CVE-2018-6851

Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x80206040. By crafting an input buffer we can control the execution path to the point where the constant DWORD 0 will be written t...

Path traversal

While processing the system path, an out of bounds access can occur in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

Design/Logic Flaw

setup before version 2.11.4-1.fc28 in Fedora and Red Hat Enterprise Linux added /sbin/nologin and /usr/sbin/nologin to /etc/shells. This violates security assumptions made by pamshells and some daemons which allow access based on a user's shell being listed in /etc/shells. Under some circumstance...

Hanno's projects: SQL injection in Serendipity (serendipity_fetchComments)

Summary An authenticated administrator can alter Entries to display on frontpage and Entries to display in Feeds in a way to perform a SQL injection and extract database records or access files on the underlying system. Description The function serendipityfetchComments implemented in...

Serveryztyzt Directory Traversal Vulnerability

serveryztyzt is a http server. A directory traversal vulnerability exists in serveryztyzt. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

Serverwg Directory Traversal Vulnerability

serverwg is an http server. A directory traversal vulnerability exists in serverwg. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

Serveryaozeyan Directory Traversal Vulnerability

serveryaozeyan is an http server. A directory traversal vulnerability exists in serveryaozeyan. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in the URL to gain access to the file system. The file system...

Serverhuwenhui Directory Traversal Vulnerability

serverhuwenhui is an http server. A directory traversal vulnerability exists in serverhuwenhui. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

Sencisho Directory Traversal Vulnerability

Sencisho is an http server for local development. A directory traversal vulnerability exists in Sencisho. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

Tinyserver2 Directory Traversal Vulnerability

tinyserver2 is a static content server. A directory traversal vulnerability exists in tinyserver2. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

tiny-http directory traversal vulnerability

tiny-http is an http server. A directory traversal vulnerability exists in tiny-http. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

Serverlyr Directory Traversal Vulnerability

serverlyr is an http server. A directory traversal vulnerability exists in serverlyr. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

serverliujiayi1 Directory Traversal Vulnerability

serverliujiayi1 is an http server. A directory traversal vulnerability exists in serverliujiayi1. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

cyberjs directory traversal vulnerability

cyberjs is a JavaScript library for cyber. A directory traversal vulnerability exists in cyberjs. An attacker can gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

Serverwzl Directory Traversal Vulnerability

serverwzl is an http server. A directory traversal vulnerability exists in serverwzl. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

Pooledwebsocket Directory Traversal Vulnerability

pooledwebsocket is a software package. A directory traversal vulnerability exists in pooledwebsocket. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

tmock Directory Traversal Vulnerability

tmock is a static file server. A directory traversal vulnerability exists in tmock. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

CVE-2018-12365

A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system without user consent or interaction. This could result in exposure of private local files. This vulnerability affects Thunderbird 60, Thunderbird 52.9, Firefox ESR 60.1, Firefox...

HomeMatic Incorrect Access Control Vulnerability

Homeputer CL Studio für HomeMatic is a home automation system from Contronics. An incorrect access control vulnerability exists in HomeMatic that allows an attacker to gain full access to the system...

ansible-tower: Privilege escalation flaw allows for organization admins to obtain system privileges

Ansible Tower, before version 3.2.4, has a flaw in the management of system and organization administrators that allows for privilege escalation. System administrators that are members of organizations can have their passwords reset by organization administrators, allowing organization...