[0day-rubbish] Synametrics Syncrify 6.2 build 1178 authenticated PublicLink chunk-upload path traversal to /etc/cron.d and root command execution (7.5)

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-10-15 07:42 UTC
Importiert: 2026-10-20 20:24 UTC
Quelle-ID: full_disc
uid_hash: 8b5d863745bc8305602536af6a00621ae54e8a29ed4ad2beb3e0db1ae4ad81ff

Full Disclosure

Posted by disclosure via Fulldisclosure on Oct 15 0day Rubbish Research Team is publicly disclosing a vulnerability in Synametrics

Syncrify 6.2 build 1178, the closed-source incremental backup and

file-replication server from Synametrics Technologies, Inc. (United States). The

product is written in Java, distributed for Linux as a tarball archive, and

served by an embedded Tomcat 9.0.113 through the vendor's in-house sradef

framework, whose single front controller routes every request as...

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss