cPanel Privilege Permission and Access Control Issues Vulnerability (CNVD-2019-29608)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 68.0.15, which stems from the program writing backup files o...

procps: Local privilege escalation in top

If the HOME environment variable is unset or empty, top will read its configuration file from the current working directory without any security check. If a user runs top with HOME unset in an attacker-controlled directory, the attacker could achieve privilege escalation by exploiting one of...

sssd: fallback_homedir returns '/' for empty home directories in passwd file

A vulnerability was found in sssd where, if a user was configured with no home directory set, sssd would return '/' the root directory instead of '' the empty string / no home directory. This could impact services that restrict the user's filesystem access to within their home directory through...

CVE-2017-18413

In cPanel before 67.9999.103, the backup system overwrites root's home directory when a mount disappears SEC-299...

CVE-2017-18413

In cPanel before 67.9999.103, the backup system overwrites root's home directory when a mount disappears SEC-299...

Design/Logic Flaw

In cPanel before 67.9999.103, the backup system overwrites root's home directory when a mount disappears SEC-299...

CVE-2017-18413

CVE-2017-18413 affects cPanel prior to 67.9999.103. The backup system can overwrite the root user’s home directory when a mounted volume disappears (SEC-299), exposing potential data integrity risk locally. The available connected records confirm the affected component/behavior and cite the speci...

CVE-2017-18413

In cPanel before 67.9999.103, the backup system overwrites root's home directory when a mount disappears SEC-299...

CVE-2017-18383

cPanel before 68.0.15 writes home-directory backups to an incorrect location SEC-309...

CVE-2017-18383

cPanel before 68.0.15 writes home-directory backups to an incorrect location SEC-309...

Design/Logic Flaw

cPanel before 68.0.15 writes home-directory backups to an incorrect location SEC-309...

CVE-2017-18383

cPanel before 68.0.15 writes home-directory backups to an incorrect location SEC-309...

PT-2019-5544 · Ruby +6 · Bundler +6

Name of the Vulnerable Software and Affected Versions: Bundler versions prior to 2.1.0 Description: The issue is related to the use of predictable paths in /tmp/ with insecure permissions as a storage location for gems when locations under the user's home directory are not available. If Bundler i...

americancountryhomestore.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-903992 Security Researcher metamorfosec Helped patch 1969 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

Cat Runner Decorate Home for Android Input Validation Error Vulnerability

Cat Runner Decorate Home for Android is a parkour game based on the Android platform. An input validation error vulnerability exists in the application API of Cat Runner Decorate Home version 2.8.0 for Android, which can be exploited by an attacker to modify the application data and obtain more...

CVE-2019-13097

The application API of Cat Runner Decorate Home version 2.8.0 for Android does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. Attackers can manipulate users' score parameters exchanged between client and server...

CVE-2019-13097

The application API of Cat Runner Decorate Home version 2.8.0 for Android does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. Attackers can manipulate users' score parameters exchanged between client and server...

Code injection

The application API of Cat Runner Decorate Home version 2.8.0 for Android does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. Attackers can manipulate users' score parameters exchanged between client and server...

CVE-2019-13097

The vulnerability CVE-2019-13097 affects Cat Runner Decorate Home for Android (version 2.8.0). The app’s API does not sufficiently verify inputs that are treated as immutable but can be controlled externally, allowing manipulation of users’ score parameters exchanged between client and server. No...

CVE-2019-13097

The application API of Cat Runner Decorate Home version 2.8.0 for Android does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. Attackers can manipulate users' score parameters exchanged between client and server...