PT-2020-13560

Name of the Vulnerable Software and Affected Versions NCH Express Accounts versions 8.24 and earlier Description The issue allows local users to discover the cleartext password by reading the configuration file. Recommendations For versions 8.24 and earlier, consider restricting access to the...

Security Bulletin: Publicly disclosed vulnerability from Samba affects IBM Netezza Host Management

Summary Samba is used by IBM Netezza Host Management. This bulletin provides mitigation for the reported CVE. Vulnerability Details CVEID: CVE-2020-1472 DESCRIPTION: Microsoft Windows could allow a remote attacker to gain elevated privileges on the system, caused by an error when establishing a...

Linux: Read ssh authorized_keys file

The authorizedkeys file in SSH specifies the SSH keys that can be used for logging into the user account for which the file is configured. It is a highly important configuration file, as it configures permanent access using SSH keys and needs proper management. Note: This script outputs the conte...

PT-2020-17345

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x through Q10.0 non-Qualcomm chipsets Description An issue in the GPS daemon allows attackers to obtain sensitive location information due to an incorrect configuration file. Recommendations For Samsung mobile...

CVE-2020-35552: Undefined Security Weakness

An issue was discovered in the GPS daemon on Samsung mobile devices with O8.x, P9.0, and Q10.0 non-Qualcomm chipsets software. Attackers can obtain sensitive location information because the configuration file is incorrect. The Samsung ID is SVE-2020-18678 December 2020...

Input validation

An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could allow a remote, authenticated attacker to inject arbitrary crontab entries into saved configurations before uploading. These entries are executed as root...

CVE-2020-25758

An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could allow a remote, authenticated attacker to inject arbitrary crontab entries into saved configurations before uploading. These entries are executed as root...

Plum Ik-401 Security Issue Vulnerability

The Plum Ik-401 is a 4G modem/router from Plum Germany for use in industrial environments. A security vulnerability exists in Plum IK-401 versions prior to 1.02, which can be exploited by an attacker accessing the device over the network to obtain a configuration file, including hashed credential...

Schneider Electric Easergy T300 Module Authentication Bypass

The vulnerability of the microprogramming software of the modular controller for automation of transformer substations in Schneider Electric Easergy T300 RTU devices is related to incorrect user authentication. Exploiting this vulnerability allows a malicious actor to remotely view and modify the...

Remote Code Execution

awstats is vulnerable to remote code execution. The vulnerability exists as cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format...

DEBIAN-CVE-2020-35176

In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname omitting the initial /etc, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501 and CVE-2020-29600...

AZL-44679 CVE-2020-7788 affecting package js-jquery 3.5.0-4

This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context...

CVE-2020-28946

An improper webserver configuration on Plum IK-401 devices with firmware before 1.02 allows an attacker with network access to the device to obtain the configuration file, including hashed credential data. Successful exploitation could allow access to hashed credential data with a single...

Cross site request forgery (csrf)

An improper webserver configuration on Plum IK-401 devices with firmware before 1.02 allows an attacker with network access to the device to obtain the configuration file, including hashed credential data. Successful exploitation could allow access to hashed credential data with a single...

Plum Ik-401 Access Control Vulnerability

The Plum Ik-401 is a 4G modem/router from Plum Germany for use in industrial environments. A security vulnerability exists in Plum IK-401 versions prior to 1.02, which can be exploited by an attacker accessing the device over the network to obtain a configuration file, including hashed credential...

DEBIAN-CVE-2020-29600

In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501...

Inclusion of Sensitive Information in Log Files

In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials...

Information Disclosure

ntlmaps is vulnerable to information disclosure. The vulnerability exists due to the library sets world-readable permissions for the configuration file, allowing a malicious user to obtain the username and password...

Arbitrary Code Execution

Open Racing Car Simulator TORCS is vulnerable to arbitrary code execution. A remote attacker could inject and execute arbitrary code via a long file name in an engine sample attribute in an xml configuration file...

USN-4651-1 mysql-8.0 vulnerabilities

Tom Reynolds discovered that due to a packaging error, the MySQL X Plugin was listening to all network interfaces by default, contrary to expectations. This update changes the default MySQL configuration to bind the MySQL X Plugin to localhost only. This change may impact environments where the...