Guangdong Radio and Television Network HD Digital Cable TV Receiver H2600 suffers from an over-authorized access vulnerability

HD Digital Cable Receiver H2600 is a terminal equipment for TV broadcasting system developed by Guangdong Broadcasting TV Network Co. The Guangdong Broadcasting Television Network HD Digital Cable Receiver H2600 suffers from an override access vulnerability, which can be exploited by an attacker ...

PT-2017-12367 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.12.1 Description: The issue allows local users to gain privileges by leveraging a race condition between a read operation and a store operation that involve different overrides in the driver override...

Puppet mcollective-sshkey-security plugin public key override vulnerability

puppet is a centralized configuration management system for Linux, Unix, and windows platforms , using its own puppet description language , you can manage configuration files , users , cron tasks , packages , system services and so on. A security vulnerability exists in the puppet...

File upload vulnerability in jspxcms

jspxcms is an open source content management system based on java and jsp technology . A file upload vulnerability exists in jspxcms. An attacker can exploit this vulnerability to upload arbitrary files and perform override operations...

RHEL / CentOS 6.x (64-bit) Malicious Kernel Module Detection (OutlawCountry)

According to diagnostic indicators, the remote Red Hat Enterprise Linux or CentOS host may have a malicious kernel module known as OutlawCountry installed. OutlawCountry creates a hidden netfilter table that allows an authenticated attacker to covertly override existing netfilter/iptables firewal...

Red Spider Multimedia Network Classroom has Memory Corruption, Override Vulnerability

RedSpider Multimedia Network Classroom is a software product that realizes multimedia network teaching in electronic classroom, multimedia network classroom or computer classroom. Starscream Multimedia Network Classroom handles folder paths with override and memory corruption vulnerabilities, an...

74cms has an override access vulnerability

74cms knight cms is a PHP-based open source professional talent system. 74cms has an override access vulnerability. The vulnerability is caused by the failure to limit the userid of the user , an attacker can use the vulnerability to delete the resume...

Unauthorized operation vulnerability in 74cms frontend

74cms knight cms is a PHP-based open source professional talent system. 74cms has an override access vulnerability. Attackers can use the vulnerability to modify database information...

This Week in Security News

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...

CVE-2017-4975

An issue was discovered in Pivotal PCF Tile Generator versions prior to 6.0.0. Tiles created by the PCF Tile Generator create a running open security group that overrides security groups set by the operator...

Parallel override modification loophole in Beijing Magitek's submission system

The submission system is a review system developed by Beijing Magtech Technology Development Co. A parallel override modification vulnerability exists in the Beijing Magtech Submission System. It allows an attacker to traverse sensitive user information...

Xunfei Jingcheng Smart Campus Website Management System Has Overstepping Vulnerabilities

Smart Campus website management system is a classroom management system based on constructivist learning theory, "Internet +" way of thinking and big data, cloud computing and other information technology. CyberLink Smart Campus website management system is vulnerable to an override vulnerability...

File Override

github.com/docker/docker is vulnerable to file override attacks. It allows local users to set Linux Security Modules LSM and dockert policies. It can be triggered through images that allow volumes to override files in /proc...

CVE-2017-7988

In Joomla! 1.6.0 through 3.6.5 fixed in 3.7.0, inadequate filtering of form contents allows overwriting the author of an article...

Brilliant Internet FTPserver has an overstepping vulnerability

Brilliant Internet FTPserver is a ftp server software developed by Brilliant Internet Technology Co. Brilliant Internet FTPserver has an override vulnerability that can be exploited by attackers to delete other files on the server...

Qibo CMS whole site system V7.0 exists overstepping access vulnerability

Zibo CMS system is an open source content management system. Qibo CMS whole site system V7.0 suffers from an override access vulnerability. By modifying the UID parameter value, the attacker can traverse the sensitive information of other users, constituting information leakage...

UBUNTU-CVE-2017-7272

PHP through 7.1.11 enables potential SSRF in applications that accept an fsockopen or pfsockopen hostname argument with an expectation that the port number is constrained. Because a :port syntax is recognized, fsockopen will use the port number that is specified in the hostname argument, instead ...

My NJ Client APP has parallel override access vulnerability

My Nanjing Client APP is a city-level public service mobile application that integrates all kinds of living information in Nanjing. My Nanjing Client APP has a parallel override access vulnerability. Allowing an attacker to access all the real-name registered user and enterprise information and...

CVE-2017-6903

In ioquake3 before 2017-03-14, the auto-downloading feature has insufficient content restrictions. This also affects Quake III Arena, OpenArena, OpenJK, iortcw, and other id Tech 3 aka Quake 3 engine forks. A malicious auto-downloaded file can trigger loading of crafted auto-downloaded files as...

Prototype Override Protection Bypass

qs is vulnerable to prototype override protection bypass. It is possible for an attacker to bypass the protection and overwrite prototype properties and functions by prefixing the name of the parameter with or . Overwriting these properties on the object prototype can impact application logic,...