Linux: Strict permissions for directories owned by root

This script searches for directories owned by root user with another group or access permissions stricter then 755. Note: This script dramatically increases the scan duration. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-17103

An Incorrect Default Permissions vulnerability in the BDLDaemon component of Bitdefender AV for Mac allows an attacker to elevate permissions to read protected directories. This issue affects: Bitdefender AV for Mac versions prior to 8.0.0...

CVE-2019-17103

An Incorrect Default Permissions vulnerability in the BDLDaemon component of Bitdefender AV for Mac allows an attacker to elevate permissions to read protected directories. This issue affects: Bitdefender AV for Mac versions prior to 8.0.0...

git: Remote code execution in recursive clones with nested submodules

A flaw was discovered where git improperly validates submodules' names used to construct git metadata paths and does not prevent them from being nested in existing directories used to store another submodule's metadata. A remote attacker could abuse this flaw to trick a victim user into cloning a...

Huawei EulerOS: Security Advisory for bubblewrap (EulerOS-SA-2019-1762)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

QEMU Path Traversal Vulnerability

QEMU Quick Emulator is a suite of analog processor software. A path traversal vulnerability exists in QEMU. The vulnerability stems from a failure of a networked system or product to properly filter for specific elements in a resource or file path. An attacker could use this vulnerability to acce...

CVE-2019-19339

It was found that the Red Hat Enterprise Linux 8 kpatch update did not include the complete fix for CVE-2018-12207. A flaw was found in the way Intel CPUs handle inconsistency between, virtual to physical memory address translations in CPU's local cache and system software's Paging structure...

SSRF when adding Jira server in admin plugin

h2. Please be aware that Atlassian does not consider this issue to represent a security risk as the functionality is restricted to users with administrative rights. h3. Issue Summary When adding a Jira server in Bamboo under the "User directories" module, an attacker can put any value in the...

OPENSUSE-SU-2020:0057-1 Security update for singularity

This update for singularity fixes the following issues: - CVE-2019-19724: Fixed incorrect file permissions on user configuration and cache directories boo1159550...

Juniper Networks Junos Space Path Traversal Vulnerability

Juniper Junos Space is a network management solution from Juniper Networks. The solution supports automated configuration, monitoring and troubleshooting of devices and services throughout their lifecycle. A path traversal vulnerability in Juniper Networks Junos Space prior to version 19.4R1, whi...

Gila CMS Directory Traversal Vulnerability

Gila CMS is an open source content management system CMS based on PHP and MySQL. A path traversal vulnerability exists in /cm/delete?t= in Gila CMS version 1.11.8. The vulnerability stems from a failure of a networked system or product to properly filter special elements in the path of a resource...

Gila CMS path traversal vulnerability (CNVD-2020-03268)

Gila CMS is an open source content management system CMS based on PHP and MySQL. A path traversal vulnerability exists in Gila CMS version 1.11.8. The vulnerability stems from a failure of a networked system or product to properly filter special elements in the path of a resource or file. An...

File Inclusion Vulnerability in Apache Tomcat Server

Apache and Tomcat are Apache open source organization developed to handle HTTP services project , both are free , both can be run as a stand-alone Web server . Apache Tomcat server has a file inclusion vulnerability that can be exploited by an attacker to read or include arbitrary files in all...

Cross-site Scripting (XSS)

seeftl is vulnerable to cross-site scripting XSS. During the directories listing, the input filename is not escaped before printing the user input directly on the screen, allowing an attacker to inject arbitrary script...

TVT NVMS-1000 Directory Traversal Vulnerability

TVT Digital Technology TVT NVMS-1000 is a network surveillance video management system from TVT Digital Technology, China. A directory traversal vulnerability exists in the TVT Digital Technology TVT NVMS-1000. The vulnerability stems from a failure of a network system or product to properly filt...

Buffalo TeraStation Directory Traversal (CVE-2018-13322)

A directory traversal vulnerability exists in Buffalo TeraStation TS5600D. Successful exploitation of this vulnerability would allow a remote attacker to list the contents of arbitrary directories on the affected system...

POC-T

This is a Python-based penetration testing framework called POC-T. It is designed to facilitate concurrent testing of multiple targets and supports various features such as multi-threading, URL parsing, and user agent management. The framework includes a range of scripts for testing different...

The vulnerability of the sanitize_filename function in the src/glib-utils.c file of the File Roller archive program allows a malicious actor to cause a service failure.

The vulnerability of the sanitizefilename function in the src/glib-utils.c file of the File Roller archive manager is related to a lack of mechanisms to restrict the path to the restricted directory. Exploiting this vulnerability could allow an attacker to cause service failure through a speciall...

Security Bulletin: Incorrect permissions on restored files and directories on Windows using IBM Spectrum Protect Plus (CVE-2019-4652)

Summary File restore on Windows may not restore NTFS security permissions ACLs. Vulnerability Details CVEID: CVE-2019-4652 DESCRIPTION: Incorrect permissions on restored files and directories on Windows using IBM Spectrum Protect Plus. CVSS Base score: 5.1 CVSS Temporal Score: See:...

statics-server path traversal vulnerability

statics-server is a server for collecting information about Joomla installation environment. A path traversal vulnerability exists in statics-server. The vulnerability stems from a failure of a networked system or product to properly filter special elements in the path of a resource or file. An...