CVE-2019-16775

Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It is possible for packages to create symlinks to files outside of thenodemodules folder through the bin field upon installation. A properly constructed entry in the package.json bin field would allow a package...

Trend Micro Deep Security Agent 11 - Arbitrary File Overwrite Exploit

Exploit Title: Trend Micro Deep Security Agent 11 - Arbitrary File Overwrite Exploit Author : Peter Lapp Vendor Homepage : https://www.trendmicro.com/enus/business.html Link Software : https://help.deepsecurity.trendmicro.com/software.html?regs=NABU&prodid=1716 Tested on OS: v11.0.582 and...

OPENSUSE-SU-2019:0208-1 Security update for runc

This update for runc fixes the following issues: Security vulnerablities addressed: - CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid write attacks to the host runc binary, which could lead to a container breakout bsc1121967 - CVE-2018-16873: Fix a remote command executi...

Cisco Ultra Services Framework Information Disclosure Vulnerability

Cisco Ultra Services Framework is the United States Cisco Cisco a smart online services payment platform. An information disclosure vulnerability exists in the symboliclink symlink creation function of the AutoVNF tool in the Cisco Ultra Services Framework, which arises from the program failing t...

DEBIAN-CVE-2015-7560

The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL...

UBUNTU-CVE-2015-7560

The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL...

CVE-2014-4480

CVE-2014-4480 affects Apple iOS < 8.1.3 and Apple TV

openSUSE Security Update : systemd (openSUSE-SU-2013:1528-1)

This systemd update fixes several security and non-security issues. - polkit-Avoid-race-condition-in-scraping-proc.patch: VUL-0: polkit: process subject race condition bnc836932 CVE-2013-4288. - Don't use a trigger to create symlink for sysctl.conf, always run the test on %post bnc840864. - Move...

Mandriva Update for GConf2 MDVA-2008:083 (GConf2)

Check for the Version of GConf2 OpenVAS Vulnerability Test Mandriva Update for GConf2 MDVA-2008:083 GConf2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

CVE-2007-6199

rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to access restricted files via unknown vectors that cause rsync to create a symlink that points outside of the module's hierarchy...

MDKA-2006:014 : dynamic

Dynamic was not calling scripts correctly when hardware was plugged/unplugged. Plugging a digital camera not usb mass storage, like a Canon camera was not creating an icon on Desktop for GNOME or in the Devices window for KDE. Dynamic was also creating a 'pilot' symlink in / in addition to...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix various bugs are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. A bug was found in the Firefox string handling functions. If a malicious website is...

linux/x86 symlink . /bin/sh 32 bytes

No description provided by source. /The shellcode calls the symlink and makes the link to the /bin/sh in the current dir. short version size = 32 bytes OS = BSD written by /rootteam/dev0id www.sysworld.net [email protected] BITS 32 jmp short callme main: pop esi xor eax,eax mov byte esi+7,al...

linux/x86 symlink /bin/sh xoring 56 bytes

Exploit for linux/x86 platform in category shellcode ========================================= linux/x86 symlink /bin/sh xoring 56 bytes ========================================= /The shellcode calls the symlink and makes the link to the /bin/sh in the current dir. short version with anti IDS...

SuSE Linux 9.0 - YaST Configuration Skribt Overwrite Files

include include include define PATH "/tmp/tmp.SuSEconfig.gnome-filesystem." define START 1 define END 33000 int mainint argc, char argv int i; char buf150; printf"\tSuSE 9.0 YaST script SuSEconfig.gnome-filesystem exploit\n"; printf"\t-------------------------------------------------------------...

Слабые разрешения в xkas под Irix (weak permissions)

Директория /var/adm/appletalk/icons открыта на запись, что позволяет создать символьный линк в директории, который будет исопльзован при копировании файла...