SUSE CVE-2015-2704

realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response...

CVE-2021-43521

A Buffer Overflow vulnerability exists in zlog 1.2.15 via zlogconfbuildwithfile in src/zlog/src/conf.c...

CVE-2022-24677

Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration information to conf.php...

PT-2021-28303

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, as indicated by an OSS-Fuzz report. The crash state involves functions such as mk rconf read, mk rco...

PT-2021-28295

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 8 crash has been reported. The crash involves the multiline parser conf file and flb parser conf file functions, and is relate...

OPENSUSE-SU-2021:0058-1 Security update for cobbler

This update for cobbler fixes the following issues: - Add cobbler-tests subpackage for unit testing for openSUSE/SLE - Adds LoadModule definitions for openSUSE/SLE - Switch to new refactored auth module. - use systemctl to restart cobblerd on logfile rotation boo1169207 Mainline logrotate conf fi...

ALPINE-CVE-2020-29600

In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501...

Eldy Awstats Path Traversal Vulnerability

Eldy Awstats is Eldy personal developer of a log analysis tool applied to Web sites. The software supports analyzing Web, WAP, proxy, streaming server, FTP, mail server log files on all operating systems such as IIS 5.0 +, Apache, etc. It displays all Web statistics including: visitors, pages,...

PT-2020-22163

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, as indicated by an OSS-Fuzz report. The crash state involves functions such as mk rconf read, mk rconf...

AZL-6926 CVE-2020-24331 affecting package trousers for versions less than 0.3.14-7

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user still has read and write access to the /etc/tcsd.conf file which contains various settings related to this daemon...

Icinga Arbitrary Code Execution Vulnerability

Icinga is an open source computer system and network monitoring application. Icinga suffers from an arbitrary code execution vulnerability. An attacker can make Icinga 2 run with root privileges by editing the init.conf file, which can be used to execute arbitrary code with root privileges...

Juniper Networks Junos OS Elevation of Privilege Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS. The program failed to request the root user's...

APACHE breakthrough in the Directory IP restrictions.- Vulnerability warning-the black bar safety net

Today get a site,get the background. But open get the following error. 4 0 3 Forbidden Request forbidden by administrative rules. This situation is generally not home. Or limit IP. Clear the background first is there. Because it is the ECSHOP system,the background index. php can not...

CentOS 6 : cifs-utils (CESA-2012:0902)

An updated cifs-utils package that fixes one security issue, multiple bugs, and adds various enhancements is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score,...

Hero DVD Buffer Overflow Exploit (meta)

Exploit for windows platform in category remote exploits ======================================= Hero DVD Buffer Overflow Exploit meta ======================================= .-----.--.--.--.----.----.-| | | | | | | | -| | | |||||| || By MadjiX Sec4ever.com Note: Use Backtrack! place httpd.conf i...

Fedora Core 9 FEDORA-2009-3789 (prewikka)

The remote host is missing an update to prewikka announced via advisory FEDORA-2009-3789. OpenVAS Vulnerability Test $Id: fcore20093789.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3789 prewikka Authors: Thomas Reinke Copyright: Copyright c 2009...

DEBIAN-CVE-2008-4870

dovecot 1.0.7 in Red Hat Enterprise Linux RHEL 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the sslkeypassword parameter value...