Cookie Consent by Free Privacy Policy Generator 📌 CVE-2023-46496 | EverShop NPM up to 1.0.0-rc.7 Request api/files DELETE path traversal
Team IT Security Nachrichtenportal Logo

🏠 Team IT Security News

TSecurity.de ist eine Online-Plattform, die sich auf die Bereitstellung von Informationen,alle 15 Minuten neuste Nachrichten, Bildungsressourcen und Dienstleistungen rund um das Thema IT-Sicherheit spezialisiert hat.
Ob es sich um aktuelle Nachrichten, Fachartikel, Blogbeiträge, Webinare, Tutorials, oder Tipps & Tricks handelt, TSecurity.de bietet seinen Nutzern einen umfassenden Überblick über die wichtigsten Aspekte der IT-Sicherheit in einer sich ständig verändernden digitalen Welt.

16.12.2023 - TIP: Wer den Cookie Consent Banner akzeptiert, kann z.B. von Englisch nach Deutsch übersetzen, erst Englisch auswählen dann wieder Deutsch!

Google Android Playstore Download Button für Team IT Security
RSS Feed Symbol für Team IT Security 800+ IT News als RSS Feed abonnieren



📚 CVE-2023-46496 | EverShop NPM up to 1.0.0-rc.7 Request api/files DELETE path traversal


💡 Newskategorie: Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability was found in EverShop NPM up to 1.0.0-rc.7. It has been classified as critical. Affected is the function DELETE of the file api/files of the component Request Handler. The manipulation leads to path traversal. This vulnerability is traded as CVE-2023-46496. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component. ...



Sharing is caring on Social Media

🔗 Reddit
🔗 Telegram
🔗 LinkedIn
🔗 Xing
🔗 Twitter
🔗 Whatsapp
🔗 Facebook
🔗 Flipboard

Join the Team IT Security Community

🔗 "IT Sicherheit" Reddit-Gruppe
🔗 "IT Sicherheit" Telegramm-Seite

📌 On trusting NPM: Early in the month, Lance R. Vick noticed that the maintainer of the NPM foreach package let their personal email domain expire, so they bought it and now “controls foreach on NPM and the 36,826 projects that depend on it”.


📈 37.27 Punkte

📌 NPM swats path traversal bug that lets evil packages modify, steal files. That's bad for JavaScript crypto-wallets


📈 32.58 Punkte

📌 Dell EMC OpenManage Server Administrator up to 9.4 Web API API Request path traversal


📈 30.58 Punkte

📌 CVE-2005-10002 | almosteffortless secure-files Plugin up to 1.1 on WordPress secure-files.php sf_downloads downloadfile path traversal


📈 28.41 Punkte

📌 Find and delete all files in folder, but don't delete the folder itself


📈 27.62 Punkte

📌 WhatsApp 'Delete for Everyone' Doesn't Delete Media Files Sent to iPhone Users


📈 27.62 Punkte

📌 CVE-2019-16777 | npm CLI up to 6.13.4 Install Script path traversal (RHSA-2020:0573)


📈 26.7 Punkte

📌 CVE-2019-16776 | npm CLI up to 6.13.3 Install Script bin path traversal (RHSA-2020:0573)


📈 26.7 Punkte

📌 CVE-2022-34815 | Request Rename Or Delete Plugin up to 1.1.0 on Jenkins Pending Request cross-site request forgery


📈 26.46 Punkte

📌 CVE-2024-0341 | Inis up to 2.0.1 GET Request File.php path path traversal


📈 26.18 Punkte

📌 Medium CVE-2020-7614: Npm-programmatic project Npm-programmatic


📈 26.03 Punkte

📌 CVE-2024-0964 | gradio API Request path traversal


📈 25.52 Punkte

📌 rollup-plugin-dev-server on npm readFileFromContentBase path traversal


📈 25.51 Punkte

📌 rollup-plugin-serve on npm readFileFromContentBase path traversal


📈 25.51 Punkte

📌 marked-tree on npm index.js fs.readFile path traversal


📈 25.51 Punkte

📌 marscode on npm index.js fs.readFile path traversal


📈 25.51 Punkte

📌 fast-http on npm index.js fs.readFile path traversal


📈 25.51 Punkte

📌 CVE-2024-20345 | Cisco AppDynamics up to 23.7.1 Request path traversal (cisco-sa-appd-traversal-m7N8mZpF)


📈 25.45 Punkte

📌 TIBCO FTP Community Edition up to 6.5.0 on Windows Server/C API/Golang API/Java API/.Net API access control


📈 24.99 Punkte

📌 CVE-2022-20816 | Cisco Unified Communications Manager Web-based Management Interface path traversal (cisco-sa-cucm-file-delete-N2VPmOnE)


📈 24.55 Punkte

📌 CVE-2024-1704 | ZhongBangKeJi CRMEB 5.2.2 /adminapi/system/crud save/delete path traversal


📈 24.55 Punkte

📌 How to quickly find and delete large files on Linux with Large Files Finder


📈 24.41 Punkte

📌 How to quickly find and delete large files on Linux with Large Files Finder


📈 24.41 Punkte

📌 Etherpad up to 1.1.1 HTTP API Request node/utils/Minify.js path directory traversal


📈 24.34 Punkte

📌 Zoho ManageEngine Desktop Central prior 10.0.484 ZIP Archive Extraction API Request path traversal


📈 24.34 Punkte

📌 Etherpad bis 1.1.1 HTTP API Request node/utils/Minify.js path Directory Traversal


📈 24.34 Punkte

📌 flatCore bis 1.4.7 files.browser.php delete Directory Traversal


📈 23.52 Punkte

📌 flatCore up to 1.4.7 files.browser.php delete directory traversal


📈 23.52 Punkte

📌 [webapps] BrightSign Digital Signage Diagnostic Web Server 8.2.26 - File Delete Path Traversal


📈 23.37 Punkte

📌 #0daytoday #BrightSign Digital Signage Diagnostic Web Server 8.2.26 - File Delete Path Traversal Vu [#0day #Exploit]


📈 23.37 Punkte

📌 Teltonika TRB2 00.02.04.3 delete path traversal


📈 23.37 Punkte

📌 Couchbase Server 6.0 REST API API Request cross-site request forgery


📈 22.49 Punkte

📌 Pluck 4.7.3 Delete Files Cross Site Request Forgery


📈 22.34 Punkte

📌 Pluck 4.7.3 Delete Files Cross Site Request Forgery


📈 22.34 Punkte

📌 May I request that someone create a distribution called ThanOS that will delete half the files on your computer every so often?


📈 22.34 Punkte











matomo

Kontakt

24/7 [email protected]

Weitere Informationen

Google Android Playstore Download Button für Team IT Security
🔗 Impressum
🔗 Datenschutz
Paypal Spenden für Projekt

Social Media

🔗 Facebook
🔗 Reddit
🔗 Team IT Security als Elektron App
🔗 © 2015-2023 Team IT Security Nachrichtenportal über Cybersecurity
🔗 CMS "myDraft" a PHP Portal Software