pcs: Debug parameter removal bypass, allowing information disclosure

It was found that the REST interface of the pcsd service did not properly remove the pcs debug argument from the /runpcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege...

The vulnerability of the bpserverd protocol used by Unitrends Backup software allows a perpetrator to bypass authentication procedures or execute arbitrary commands with root privileges.

The vulnerability of the bpserverd protocol used by Unitrends Backup software is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process or execute arbitrary commands with root privileges, using the xinetd...

fkey[v0.0.2]: local/remote file accessibility exploit.

nothing major, just killing some time and strolled across this project on freshmeat. original version: http://fakehalo.us/xfkey.c --------------------- exploit: xfkey.c ---------------------- / fkeyv0.0.2: local/remote file accessibility exploit. by: vade79/v9 [email protected] fakehalo/realhalo...