CVE-2026-18759

CVE-2026-18759 affects ASUSTOR Backup Plan (ABP) and ASUSTOR EZ Sync (AES): a file-based IPC protected by AES can be abused by a local authenticated user to recover the IPC key (readable by standard users, DPAPI-protected) and forge IPC requests. Combined with an insufficient substring check for ...

EUVD-2019-7958

Malware in sbrugna...

FortiClient Export logs Privilege Escalation

The vulnerability of the “Export logs” function Settings\Logging\Export logs of the Fortinet FortiClient security device for Linux is related to an incorrect limitation on the path to the restricted access directory. Exploiting this vulnerability could allow a attacker to increase their privilege...

openSUSE Security Update : pacemaker (openSUSE-2020-1825)

This update for pacemaker fixes the following issues : - executor: restrict certain IPC requests to Pacemaker daemons CVE-2020-25654, bsc1177916 - extra: add vim modelines to agents - extra: quote shell variables in agent code where appropriate bsc1175557 - extra: remove trailing whitespace from...

openSUSE Security Update : pacemaker (openSUSE-2020-1782)

This update for pacemaker fixes the following issues : Update to 2.0.4 : - based: use crmexit to free qb-logging - cibsecret: don't use pssh -q option unless supported - crmerror: use gfree for a proper match - crmmon: NULL output-pointer when buffer is freed - crmresource: avoid unnecessary issu...

SUSE-SU-2020:3094-1 Security update for pacemaker

This update for pacemaker fixes the following issues: - attrd: handle shutdown more cleanly bsc1173668 - executor: restrict certain IPC requests to Pacemaker daemons CVE-2020-25654, bsc1177916 - extra: quote shell variables in agent code where appropriate bsc1175557 - fencer: restrict certain IPC...

SUSE-SU-2020:3089-1 Security update for pacemaker

This update for pacemaker fixes the following issues: - attrd: handle shutdown more cleanly bsc1173668 - executor: restrict certain IPC requests to Pacemaker daemons CVE-2020-25654, bsc1177916 - extra: quote shell variables in agent code where appropriate bsc1175557 - fencer: restrict certain IPC...

SUSE-SU-2020:3086-1 Security update for pacemaker

This update for pacemaker fixes the following issues: - attrd: handle shutdown more cleanly bsc1173668 - executor: restrict certain IPC requests to Pacemaker daemons CVE-2020-25654, bsc1177916 - extra: quote shell variables in agent code where appropriate bsc1175557 - fencer: restrict certain IPC...

SUSE-SU-2020:3073-1 Security update for pacemaker

This update for pacemaker fixes the following issues: - executor: restrict certain IPC requests to Pacemaker daemons CVE-2020-25654, bsc1177916 - extra: add vim modelines to agents - extra: quote shell variables in agent code where appropriate bsc1175557 - extra: remove trailing whitespace from...

PT-2019-6274

Name of the Vulnerable Software and Affected Versions FortiClient for Linux versions 6.2.1 and below Description The issue is related to insufficient input validation in the nanomsg library of FortiClient for Linux, which can be exploited by a remote attacker to cause a denial of service by sendi...

PT-2019-6273

Name of the Vulnerable Software and Affected Versions FortiClient for Linux versions 6.2.1 and below FortiClient for Linux versions 6.2.2 and below Description The issue is related to a privilege escalation vulnerability in the implementation of the backup configuration script. It is caused by...

PT-2019-6275

Name of the Vulnerable Software and Affected Versions FortiClient for Linux versions 6.2.1 and below Description The issue is related to the Export logs function in FortiClient for Linux, which is associated with incorrect restriction of the directory path name with limited access. Exploitation o...