12490 matches found
CVE-2020-21585
Vulnerability in emlog v6.0.0 allows user to upload webshells via zip plugin module...
CVE-2020-21585
Vulnerability in emlog v6.0.0 allows user to upload webshells via zip plugin module...
Design/Logic Flaw
Vulnerability in emlog v6.0.0 allows user to upload webshells via zip plugin module...
CVE-2020-21585
CVE-2020-21585 affects emlog v6.0.0. Affected component: zip plugin module that enables uploading of webshells. Root cause described as a vulnerability allowing arbitrary webshell upload. Public references (NVD, Red Hat, OSV, CVE listings) consistently describe the same issue; CVSS scores indicat...
CVE-2020-21585
Vulnerability in emlog v6.0.0 allows user to upload webshells via zip plugin module...
Emlog 代码问题漏洞
Emlog is a PHP and MySQL based CMS builder by the individual developer of Emlog. A security vulnerability exists in emlog v6.0.0, which allows users to upload webshell via zip plugin module...
JVN#73236007: Archive collectively operation utility vulnerable to directory traversal
Archive collectively operation utility provided by EikiSoft contains a directory traversal vulnerability CWE-22 due to a flaw in the processing of the filenames when extracting from ZIP archives. Impact By expanding a malicious ZIP archive, arbitrary files may be created or overwritten with the...
GHSA-VGWR-773Q-7J3C Path Traversal within joomla/archive zip class
An issue was discovered in Joomla! 3.0.0 through 3.9.24. Extracting an specifilcy crafted zip package could write files outside of the intended path...
Path Traversal within joomla/archive zip class
An issue was discovered in Joomla! 3.0.0 through 3.9.24. Extracting an specifilcy crafted zip package could write files outside of the intended path...
SUSE-SU-2021:0937-1 Security update for go1.16
This update for go1.16 fixes the following issues: - go1.16.2 released 2021-03-11 bsc1182345 - go1.16.1 released 2021-03-10 bsc1182345 - CVE-2021-27918: Fixed an infinite loop when using xml.NewTokenDecoder with a custom TokenReader bsc1183333. - CVE-2021-27919: Fixed an issue where archive/zip:...
Online Reviewer Management System 1.0 Cross Site Scripting
Exploit Title: Online Reviewer Management System Persistent Cross Site Scripting Exploit Author: th3d1gger Vendor Homepage: https://sourcecodester.com Software Link: https://www.sourcecodester.com/sites/default/files/download/janobe/reviewer0.zip Version: 1.0 Tested on Windows 10 @attack request...
Security Researcher Hides ZIP, MP3 Files Inside PNG Files on Twitter
A security researcher has discovered a novel steganography technique for hiding data inside a Portable Network Graphics .PNG image file posted on Twitter, a tactic that could be exploited by threat actors to hide malicious activity. Researcher David Buchanan heralded his discovery on Twitter...
Siemens Solid Edge Viewer ZIP Path Traversal Remote Code Execution Vulnerability
The vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
USN-4832-1: Plexus Archiver vulnerability
It was discovered that Plexus Archiver incorrectly handled directory traversal during extraction. An attacker could possibly use this for a Zip-Slip attack...
USN-4832-1 plexus-archiver vulnerability
It was discovered that Plexus Archiver incorrectly handled directory traversal during extraction. An attacker could possibly use this for a Zip-Slip attack...
USN-4811-1 libzip vulnerability
It was discovered that libzip mishandled certain malformed ZIP archives. A remote attacker could use this vulnerability to cause a denial of service...
USN-4811-1: libzip vulnerability
It was discovered that libzip mishandled certain malformed ZIP archives. A remote attacker could use this vulnerability to cause a denial of service...
Ubuntu: Security Advisory (USN-4754-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Windows-Only 7-Zip now Available for Linux
By Waqas 7-Zip is now available on Linux as a command-line utility. This is a post from HackRead.com Read the original post: Windows-Only 7-Zip now Available for Linux...
USN-4754-3: Python vulnerabilities
USN-4754-1 fixed vulnerabilities in Python. This update provides the corresponding updates for Ubuntu 18.04 and Ubuntu 20.04. In the case of Python 2.7 for 20.04, these additional fixes are included: It was dicovered that Python allowed remote attackers to cause a denial of service resource...