Fedora 27 : fedpkg / rpkg (2017-9cac2b8b4a)

Update - Fixed chain-build - Remove hard dependency of bash-completion from fedpkg rpkg - Ignore TestModulesCli if openidc-client is unavailable cqi - Port mbs-build to rpkg mprahl - Add .vscode to .gitignore mprahl - Fix TestPatch.testrediff in order to run with old version of mock cqi - Allow t...

Two Sides App has an override access vulnerability

Two Sides APP is an emotional, psychological and fun social software launched by Beijing Two Sides Network Technology Co. Two Sides APP 3.0.28 Android version has an override access vulnerability, after logging in to the system, an attacker can log in to other users' systems and perform...

Variable Override Vulnerability in MetInfo Version 5.3.19 at Password Retrieval

MetInfo is a Content Management System CMS developed using PHP and Mysql. A variable override vulnerability exists in MetInfo version 5.3.19 at the password retrieval. An attacker can exploit the vulnerability to obtain a password reset link, bypass authentication to change the administrator...

CVE-2017-16949

An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress. Improper input sanitization allows the attacker to override the settings for allowed file extensions and upload file size, related to inc/cores/file-uploader.php and...

Shenzhen JetVision Technology Co., Ltd. video conferencing system has an overstepping access vulnerability

Shenzhen JetVision Technology Co., Ltd. video conferencing system is a new set of video conferencing communication system for customers in different industries to meet their video communication needs. There is an override access vulnerability in the video conferencing system of Shenzhen JetVision...

Shenzhen HeWeiShun Network Technology Co., Ltd. IP-COM Enterprise Router Exists with Override Access Vulnerability

IP-COM Enterprise Router is a high-performance router and in-depth Internet behavior management device of Shenzhen HeWeiShun Network Technology Co. The IP-COM Enterprise Router of Shenzhen HeWeShun Network Technology Co., Ltd. suffers from an overstepping access vulnerability. Attackers can use...

FreeBSD : borgbackup -- remote users can override repository restrictions (0d369972-d4ba-11e7-bfca-005056925db4)

BorgBackup reports : Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers. A user able to access a remote Borg SSH server is able to circumvent access controls post-authentication. Affected releases: 1.1.0, 1.1.1, 1.1.2. Releases 1.0....

phpaaCMS suffers from an override access vulnerability

phpaaCMS is a simple article management system. An override access vulnerability exists in the /admin/global.php file in phpaaCMS, which can be exploited by an attacker to override backend operations...

Pelco Sarix Pro Network Camera set_param Program Has an Override Access Vulnerability

pelco Sarix Professional is a video camera. An override access vulnerability exists in the pelco Sarix Pro network camera setparam program. The vulnerability allows attackers to remotely enable ssh services without authentication to take full control of the camera...

Rimet Wifi Smart Temperature Control Android APP has an override access vulnerability

Rimet Wifi Smart Temperature Control Android APP is a management platform for smart hardware devices. Rimet Wifi Intelligent Temperature Control Android APP has an override access vulnerability. After logging into the client, the attacker can obtain sensitive information such as patient's name,...

kernel: Race condition in driver_override implementation

It was found that the driveroverride implementation in base/platform.c in the Linux kernel is susceptible to race condition when different threads are reading vs storing a different driver override...

Circle with Disney check_torlist.sh Update Code Execution Vulnerability

Summary An exploitable vulnerability exists in the torlist update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the product to run an attacker-supplied shell script. An attacker can intercept and alter network traffic to trigger this...

Worry-Free Shopping System ASP General Edition has multiple vulnerabilities

Hassle-free shopping system ASP General Edition is a shopping site based on ASP/Access development of general management system set up. Worry-Free Shopping System ASP General Edition is vulnerable to default database download, arbitrary user login, multiple stored cross-site scripts, payment desi...

Damon Database Server Override Access Vulnerability

Damon Database Management System is a database management system introduced by Damon, abbreviated as DM. Damon database server has an override access vulnerability that can be exploited by an attacker to illegally obtain the DBA role and then control the entire database...

Regular Expression Denial of Service

Overview Affected versions of method-override are vulnerable to a regular expression denial of service vulnerability when untrusted user input is passed into the X-HTTP-Method-Override header. Recommendation Update to version 2.3.10 or later References GitHub Advisory...

Microbus App for Android suffers from an override access vulnerability

Microbus is a mobile application that integrates the functions of bus inquiry, mobile payment for tickets, bus parking site navigation, and real-time bus operation information view. The Android version of the Microbus app has an overstepping access vulnerability that allows an attacker to log in ...

File Upload Vulnerability in BEESCMS

BEESCMS is an enterprise website management system based on PHP+Mysql architecture. BEESCMS V4.0R20160525 version /includes/init.php file variable override script there is a file upload vulnerability, the attacker uses the vulnerability to upload arbitrary files, so as to obtain the front-end...

Multiple Vulnerabilities in the Top Discount App

Top Discount App is a mobile shopping application. Top Discount App is vulnerable to override, arbitrary user login and denial of service vulnerabilities, which allow attackers to log in to other users' systems and perform unauthorized operations by grabbing packets and modifying cell phone...

TouTou Shared Bike Android APP has an override access vulnerability

TouTou Shared Bike Android APP is a shared bike travel software for cities. TouTou Shared Bicycle Android APP has an override access vulnerability. After registering and logging into the system, the attacker can modify the user ID by grabbing packets to view any account information, including:...

CVE-2017-12170

Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was ignored after update and service started running with default configuration. This has security implications because of overriding security-related...