chilkat Crypt - ActiveX WriteFile Unsafe Method (Metasploit)

$Id: chilkatcryptwritefile.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Chilkat Crypt ActiveX WriteFile Unsafe Method

$Id: chilkatcryptwritefile.rb 8703 2010-03-03 21:17:31Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...