Bash 5.0 Patch 11 - SUID Priv Drop Exploit

Exploit Title : Bash 5.0 Patch 11 - SUID Priv Drop Exploit Date : 2019-11-29 Original Author: Ian Pudney , Chet Ramey Exploit Author : Mohin Paramasivam Shad0wQu35t Version : pwn.c cat pwn.c include include include void...

Bash 5.0 Patch 11 Privilege Escalation

Exploit Title : Bash 5.0 Patch 11 - SUID Priv Drop Exploit Date : 2019-11-29 Original Author: Ian Pudney , Chet Ramey Exploit Author : Mohin Paramasivam Shad0wQu35t Version : pwn.c cat E...

Bash 5.0 Patch 11 - SUID Priv Drop Exploit

Bash 5.0 Patch 11 - SUID Priv Drop Exploit Exploit Title : Bash 5.0 Patch 11 - SUID Priv Drop Exploit Date : 2019-11-29 Original Author: Ian Pudney , Chet Ramey Exploit Author : Mohin Paramasivam Shad0wQu35t Version : pwn.c cat pwn.c include...

CVE-2019-15793

In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, several locations which shift ids translate user/group ids before performing operations in the lower filesystem were translating them into inituserns, whereas they should have been translated in...

CVE-2019-11651

Reflected XSS on Micro Focus Enterprise Developer and Enterprise Server, all versions prior to version 3.0 Patch Update 20, version 4.0 Patch Update 12, and version 5.0 Patch Update 2. The vulnerability could be exploited to redirect a user to a malicious page or forge certain types of web reques...

CVE-2019-4246

IBM Daeja ViewONE Virtual 5.0 through 5.0.6 could expose internal parameters to ViewONE clients that could be used in further attacks against the system. IBM X-Force ID: 159521...

CVE-2019-4246

CVE-2019-4246 affects IBM Daeja ViewONE Virtual 5.0–5.0.6, where internal parameters are exposed to ViewONE clients, enabling possible follow-on attacks. IBM’s bulletin confirms the issue and lists remediation: upgrading to Daeja ViewONE Virtual 5.0.6 iFix 4 or 5.0.5 iFix15 addresses the vulnerab...

CVE-2019-4246

IBM Daeja ViewONE Virtual 5.0 through 5.0.6 could expose internal parameters to ViewONE clients that could be used in further attacks against the system. IBM X-Force ID: 159521...

Fortinet FortiSIEM 5.0 / 5.2.1 Improper Certification Validation

Product Name: FortiSIEM Tested versions: 5.0, 5.2.1 Fixed in version: Only a manual workaround is available from Fortinet as of this writing Weakness Type: CWE-295 - Improper Certificate Validation Discovered by: Andrew Klaus Cybera Canada CVE: Pending == Disclosure Timeline: June 25, 2019: Initi...

PT-2019-16991 · Ibm · Daeja Viewone Virtual

Name of the Vulnerable Software and Affected Versions: IBM Daeja ViewONE Virtual versions 5.0 through 5.0.6 Description: The issue could expose internal parameters to ViewONE clients, potentially allowing them to be used in further attacks against the system. Recommendations: For versions 5.0...

Improper Input Validation in simple_form

Incorrect Access Control in filemethod? in lib/simpleform/formbuilder.rb; a user-supplied string is invoked as a method call Impact For pages that build a form using user input, it is possible for an attacker to manipulate the input and send any method present in the form object. For example: erb...

CVE-2019-16744

eBrigade before 5.0 has evenements.php cid SQL Injection...

CVE-2019-16744

eBrigade before 5.0 has evenements.php cid SQL Injection...

CVE-2019-16745

eBrigade before 5.0 has evenementchoice.php chxCal SQL Injection...

Sql injection

eBrigade before 5.0 has evenements.php cid SQL Injection...

Sql injection

eBrigade before 5.0 has evenementical.php evenement SQL Injection...

Sql injection

eBrigade before 5.0 has evenementchoice.php chxCal SQL Injection...

CVE-2019-16744

eBrigade before 5.0 has evenements.php cid SQL Injection...

CVE-2019-16743

eBrigade before 5.0 has evenementical.php evenement SQL Injection...

Hospital-Management 1.26 - 'fname' SQL Injection

Exploit Title: Hospital-Management 1.26 - 'fname' SQL Injection Author: Cakes Discovery Date: 2019-09-18 Vendor Homepage: https://github.com/Mugerwa-Joseph/hospital-management Software Link: https://github.com/Mugerwa-Joseph/hospital-management/archive/master.zip Tested Version: 1.26 Tested on OS...