CVE-2016-4455

The Subscription Manager package aka subscription-manager before 1.17.7-1 for Candlepin uses weak permissions 755 for subscription-manager cache directories, which allows local users to obtain sensitive information by reading files in the directories...

CVE-2016-4455

The Subscription Manager package aka subscription-manager before 1.17.7-1 for Candlepin uses weak permissions 755 for subscription-manager cache directories, which allows local users to obtain sensitive information by reading files in the directories...

Ubiquiti Inc.: 200 http code in 403 forbidden directories on main Ubnt.com domain

Hello, My investigations revealed that we have accesible directory in forbidden directory: http://www.ubnt.com/static/ - forbidden http://www.ubnt.com/static/cm/ - forbidden Here we have http://www.ubnt.com/static/cm/mode/ accesible and then /xm/l and /django/ foders POC:...

AUFS (Ubuntu 15.10) Privilege Escalation

Source: http://www.halfdog.net/Security/2016/AufsPrivilegeEscalationInUserNamespaces/ Introduction Problem description: Aufs is a union filesystem to mix content of different underlying filesystems, e.g. read-only medium with r/w RAM-fs. That is also allowed in user namespaces when module was...

USN-3242-2 samba regression

USN-3242-1 fixed a vulnerability in Samba. The upstream fix introduced a regression when Samba is configured to disable following symbolic links. This update fixes the problem. Original advisory details: Jann Horn discovered that Samba incorrectly handled symlinks. An authenticated remote attacke...

Samba: symlink race permits opening files outside share directory (CVE-2017-2619)

The Samba server is supposed to only grant access to the configured share directories unless the "wide links" are enabled, in which case the server is allowed to follow symlinks. The default since CVE-2010-0926 is that wide links are disabled. smbd ensures that it isn't following symlinks by...

Samba symbolic link vulnerability

Samba is a set of free software developed by the Samba team that enables UNIX series operating systems to connect to the SMB/CIFS network protocol of Microsoft Windows operating systems. The program supports sharing printers, transferring data files to each other, and so on. A symbolic link...

CVE-2017-6507

An issue was discovered in AppArmor before 2.12. Incorrect handling of unknown AppArmor profiles in AppArmor init scripts, upstart jobs, and/or systemd unit files allows an attacker to possibly have increased attack surfaces of processes that were intended to be confined by AppArmor. This is due ...

UBUNTU-CVE-2017-6507

An issue was discovered in AppArmor before 2.12. Incorrect handling of unknown AppArmor profiles in AppArmor init scripts, upstart jobs, and/or systemd unit files allows an attacker to possibly have increased attack surfaces of processes that were intended to be confined by AppArmor. This is due ...

USN-3242-1 samba vulnerability

Jann Horn discovered that Samba incorrectly handled symlinks. An authenticated remote attacker could use this issue to access files on the server outside of the exported directories...

FTP Voyager Scheduler Cross-Site Request Forgery Vulnerability

FTP Voyager Scheduler is a program that starts or stops the scheduler when a user creates a directory or uploads or downloads a file by creating a task or command. A cross-site request forgery vulnerability exists in FTP Voyager Scheduler that stems from a failure to properly validate HTTP...

UBUNTU-CVE-2017-6590

An issue was discovered in network-manager-applet aka network-manager-gnome in Ubuntu 12.04 LTS, 14.04 LTS, 16.04 LTS, and 16.10. A local attacker could use this issue at the default Ubuntu login screen to access local files and execute arbitrary commands as the lightdm user. The exploitation...

Directory traversal

Directory traversal vulnerability in the Image Gallery plugin before 1.4 in Jenkins allows remote attackers to list arbitrary directories and read arbitrary files via unspecified form fields...

CVE-2016-4987

Directory traversal vulnerability in the Image Gallery plugin before 1.4 in Jenkins allows remote attackers to list arbitrary directories and read arbitrary files via unspecified form fields...

CVE-2016-9414

CVE-2016-9414 affects MyBB (MyBulletinBoard) prior to 1.8.7 and MyBB Merge System prior to 1.8.7, enabling information disclosure via missing directory listing protection in upload directories. The vulnerability is an information disclosure issue; the provided documents do not specify exploit cod...

Open-Xchange: Information About Your System(Sensitive Directories)

This vulnerability can read your plugins like you are using jQuery Superfish,jsquary easy etc... and emails... Sensitive Directories...for social engineering emails, directories, plugins is so important you should hide this. I share with files you can look file is saying everything...

About the security content of watchOS 3.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Multiple vulnerabilities in ZoneMinder

ZoneMinder is an open source video surveillance system. An information disclosure and authentication bypass vulnerability exists in the Apache HTTP server configuration in ZoneMinder version 1.30.0. An unauthenticated remote attacker can exploit the vulnerability to browse all web root directorie...

U.S. Dept Of Defense: Open FTP on ███

Summary: FTP panel Allows anyone to connect to the FTP server,viewing and downloading any files hosted there. This isn't recommend especially if any sensitive information is stored Impact High severity vulnerability allowing total information disclosure of internal directories, and being allowed...

GPO import fails and rollback results in the target policy being deleted on a Windows Server 2012 R2-based DC

GPO import fails and rollback results in the target policy being deleted on a Windows Server 2012 R2-based DC This article describes an issue in which the Group Policy Object GPO import fails and the target policy is deleted during the rollback process on a Windows Server 2012 R2-based domain...