PT-2013-2247

Name of the Vulnerable Software and Affected Versions sthttpd versions prior to 2.26.4-r2 thttpd version 2.25b Description The issue allows local users to obtain sensitive information by reading the /var/log/thttpd.log file due to world-readable permissions. Recommendations For sthttpd versions...

Medium: dracut

Issue Overview: It was discovered that dracut created initramfs images as world readable. A local user could possibly use this flaw to obtain sensitive information from these files, such as iSCSI authentication passwords, encrypted root file system crypttab passwords, or other information...

CVE-2013-7042

SUSE Lifecycle Management Server SLMS before 1.3.7 uses world-readable permissions for the secret keys, which allows local users to gain privileges via unspecified vectors...

CVE-2013-7042: Undefined Security Weakness

SUSE Lifecycle Management Server SLMS before 1.3.7 uses world-readable permissions for the secret keys, which allows local users to gain privileges via unspecified vectors...

PT-2013-6250

Name of the Vulnerable Software and Affected Versions SUSE Lifecycle Management Server SLMS versions prior to 1.3.7 Description The issue allows local users to gain privileges due to world-readable permissions for secret keys. Recommendations For versions prior to 1.3.7, update to version 1.3.7 o...

Vibo world CMS background get shell-vulnerability warning-the black bar safety net

Keywords: Powered by CNKSYS Background address: admin Default account password: admin admin Get the shell methods: Just find a place to upload a word picture of the horse, renamed to xx. asp ps:back Diamondback found: this app looks like Is makeover。。。。...

Threat Outbreak Alert: Fake Product Catalog Email Messages on March 26, 2014

Medium Alert ID: 32054 First Published: 2013 December 6 19:01 GMT Last Updated: 2014 March 27 12:56 GMT Version: 5 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product catalogue for the recipient. The text in the email message...

Threat Outbreak Alert: Fake Financial Document Email Messages on December 3, 2013

Medium Alert ID: 31994 First Published: 2013 December 3 14:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain an invoice for the recipient. The text in the email message attempts to convince the...

Updated busybox package fixes security vulnerability

It was found that the mdev BusyBox utility could create certain directories within /dev with world-writable permissions. A local unprivileged user could use this flaw to manipulate portions of the /dev directory tree CVE-2013-1813...

ON: World readable configuration files expose sensitive data

Red Hat JBoss Operations Network 3.1.2 uses world-readable permissions for the 1 server and 2 agent configuration files, which allows local users to obtain authentication credentials and other unspecified sensitive information by reading these files...

CVE-2013-4481

Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions before restricting the permissions, which allows local users to read the file and obtain sensitive information such as "authentication secrets."...

Race condition

Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions before restricting the permissions, which allows local users to read the file and obtain sensitive information such as "authentication secrets."...

RedHat Update for dracut RHSA-2013:1674-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for busybox RHSA-2013:1732-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

luci: short exposure of authentication secrets while generating configuration file

A flaw was found in the way luci generated its configuration file. The file was created as world readable for a short period of time, allowing a local user to gain access to the authentication secrets stored in the configuration file...

DEBIAN-CVE-2013-4476

Samba 4.0.x before 4.0.11 and 4.1.x before 4.1.1, when LDAP or HTTP is provided over SSL, uses world-readable permissions for a private key, which allows local users to obtain sensitive information by reading the key file, as demonstrated by access to the local filesystem on an AD domain controll...

Threat Outbreak Alert: Fake Tax Payment Failure Notification Email Messages on November 11, 2013

Medium Alert ID: 31722 First Published: 2013 November 12 14:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a tax payment failure notification for the recipient. The text in the email message attempts to convince the...

CTF365 Capture The Flag - The Next Generation IT Security Training Platform

For years, the Capture the Flag platform has been a common and very popular part of the hacker convention scene. Teams come from all over the world to show their skill and technique in various competitions. The CTF365 team took that interest, passion and excitement and went to a new level in thei...

CTF365 Capture The Flag - The Next Generation IT Security Training Platform

For years, the Capture the Flag platform has been a common and very popular part of the hacker convention scene. Teams come from all over the world to show their skill and technique in various competitions. The CTF365 team took that interest, passion and excitement and went to a new level in thei...

Questions Arise About Bitcoin Security Paper

In the wake of the publication of a new academic paper that says there is a fundamental flaw in the Bitcoin protocol that could allow a small cartel of participants to become powerful enough that it could take over the mining process and gather a disproportionate amount of the value in the system...