CVE-2019-11230

In Avast Antivirus before 19.4, a local administrator can trick the product into renaming arbitrary files by replacing the Logs\Update.log file with a symlink. The next time the product attempts to write to the log file, the target of the symlink is renamed. This defect can be exploited to rename...

Code injection

In Avast Antivirus before 19.4, a local administrator can trick the product into renaming arbitrary files by replacing the Logs\Update.log file with a symlink. The next time the product attempts to write to the log file, the target of the symlink is renamed. This defect can be exploited to rename...

CVE-2019-11230

CVE-2019-11230 affects Avast Antivirus prior to 19.4. A local administrator can exploit a symlink in Logs\Update.log to cause the product to rename arbitrary files. The next write to the log file renames the symlink target and can be used to rename a critical binary (e.g., AvastSvc.exe), leading ...

CVE-2019-11230

In Avast Antivirus before 19.4, a local administrator can trick the product into renaming arbitrary files by replacing the Logs\Update.log file with a symlink. The next time the product attempts to write to the log file, the target of the symlink is renamed. This defect can be exploited to rename...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4594)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4594 advisory. - ext4: always verify the magic number in xattr blocks Theodore Ts'o Orabug: 29437127 CVE-2018-10879 CVE-2018-10879 - ext4: add corruption check in...

CVE-2019-9637

An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to...

CVE-2018-19043

The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file renaming specifying a "from" and "to" filename via a ../ directory traversal in the dir parameter of an mrelocatorrename action to the wp-admin/admin-ajax.php URI...

Directory traversal

The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file renaming specifying a "from" and "to" filename via a ../ directory traversal in the dir parameter of an mrelocatorrename action to the wp-admin/admin-ajax.php URI...

CVE-2018-19043

The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file renaming specifying a "from" and "to" filename via a ../ directory traversal in the dir parameter of an mrelocatorrename action to the wp-admin/admin-ajax.php URI...

Debian DLA-1646-1 : qemu security update

Several vulnerabilities were found in QEMU, a fast processor emulator : CVE-2018-17958 The rtl8139 emulator is affected by an integer overflow and subsequent buffer overflow. This vulnerability might be triggered by remote attackers with crafted packets to perform denial of service via OOB stack...

Linux: Sticky bit on all world-writable directories

Setting the sticky bit on world writable directories prevents users from deleting or renaming files in that directory that are not owned by them. This feature prevents the ability to delete or rename files in world writable directories such as /tmp that are owned by another user...

CVE-2018-19489

v9fswstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service crash because of a race condition during file renaming...

CVE-2018-19489

v9fswstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service crash because of a race condition during file renaming...

DEBIAN-CVE-2018-19489

v9fswstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service crash because of a race condition during file renaming...

Race condition

v9fswstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service crash because of a race condition during file renaming...

CVE-2018-19489

CVE-2018-19489: In QEMU, v9fs_wstat in 9pfs/9p.c allows a race during file renaming that can crash the guest OS (DoS). This is evidenced by the CVE description in the initial document and related advisories; no explicit remediation or fixed version is provided in the connected text.

CVE-2018-19489

v9fswstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service crash because of a race condition during file renaming...

CVE-2018-19489

v9fswstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service crash because of a race condition during file renaming...

CVE-2018-19489

v9fswstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service crash because of a race condition during file renaming...

Media File Manager <= 1.4.2 - Authenticated Multiple Vulnerabilities

Following the PoC you can combine the vulnerabilities to obtain PHP code execution and read sensitive file. By default the File Manager can only be used by Administrator users, however, any user role can be configured to use it. Diretory Trasversal: POST /wordpress/wp-admin/admin-ajax.php HTTP/1....