5454 matches found
CVE-2017-18925
opentmpfiles through 0.3.1 allows local users to take ownership of arbitrary files because d entries are mishandled and allow a symlink attack...
CVE-2017-18925
CVE-2017-18925 affects opentmpfiles up to version 0.3.1. The vulnerability arises from mishandled d entries that enable a symlink attack, allowing a local attacker to replace or gain ownership of arbitrary files. Impact is local privilege escalation with potential integrity impact on targeted fil...
EulerOS Virtualization 3.0.2.2 : vim (EulerOS-SA-2020-2193)
According to the version of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group which may be different from the...
EulerOS Virtualization 3.0.2.2 : systemd (EulerOS-SA-2020-2221)
According to the version of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to...
F5 Networks BIG-IP : Linux kernel vulnerability (K00854051)
The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.3.5 / 14.1.3.1 / 15.0.1.4 / 15.1.1 / 16.0.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K00854051 advisory. The inodeinitowner function in fs/inode.c in the Linux kernel through 4.17.4...
Information Disclosure
vim is vulnerable to information disclosure. The fileio.c sets the group ownership of a .swp file to the editor's primary group, allowing local users to obtain confidential information by leveraging an applicable group membership...
somsip.com Cross Site Scripting vulnerability OBB-1380019
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Huawei EulerOS: Security Advisory for nfs-utils (EulerOS-SA-2020-2027)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for oddjob (EulerOS-SA-2020-2086)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CS Money: Отправка писем с произвольным текстом/кликабельными ссылками любому зарегистрированному пользователю с указанной почтой, зная только steamid
Using a third-party service GetResponse used on the project and the 2FA deactivation functionality combined, a hacker found a way to send arbitrary text to any user, knowing only the victim's SteamID. The vulnerability relied on: 1. Invalid cookie management in request; 1. No additional validatio...
TikTok Global – Trump Demanded Full TikTok Ownership
By Uzair Amir How much do you know about the TikTok ban? Will, the United States take ownership rights? Can a VPN bypass the ban? Find out all about it here! This is a post from HackRead.com Read the original post: TikTok Global – Trump Demanded Full TikTok Ownership...
UPDATE – TikTok Ban: Security Experts Weigh in on the App's Risks
UPDATE Chinese apps TikTok and WeChat over the weekend have gotten an 11th hour reprieve from a plan to cut off access to them. As a ban on U.S. downloads loomed for Sunday, TikTok owner ByteDance reached an agreement to sell significant ownership stakes to Oracle and Walmart. While the deal is...
Shopify: Privilege Escalation in Point Of Sale Application from POS Manage Staff Role to potentially Store Owner
I was playing a bit with the Point Of Sale application and it came to my attention that it is possible to navigate from the Point Of Sale Application up to the Plan & Permission in the admin. I am not sure if this is intentional, but since it leads to potentially take over a shop, I'm reporting i...
OPENSUSE-SU-2020:1427-1 Security update for inn
This update for inn fixes the following issues: - change file owners in /usr/lib/news to root boo1172573 CVE-2020-8026 This update was imported from the openSUSE:Leap:15.2:Update update project...
SUSE SLES15 Security Update : avahi (SUSE-SU-2020:2583-1)
This update for avahi fixes the following issues : When changing ownership of /var/lib/autoipd, only change ownership of files owned by avahi, to mitigate against possible exploits bsc1154063. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...
SUSE-SU-2020:2583-1 Security update for avahi
This update for avahi fixes the following issues: - When changing ownership of /var/lib/autoipd, only change ownership of files owned by avahi, to mitigate against possible exploits bsc1154063...
openSUSE: Security Advisory for inn (openSUSE-SU-2020:1272-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security update for inn (moderate)
openSUSE Security Update: Security update for inn Announcement ID: openSUSE-SU-2020:1304-1 Rating: moderate References: 1172573 Cross-References: CVE-2020-8026 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This update for in...
openSUSE Security Update : inn (openSUSE-2020-1271)
This update for inn fixes the following issues : - change file owners in /usr/lib/news to root boo1172573 CVE-2020-8026 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2020-1271. The text description of...