Improper Privilege Management in com.xuxueli:xxl-job

XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin function with low Privilege account...

CVE-2022-36157

XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin function with low Privilege account...

CVE-2022-36157

XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin function with low Privilege account...

Code injection

XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin function with low Privilege account...

CVE-2022-36157

CVE-2022-36157 affects XXL-JOB, a Java-based distributed task scheduling platform. All versions as of 11 July 2022 are reported to have an insecure permissions issue that can enable execution of admin functions by a low-privilege account, due to insecure privilege control. The vulnerability’s imp...

EUVD-2022-6506

XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin function with low Privilege account...

CVE-2022-36157

XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin function with low Privilege account...

CVE-2022-35167

Printix Cloud Print Management v1.3.1149.0 for Windows was discovered to contain insecure permissions...

CVE-2022-35167

Printix Cloud Print Management v1.3.1149.0 for Windows was discovered to contain insecure permissions...

CVE-2022-35167

Printix Cloud Print Management v1.3.1149.0 for Windows was discovered to contain insecure permissions...

Design/Logic Flaw

Printix Cloud Print Management v1.3.1149.0 for Windows was discovered to contain insecure permissions...

CVE-2022-35167

Printix Cloud Print Management v1.3.1149.0 for Windows was discovered to contain insecure permissions...

PT-2022-23235 · Xxl-Job · Xxl-Job

Name of the Vulnerable Software and Affected Versions: XXL-JOB versions prior to the version released after 11 July 2022 Description: The issue allows an attacker to execute admin functions with a low-privilege account due to insecure permissions. Recommendations: For all versions as of 11 July...

PT-2022-22615 · Printix · Printix Cloud Print Management

Name of the Vulnerable Software and Affected Versions: Printix Cloud Print Management version 1.3.1149.0 Description: The issue is related to insecure permissions in the software. Recommendations: For Printix Cloud Print Management version 1.3.1149.0, update the permissions configuration to secur...

CVE-2021-30490

upsMonitor in ViewPower aka ViewPowerHTML 1.04-21012 through 1.04-21353 has insecure permissions for the service binary that enable an Authenticated User to modify files, allowing for privilege escalation...

Privilege escalation

upsMonitor in ViewPower aka ViewPowerHTML 1.04-21012 through 1.04-21353 has insecure permissions for the service binary that enable an Authenticated User to modify files, allowing for privilege escalation...

CVE-2021-30490

upsMonitor in ViewPower aka ViewPowerHTML 1.04-21012 through 1.04-21353 has insecure permissions for the service binary that enable an Authenticated User to modify files, allowing for privilege escalation...

PT-2022-10017 · Viewpower · Upsmonitor

Name of the Vulnerable Software and Affected Versions: upsMonitor in ViewPower aka ViewPowerHTML versions 1.04-21012 through 1.04-21353 Description: The issue is related to insecure permissions for the service binary, allowing an authenticated user to modify files and enabling privilege escalatio...

PT-2022-4991 · Planex · Planex Mzk-Dp150N

Name of the Vulnerable Software and Affected Versions: Planex MZK-DP150N versions 1.42 through 1.43 Description: The issue is related to insecure permissions in the administration interface, allowing attackers to execute system commands as root via the etc ro/web/syscmd.asp file. This can be...

Builder XtremeRAT 3.7 MVID-2022-0623 Insecure Permissions

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/7f314e798c150aedd9ce41ed39318f65.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Builder XtremeRAT v3.7 Vulnerability: Insecure Permissions Description: The malware builds...