1542 matches found
CVE-2022-22795
Signiant - Manager+Agents XML External Entity XXE - Extract internal files of the affected machine An attacker can read all the system files, the product is running with root on Linux systems and nt/authority on windows systems, which allows him to access and extract any file on the systems, such...
Path Traversal in rust-embed
When running in debug mode and the debug-embed off by default feature is not enabled, the generated get method does not check that the input path is a child of the folder given. This allows attackers to read arbitrary files in the file system if they have control over the filename given. The...
RiteCMS 3.1.0 Arbitrary File Overwrite
Exploit Title: RiteCMS 3.1.0 - Arbitrary File Overwrite Authenticated Date: 25/07/2021 Exploit Author: faisalfs10x https://github.com/faisalfs10x Vendor Homepage: https://ritecms.com/ Software Link: https://github.com/handylulu/RiteCMS/releases/download/V3.1.0/ritecms.v3.1.0.zip Version: Browse...
CVE-2021-40857
Auerswald COMpact 5500R devices before 8.2B allow Privilege Escalation via the passwd=1 substring...
CVE-2021-40857
Auerswald COMpact 5500R devices before 8.2B allow Privilege Escalation via the passwd=1 substring...
CVE-2021-40857
Auerswald COMpact 5500R devices before 8.2B allow Privilege Escalation via the passwd=1 substring...
CVE-2021-40857: Insufficiently Protected Credentials
Auerswald COMpact 5500R devices before 8.2B allow Privilege Escalation via the passwd=1 substring...
CVE-2021-40858: Improper Limitation of a Pathname to a Restricted Directory
Auerswald COMpact 5500R devices before 8.2B allow Arbitrary File Disclosure. A sub-admin can read the cleartext Admin password via the fileName=../../etc/passwd substring...
PT-2022-1944
Name of the Vulnerable Software and Affected Versions D-Link DAP-1620 affected versions not specified Description The issue is related to Local File Inclusion due to path traversal errors in the software, allowing unauthorized access to internal files. This can lead to the reading of sensitive...
PT-2021-22986
Name of the Vulnerable Software and Affected Versions Auerswald COMpact 5500R versions prior to 8.2B Description The issue allows Privilege Escalation via the passwd=1 substring. Recommendations For versions prior to 8.2B, update to version 8.2B or later to resolve the issue...
The vulnerability of the /etc/passwd component in the D-Link DSR-500N router’s microprogramming system allows a hacker to gain access to the device’s basic embedded Linux operating system.
The vulnerability of the /etc/passwd component in the D-Link DSR-500N router’s microprogramming system is related to the use of pre-installed user accounts. Exploiting this vulnerability could allow a malicious actor to gain access to the device’s basic embedded Linux operating system...
LinuxCatScale - Incident Response Collection And Processing Scripts With Automated Reporting Scripts
Linux CatScale is a bash script that uses live of the land tools to collect extensive data from Linux based hosts. The data aims to help DFIR professionals triage and scope incidents. An Elk Stack instance also is configured to consume the output and assist the analysis process. Usage This script...
CVE-2021-20264
An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers. This flaw allows an attacker with access to the container to modify the /etc/passwd and escalate their privileges. The highest threat from this vulnerability is to confidentiality,...
Design/Logic Flaw
An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers. This flaw allows an attacker with access to the container to modify the /etc/passwd and escalate their privileges. The highest threat from this vulnerability is to confidentiality,...
CVE-2021-20264
An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers. This flaw allows an attacker with access to the container to modify the /etc/passwd and escalate their privileges. The highest threat from this vulnerability is to confidentiality,...
CVE-2021-20264
CVE-2021-20264 is an in-container openjdk vulnerability where a local attacker with container access can modify /etc/passwd and escalate privileges. The issue affects Red Hat Build of OpenJDK in OpenJDK 1.8–11 deployments used by multiple products. As stated, exploitation is local and requires au...
CVE-2021-20264
An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers. This flaw allows an attacker with access to the container to modify the /etc/passwd and escalate their privileges. The highest threat from this vulnerability is to confidentiality,...
PT-2021-13863 · Oracle · Openjdk
Name of the Vulnerable Software and Affected Versions: openjdk versions 1.8 through 11 Description: An insecure modification flaw in the /etc/passwd file allows an attacker with access to the container to modify the /etc/passwd and escalate their privileges. The highest threat from this issue is ...
CVE-2021-20264: Incorrect Privilege Assignment
An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers. This flaw allows an attacker with access to the container to modify the /etc/passwd and escalate their privileges. The highest threat from this vulnerability is to confidentiality,...