CVE-2013-1836

Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not properly manage privileges for WebDAV repositories, which allows remote authenticated users to read, modify, or delete arbitrary site-wide repositories by leveraging certain read access...

CVE-2013-1836

CVE-2013-1836 affects Moodle 2.x up to 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2. Root cause: Moodle does not properly manage privileges for WebDAV repositories, allowing remote authenticated users to read, modify, or delete arbitrary site-wide repositories by leverag...

CVE-2013-1836

Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not properly manage privileges for WebDAV repositories, which allows remote authenticated users to read, modify, or delete arbitrary site-wide repositories by leveraging certain read access...

Stabuniq Trojan rapidly stealing data from US banks

--- Trojan.Stabuniq geographic distribution by unique IP address Security researchers from Symantec have identified a new Trojan that appears to be targeting financial institutions. Dubbed Trojan.Stabuniq, the malware has been collecting information from infected systems potentially for the...

MySQL FILE privilege elevation

Added: 12/21/2012 CVE: CVE-2012-5613 BID: 56771 OSVDB: 88118 Background MySQL is an open-source database software package available for multiple platforms. Problem A database user who has FILE permission can write arbitrary files to the file system, leading to privilege elevation. Resolution Revo...

ManageEngine ServiceDesk Plus 8.0.0 Build 8013 Improper User Privileges

Exploit for php platform in category web applications ================================================================================ Title : ManageEngine ServiceDesk Plus Improper User Privileges Management Vulnerability Product : ServiceDesk Plus http://www.manageengine.com/ Affected Version :...

ManageEngine ServiceDesk Plus 8.0.0 Build 8013 - Improper User Privileges

================================================================================ Secur-I Research Group Security Advisory SRG-2011-002 ================================================================================ Title : ManageEngine ServiceDesk Plus Improper User Privileges Management...

ManageEngine ServiceDesk Plus 8.0 Improper User Privileges

================================================================================ Secur-I Research Group Security Advisory SRG-2011-002 ================================================================================ Title : ManageEngine ServiceDesk Plus Improper User Privileges Management...

Establish a remote connection for the root user-bug warning-the black bar safety net

The following statement has the ROOT user the same permissions. Everyone in the holding station should come across. the root user of mysql, you can only locally connected, the external refuse the connection. The following methods can help you solve this problem, the following statements function...

Adonis TFTP directory traversal

User with privileges to manage TFTP configuration can upload system files...

CVE-2005-4706

Technical details about CVE-2005-4706 are not publicly provided in the connected documents. The available sources summarize an unspecified denial-of-service in Solaris 10. Monitor for updated vendor advisories or patch information.

CVE-2005-4706

Unspecified vulnerability in the "privilege management" feature of Sun Solaris 10 allows local users to cause a denial of service panic via unknown vectors that trigger a null dereference in the secpolicyfscommon function...

CVE-2005-4706

Unspecified vulnerability in the "privilege management" feature of Sun Solaris 10 allows local users to cause a denial of service panic via unknown vectors that trigger a null dereference in the secpolicyfscommon function...

Multiple Sun Solaris vulnerabilities

File system privilege management feature panic. procfs protected file names information leak...

Moderate: Red Hat Security Advisory: : : : Updated tcpdump packages fix various vulnerabilities

Updated tcpdump, libpcap, and arpwatch packages for iSeries and pSeries fix various vulnerabilities. Tcpdump is a command-line tool for monitoring network traffic. The Red Hat tcpdump packages advertise that by default tcpdump will drop permissions to user 'pcap'. Due to a compilation error this...