Apache Tomcat 876 (RedHat Based Distros) - Local Privilege Escalation

Apache Tomcat 876 RedHat Based Distros - Local Privilege Escalation ============================================= - Discovered by: Dawid Golunski - http://legalhackers.com - dawid at legalhackers.com - CVE-2016-5425 - Release date: 10.10.2016 - Revision: 1 - Severity: High...

Nagios Network Analyzer < 2.2.2 Multiple Vulnerabilities

Binary data 9602.prm...

ZKTeco ZKTime.Net Insecure File Elevation of Privilege Vulnerability

ZKTime.Net V3.0 is a new generation of attendance management software. ZKTeco ZKTime.Net 3.0.1.6 suffers from an insecure file elevation of privilege vulnerability. The vulnerability exists due to incorrect permissions, flagged changed with 'C' for the group 'Everyone', making the entire director...

IBM WebSphere Portal Security Bypass Vulnerability

IBM WebSphere Portal is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Dolby Audio X2 (DAX2) privilege escalation

A vulnerability has been identified with the file permissions for the Dolby DAX2 application programming interface API that could allow a local user to run files with system level privileges. Mitigation Strategy for Customers what you should do to protect yourself: Lenovo is currently working wit...

Dolby Audio X2 (DAX2) privilege escalation - Lenovo Support US

No description provided...

SUSE-SU-2016:1896-1 Security update for salt

salt was updated to fix one security issue. This security issue was fixed: - CVE-2015-8034: Prevent saving state.sls cache data to disk with insecure permissions bsc957914...

KDE Frameworks Elevation of Privilege Vulnerability

KDE Frameworks is a collection of technical libraries and software frameworks for KDE applications developed by the KDE community. kinit is one of the command line tools used to fetch and cache Kerberos tickets. A privilege-granting and access-control vulnerability exists in kinit in KDE Framewor...

Hide.Me VPN Client 1.2.4 Privilege Escalation

Title: Hide.Me VPN Client - EoP: User to SYSTEM CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: eVenture Product: Hide.Me VPN Client Version: 1.2.4 Download link: https://hide.me/en/software/windows Tested on: Windows 7 x86, fully patched Release mode: no bugbounty...

Alertus Desktop Notification for OS X sets insecure permissions for configuration and other files

Overview Alertus Desktop Notification for OS X, version 2.9.30.1700 and earlier, sets insecure permissions for configuration and other files, which may enable an unprivileged attacker to disable notifications and modify content locally. Description CWE-276: Incorrect Default Permissions -...

Cisco APIC < 1.3(2f) Binary File Installation Handling Local Privilege Escalation

According to its self-reported version number, the Cisco Application Policy Infrastructure Controller APIC software running on the remote host is prior to 1.32f. It is, therefore, affected by a local privilege escalation vulnerability due to insecure permissions set for binary files during the...

Baby Hazel Christmas Dream - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Baby Hazel Christmas Dream published at the 'play' market has multiple vulnerabilities...

Pony Gives Birth Baby Games - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Pony Gives Birth Baby Games published at the 'play' market has multiple vulnerabilities...

IBM WebSphere MQ Information Disclosure Vulnerability (CNVD-2016-01069)

IBM WebSphere MQ is a messaging middleware product from IBM, USA. The product focuses on providing a reliable and proven messaging backbone for Service Oriented Architecture SOA. A security vulnerability exists in the MQXR service in WMQ Telemetry for IBM WebSphere MQ, which stems from a program...

IBM WebSphere Application Server Liberty Information Disclosure Vulnerability (Jan 2016)

IBM WebSphere Application Server Liberty is prone to unspecified remote information disclosure vulnerability SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2015-8100

The net-snmp package in OpenBSD through 5.8 uses 0644 permissions for snmpd.conf, which allows local users to obtain sensitive community information by reading this file...

EPSON Network Utility installs EpsonBidirectionalService with insecure permissions

Overview EPSON Network Utility contains a local privilege escalation vulnerability, which allows a local attacker to execute arbitrary code with SYSTEM privileges. Description CWE-276: Incorrect Default Permissions - CVE-2015-6034EPSON Network Utility v4.10 is an application that checks the print...

MobSF (Mobile Security Framework) - Mobile (Android/iOS) Automated Pen-Testing Framework

Mobile Security Framework MobSF is an intelligent, all-in-one open source mobile application Android/iOS automated pen-testing framework capable of performing static and dynamic analysis. We've been depending on multiple tools to carry out reversing, decoding, debugging, code review, and pen-test...

Oracle: Security Advisory (ELSA-2013-0669)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ceph-deploy insecure file permissions vulnerability

ceph-deploy is a set of tools for deploying clustered storage systems. An insecure file permission vulnerability exists in ceph-deploy, which allows a local attacker to read sensitive files to obtain sensitive information...