Blog

Naver Cloud Explorer before 2.2.2.11 allows the attacker can move a local file in any path on the filesystem as a system privilege through its named pipe.

Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the “Modify the hostname” field.

Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the “Modify the hostname” field.

Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the “Modify the hostname” field.

Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the “Modify the hostname” field.

Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the “Modify the hostname” field.

Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the “Modify the hostname” field.

Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the “Modify the hostname” field.

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service.

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service.