CVE-2019-17365

Nix through 2.3 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable...

Logrotate 3.15.1 Privilege Escalation

Exploit Title: logrotten 3.15.1 - Privilege Escalation Date: 2019-10-04 Exploit Author: Wolfgang Hotwagner Vendor Homepage: https://github.com/logrotate/logrotate Software Link: https://github.com/logrotate/logrotate/releases/tag/3.15.1 Version: all versions through 3.15.1 Tested on: Debian...

CVE-2019-17130

vBulletin through 5.5.4 mishandles external URLs within the /core/vb/vurl.php file and the /core/vb/vurl directories...

EulerOS 2.0 SP3 : bubblewrap (EulerOS-SA-2019-2046)

According to the version of the bubblewrap package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations related to...

HPE Intelligent Management Center Information Disclosure

!/opt/local/bin/python2.7 Exploit Title: HPE Intelligent Management Center dbman Command 10001 Information Disclosure Date: 22-09-2019 Exploit Author: Rishabh Sharma Linkedin: rishabh2241991 Vendor Homepage: www.hpe.com Software Link:...

HPE Intelligent Management Center < 7.3 E0506P09 - Information Disclosure Exploit

!/opt/local/bin/python2.7 Exploit Title: HPE Intelligent Management Center dbman Command 10001 Information Disclosure Date: 22-09-2019 Exploit Author: Rishabh Sharma Linkedin: rishabh2241991 Vendor Homepage: www.hpe.com Software Link:...

HPE Intelligent Management Center < 7.3 E0506P09 - Information Disclosure

!/opt/local/bin/python2.7 Exploit Title: HPE Intelligent Management Center dbman Command 10001 Information Disclosure Date: 22-09-2019 Exploit Author: Rishabh Sharma Linkedin: rishabh2241991 Vendor Homepage: www.hpe.com Software Link:...

The vulnerability of the SMB server’s configuration file smb.conf, which is part of the Samba networking software package, allows a hacker to gain unauthorized access to protected information.

The vulnerability of the SMB server’s configuration file smb.conf in the Samba networking software package is related to deficiencies in pathname validation for restricted access directories. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized...

Silver Peak Systems EdgeConnect SD-WAN Path Traversal Vulnerability

Silver Peak Systems EdgeConnect SD-WAN is a suite of software-defined, wide-area networking platforms from Silver Peak Systems, USA. The platform provides path conditioning, application classification, routing and virtual WAN overlay. A path traversal vulnerability exists in Silver Peak Systems...

statichttpserver Path Traversal Vulnerability

statichttpserver is a static file server. A path traversal vulnerability exists in statichttpserver version 0.9.7 and earlier, which can be exploited by an attacker to access locations outside of a restricted directory...

Pulse Connect Secure File Disclosure (CVE-2019-11510)

A file disclosure vulnerability exists in Pulse Connect Secure. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

Entropic Path Traversal Vulnerability

Entropic is a package registry with a command line interface. Entropic suffers from a path traversal vulnerability. The vulnerability stems from a failure of a networked system or product to properly filter for specific elements in a resource or file path. An attacker could use this vulnerability...

U.S. Dept Of Defense: [██████████] — Directory traversal via `/aerosol-bin/███████/display_directory_████_t.cgi`

Description On the domain https://█████████, there is a vulnerable endpoint that lets an attacker preview and browse the whole server including all the server's critical directories such as etc , var, cache etc. located in the root directory of this Linux web server. This vulnerable endpoint is...

WordPress wps-child-theme-generator plugin path traversal vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wps-child-theme-generator is a website theme generator plugin used in it. A path traversal vulnerability exists in versions...

AndroVideo Advan VD-1 Path Traversal Vulnerability

The AndroVideo Advan VD-1 is a security camera from AndroVideo Taiwan, China. A path traversal vulnerability exists in AndroVideo Advan VD-1. An attacker can exploit this vulnerability to access locations outside of a restricted directory...

WordPress ebook-download plugin path traversal vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports PHP and MySQL server set up a personal blog site. ebook-download is used in one of the open source e-book download function plug-ins . A path traversal vulnerability exists in...

kernel: Missing check in fs/inode.c:inode_init_owner() does not clear SGID bit on non-directories for non-members

A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create files with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group an...

Power-Response Path Traversal Vulnerability

Power-Response is a modular PowerShell framework for event response . A path traversal vulnerability exists in versions of Power-Response prior to 2019-02-02, which can be exploited by an attacker to access locations outside of a restricted directory...

Cuberite Path Traversal Vulnerability

Cuberite is a lightweight, scalable multiplayer game server written in C++. A path traversal vulnerability exists in versions of Cuberite prior to 2019-06-11, which can be exploited by an attacker to access locations outside of a restricted directory...

CVE-2019-15506

Kaseya Virtual System Administrator (VSA) up to 9.4.0.37 contains an information disclosure vulnerability. An unauthenticated attacker can issue properly formatted web requests and download sensitive files and information. The /DATAREPORTS directory (and other directories) can be exploited to har...