Sinn3R

A vulnerabilidade permite que invasores remotos leiam ou gravem arquivos arbitrários por meio de um .. (ponto-ponto) nos comandos (1) get ou (2) put. Isso se deve a várias vulnerabilidades de traversal de diretório no servidor TFTP.

The issue exists due to insufficient input validation in the Media Center component of the Windows operating system. This allows a remote attacker to execute arbitrary code with the help of a specially crafted MCL file.

The issue is related to the FileUploadServlet class in ManageEngine Desktop Central, which lacks restrictions on file uploads. This can be exploited by a remote, unauthenticated attacker to upload and execute arbitrary files in the context of SYSTEM by injecting a null byte at the end of the ConnectionId parameter value.

A remote code execution issue exists in the way affected Microsoft components handle specially crafted TIFF files. This could allow remote attackers to execute arbitrary code via a crafted TIFF image, as demonstrated by an image in a Word document. The issue has been exploited in the wild. An attacker who successfully exploits this issue could take complete control of an affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full administrative rights.

The issue is related to a buffer overflow in the CxDbgPrint function within the ipswcom.dll ActiveX component. This allows remote attackers to execute arbitrary code by providing a long parameter to the `Alert` method.

The issue affects confidentiality, integrity, and availability. It is related to the handling of null bytes in the `evaluation` parameter used in a filename, potentially allowing attackers to create a file with an executable extension and execute arbitrary JSP code via unknown vectors.