12468 matches found
GHSA-XR8X-PXM6-PRJG MITM based Zip Slip in `org.hl7.fhir.publisher:org.hl7.fhir.publisher`
Impact MITM can enable Zip-Slip. Vulnerability Vulnerability 1: Publisher.java There is no validation that the zip file being unpacked has entries that are not maliciously writing outside of the intended destination directory...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function. PoC curl --path-as-is "http://localhost:3000/../package.json Details A Directory Traversal attack also known as path...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal due to improper sanitization of the filePath variable. PoC curl --path-as-is "http://localhost:3000/../public-isprivate/index.html" Details A Directory Traversal attack also known as path traversal aims to access fil...
The vulnerability of the UnZip file archiver lies in the possibility of an operation exceeding the buffer limit in memory, allowing a hacker to trigger a system failure.
The vulnerability of the UnZip file archiver is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created zip file...
The vulnerability of the UnZip file archiver, related to writing beyond the buffer limit, allows a hacker to trigger a service failure.
The vulnerability of the UnZip file archiver is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created zip file...
MITM based Zip Slip in `ca.uhn.hapi.fhir:org.hl7.fhir.core`
MITM can enable Zip-Slip...
MITM based Zip Slip in `ca.uhn.hapi.fhir:org.hl7.fhir.core`
MITM can enable Zip-Slip...
PT-2023-19379 · Unknown · Hl7 Fhir Core Libraries
Name of the Vulnerable Software and Affected Versions: HL7 FHIR Core Libraries versions prior to 5.6.92 Description: The issue allows attackers to extract files into arbitrary directories via directory traversal from a crafted ZIP or TGZ archive. This can be exploited through a Man-in-the-Middle...
MITM based Zip Slip in `ca.uhn.hapi.fhir:org.hl7.fhir.core`
MITM can enable Zip-Slip...
MITM based Zip Slip in `ca.uhn.hapi.fhir:org.hl7.fhir.core`
MITM can enable Zip-Slip...
MITM based Zip Slip in `ca.uhn.hapi.fhir:org.hl7.fhir.core`
MITM can enable Zip-Slip...
RARLAB WinRAR ZIP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...
New Microsoft Azure Vulnerability Uncovered — EmojiDeploy for RCE Attacks
A new critical remote code execution RCE flaw discovered impacting multiple services related to Microsoft Azure could be exploited by a malicious actor to completely take control of a targeted application. "The vulnerability is achieved through CSRF cross-site request forgery on the ubiquitous SC...
New Microsoft Azure Vulnerability Uncovered — EmojiDeploy for RCE Attacks
A new critical remote code execution RCE flaw discovered impacting multiple services related to Microsoft Azure could be exploited by a malicious actor to completely take control of a targeted application. "The vulnerability is achieved through CSRF cross-site request forgery on the ubiquitous SC...
Denial Of Service (DoS)
nautilus is vulnerable to Denial Of Service DoS. The vulnerability exists due to the null pointer dereference in the getbasename of the library, allowing an attacker to cause an application crash through the pasted ZIP archive...
Cybercriminals Using Polyglot Files in Malware Distribution to Fly Under the Radar
Remote access trojans such as StrRAT and Ratty are being distributed as a combination of polyglot and malicious Java archive JAR files, once again highlighting how threat actors are continuously finding new ways to fly under the radar. "Attackers now use the polyglot technique to confuse security...
Cybercriminals Using Polyglot Files in Malware Distribution to Fly Under the Radar
Remote access trojans such as StrRAT and Ratty are being distributed as a combination of polyglot and malicious Java archive JAR files, once again highlighting how threat actors are continuously finding new ways to fly under the radar. "Attackers now use the polyglot technique to confuse security...
PT-2023-12416 · Unknown · Th3-822 Rapidleech
Name of the Vulnerable Software and Affected Versions: Th3-822 Rapidleech affected versions not specified Description: A problematic vulnerability has been found in Th3-822 Rapidleech, affecting the function zip go of the file classes/options/zip.php. The manipulation of the argument archive lead...
Path Traversal - Archiving Files to Zip
Description The Tiny File Manager pack files feature is vulnerable to path traversal, which allows an attacker to access files that reside outside the web document root directory. The vulnerability occurs as the "file" parameter is not sanitized properly, thus allowing a malicious user to input...
IcedID Malware Strikes Again: Active Directory Domain Compromised in Under 24 Hours
A recent IcedID malware attack enabled the threat actor to compromise the Active Directory domain of an unnamed target less than 24 hours after gaining initial access, while also borrowing techniques from other groups like Conti to meet its goals. "Throughout the attack, the attacker followed a...