CVE-2022-28851

creationtimestamp| type| source ---|---|--- 2022-09-30 20:36:17+00:00| seen| https://t.me/cibsecurity/50778...

Bytebase allows low-privilege users to view admin projects

Overview The "Bytebase" application does not restrict low privilege user from accessing admin projects Details The "Bytebase" application does not restrict low privilege user from accessing admin projects for which an unauthorized user can view the "projects" created by "Admin". The affected...

IBM Rational Asset Manager 安全漏洞

IBM Rational Asset Manager is a collaborative software development tool from IBM, USA. Organizations can use it to identify, manage and govern the design, development and use of software assets and services. A privilege control issue vulnerability exists in IBM Rational Asset Manager version 7.5...

ieGeek IG20 安全特征问题漏洞

The ieGeek IG20 is a webcam from ieGeek. A security vulnerability exists in the ieGeek IG20 hipcam RealServer version V1.0, which stems from a predictability flaw in the algorithm that generates the device id uid as a result of its faulty access control, allowing a remote attacker to directly...

CVE-2022-35089

creationtimestamp| type| source ---|---|--- 2022-09-21 07:40:22+00:00| seen| https://t.me/cibsecurity/50169...

CVE-2022-39008

creationtimestamp| type| source ---|---|--- 2022-09-16 22:35:15+00:00| seen| https://t.me/cibsecurity/49971...

CVE-2022-38864

creationtimestamp| type| source ---|---|--- 2022-09-15 18:27:32+00:00| seen| https://t.me/cibsecurity/49814...

CVE-2022-37138

creationtimestamp| type| source ---|---|--- 2022-09-14 14:26:21+00:00| seen| https://t.me/cibsecurity/49757...

CVE-2022-20396

creationtimestamp| type| source ---|---|--- 2022-09-14 00:25:46+00:00| seen| https://t.me/cibsecurity/49724...

CVE-2022-31322

Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to escalate privileges via overwriting files using SUID flagged executables...

CVE-2021-3864

A flaw was found in the way the dumpable flag setting was handled when certain SUID binaries executed its descendants. The prerequisite is a SUID binary that sets real UID equal to effective UID, and real GID equal to effective GID. The descendant will then have a dumpable value set to 1. As a...

UBUNTU-CVE-2021-3864

A flaw was found in the way the dumpable flag setting was handled when certain SUID binaries executed its descendants. The prerequisite is a SUID binary that sets real UID equal to effective UID, and real GID equal to effective GID. The descendant will then have a dumpable value set to 1. As a...

PT-2022-10744

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw was found in the way the dumpable flag setting was handled when certain SUID binaries executed its descendants. The prerequisite is a SUID binary that sets real UID equal to...

DEBIAN-CVE-2021-3999

A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd in a setuid program could use this flaw to potentially execute...

ALPINE-CVE-2021-3995

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local attacker to unmount FUSE filesystems that belong to certain other users who have a UID that is a prefix of the UID of...

CVE-2022-36024

creationtimestamp| type| source ---|---|--- 2022-08-18 18:24:48+00:00| seen| https://t.me/cibsecurity/48358...

CVE-2022-20246

In WindowManager, there is a possible bypass of the restrictions for starting activities from the background due to an incorrect UID/permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2022-20246

In WindowManager, there is a possible bypass of the restrictions for starting activities from the background due to an incorrect UID/permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2022-28879

creationtimestamp| type| source ---|---|--- 2022-07-22 20:23:38+00:00| seen| https://t.me/cibsecurity/46831...

Showmax: delete the subaccount from the user id

Entry in order to delete this sub-profile, you must first create an account. then you need to find the user id and master id of the account that you will delete, you can do a brute force attempt to find it, if it holds, you can delete the child profile of this person or view a lot of information...