Privilege escalation

Sera 1.2 stores the user's login password in plain text in their home directory. This makes privilege escalation trivial and also exposes the user and system keychains to local attacks...

CVE-2017-15918

Sera 1.2 stores the user's login password in plain text in their home directory. This makes privilege escalation trivial and also exposes the user and system keychains to local attacks...

snapfish.co.uk XSS vulnerability

Vulnerable URL: https://www.snapfish.co.uk/2/home?cid=tbm...

A week in security (October 23 – October 29)

Welcome back to "A week in security." Last week, we took a look at how deleted files can be recovered, explored the BadRabbit ransomware plague attacking Eastern Europe including a deep dive into the code, and talked about what it takes to work in security. One of our researchers, who is a PhD...

Redmine cross-site scripting vulnerability (CNVD-2017-31961)

Redmine is a set of open source Web-based project management and defect tracking tools . The tool provides project management , issue tracking and role-based access control and other features . A cross-site scripting vulnerability exists in the Textile and Markdown text formatting and project hom...

maioranofuneralhome.com XSS vulnerability

Open Bug Bounty ID: OBB-363839 Description| Value ---|--- Affected Website:| maioranofuneralhome.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

hasemannfuneralhome.com XSS vulnerability

Open Bug Bounty ID: OBB-363709 Description| Value ---|--- Affected Website:| hasemannfuneralhome.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

DEBIAN-CVE-2017-15670

The GNU C Library aka glibc or libc6 before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the operator followed by a long string...

CVE-2017-15670

The GNU C Library aka glibc or libc6 before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the operator followed by a long string...

Heap overflow

The GNU C Library aka glibc or libc6 before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the operator followed by a long string...

CVE-2017-15670

The GNU C Library aka glibc or libc6 before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the operator followed by a long string...

CVE-2017-15670

The GNU C Library aka glibc or libc6 before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the operator followed by a long string...

CVE-2017-2133

SQL injection vulnerability in Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB10004.47 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2017-2132

Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB10004.47 allow an attacker to delete arbitrary files in a specific directory via unspecified vectors...

CVE-2017-2133

SQL injection vulnerability in Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB10004.47 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

UBUNTU-CVE-2017-15670

The GNU C Library aka glibc or libc6 before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the operator followed by a long string...

CVE-2017-15670

The GNU C Library aka glibc or libc6 before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the operator followed by a long string...

Panasonic Home Unit KX-HJB1000 Access Bypass Vulnerability

The Panasonic KX-HJB1000 Home unit devices is a webcam from Panasonic Japan. An access bypass vulnerability exists in the Panasonic Home Unit KX-HJB1000. An attacker can use this vulnerability to bypass access restrictions and view configuration menus...

Panasonic Home Unit KX-HJB1000 SQL Injection Vulnerability

The Panasonic KX-HJB1000 Home unit devices is a webcam from Panasonic Japan. A SQL injection vulnerability exists in Home unit KX-HJB1000. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...

Panasonic Home Unit KX-HJB1000 Arbitrary File Deletion Vulnerability

The Panasonic KX-HJB1000 Home unit devices is a webcam from Panasonic Japan. An arbitrary file deletion vulnerability exists in the Panasonic Home Unit KX-HJB1000. An attacker can use this vulnerability to delete arbitrary files in a directory...