RubyGems 2.6.13 - Arbitrary File Overwrite

RubyGems 2.6.13 - Arbitrary File Overwrite There is no check for name field in metadata.gz. By assigning a maliciously crafted string like ../../../../../any/where to the field, an attacker can create an arbitrary file out of the directory of the gem, or even replace an existing file with a...

RubyGems < 2.6.13 - Arbitrary File Overwrite

There is no check for name field in metadata.gz. By assigning a maliciously crafted string like ../../../../../any/where to the field, an attacker can create an arbitrary file out of the directory of the gem, or even replace an existing file with a malicious file. Proof of Concept 1: Create a fil...

RubyGems < 2.6.13 - Arbitrary File Overwrite Exploit

Exploit for linux platform in category local exploits There is no check for name field in metadata.gz. By assigning a maliciously crafted string like ../../../../../any/where to the field, an attacker can create an arbitrary file out of the directory of the gem, or even replace an existing file...

CVE-2015-0234

Multiple temporary file creation vulnerabilities in pki-core 10.2.0...

DEBIAN-CVE-2015-0234

Multiple temporary file creation vulnerabilities in pki-core 10.2.0...

UBUNTU-CVE-2015-0234

Multiple temporary file creation vulnerabilities in pki-core 10.2.0...

CVE-2015-0234

Multiple temporary file creation vulnerabilities in pki-core 10.2.0...

CVE-2015-0234: Improper Input Validation

Multiple temporary file creation vulnerabilities in pki-core 10.2.0...

php-fpm Arbitrary File Creation Vulnerability

php-fpm is a PHPFastCGI process manager for PHP. A security vulnerability exists in php-fpm. A local attacker can exploit this vulnerability to perform a symbolic link attack, write to arbitrary files or create arbitrary files...

CVE-2015-0234

Multiple temporary file creation vulnerabilities in pki-core 10.2.0...

CVE-2015-0234

Multiple temporary file creation vulnerabilities in pki-core 10.2.0...

PT-2017-6440

Name of the Vulnerable Software and Affected Versions pki-core version 10.2.0 Description The issue involves multiple temporary file creation vulnerabilities. Recommendations For pki-core version 10.2.0, at the moment, there is no information about a newer version that contains a fix for this...

PT-2017-6646

Name of the Vulnerable Software and Affected Versions php-fpm affected versions not specified Description The issue allows local users to write to or create arbitrary files via a symlink attack. Recommendations At the moment, there is no information about a newer version that contains a fix for...

PT-2017-3637

Name of the Vulnerable Software and Affected Versions: Bomgar Remote Support Portal versions 52790 and earlier Description: The issue exists due to insufficient restriction of the directory path name with limited access in the JavaStart.jar component of the Bomgar Remote Support Portal. This allo...

SMA Solar Technology Sunny Explorer Information Disclosure Vulnerability

SMA Solar Technology Sunny Explorer is a photovoltaic plant management software from SMA Germany. An information disclosure vulnerability exists in SMA Solar Technology Sunny Explorer. An attacker could exploit this vulnerability to obtain information, create and save .txt files...

CVE-2017-9862

An issue was discovered in SMA Solar Technology products. When signed into Sunny Explorer with a wrong password, it is possible to create a debug report, disclosing information regarding the application and allowing the attacker to create and save a .txt file with contents to his liking. An...

CVE-2017-11746

CVE-2017-11746 affects Tenshi 0.15. The issue: tenshi.pid is created after dropping privileges to a non-root account, permitting a local attacker to kill arbitrary processes by modifying tenshi.pid before a root script issues a kill command. Impact: local privilege/escalation and process terminat...

CVE-2017-11746

Tenshi 0.15 creates a tenshi.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for tenshi.pid modification before a root script executes a "kill cat /pathname/tenshi.pid" command...

Multiple Vulnerabilities in JeeCMS v8.1 Template Management Function

JEECMS is a JEECMSv8.1 version is a collection of PC Internet, mobile Internet and WeChat website in one of the website group management system. JeeCMS v8.1 template management function exists file write, arbitrary file naming, arbitrary file creation vulnerability. An attacker can exploit the...

CVE-2017-10600

ubuntu-image 1.0 before 2017-07-07, when invoked as non-root, creates files in the resulting image with the uid of the invoking user. When the resulting image is booted, a local attacker with the same uid as the image creator has unintended access to cloud-init and snapd directories...