EUVD-2011-1573

Malware in sbrugna...

CVE-2024-50701

TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin...

TeamPass security vulnerabilities

TeamPass is an open source password manager from the individual developer Nils Laumaillé. A security vulnerability exists in versions prior to TeamPass 3.1.3.1, which stems from the inability to properly check whether a folder is located in an administrator-defined list of user-allowed folders wh...

Design/Logic Flaw

The Crimson 3.2 Windows-based configuration tool allows users with administrative access to define new passwords for users and to download the resulting security configuration to a device. If such a password contains the percent % character, invalid values will be included, potentially truncating...

CVE-2011-1572

Directory traversal vulnerability in the Admin Defined Commands ADC feature in gitolite before 1.5.9.1 allows remote attackers to execute arbitrary commands via .. dot dot sequences in admin-defined commands...

Directory traversal

Directory traversal vulnerability in the Admin Defined Commands ADC feature in gitolite before 1.5.9.1 allows remote attackers to execute arbitrary commands via .. dot dot sequences in admin-defined commands...

CVE-2011-1572

Directory traversal vulnerability in the Admin Defined Commands ADC feature in gitolite before 1.5.9.1 allows remote attackers to execute arbitrary commands via .. dot dot sequences in admin-defined commands...

CVE-2011-1572

CVE-2011-1572 affects gitolite’s Admin Defined Commands (ADC) feature up to version 1.5.9.1. The vulnerability is a directory traversal that enables remote attackers to execute arbitrary commands by crafting .. sequences in admin-defined commands. This is the described risk; multiple OpenVAS/Debi...

PT-2011-3229

Name of the Vulnerable Software and Affected Versions gitolite versions prior to 1.5.9.1 Description The issue allows remote attackers to execute arbitrary commands via .. dot dot sequences in admin-defined commands, due to a directory traversal vulnerability in the Admin Defined Commands ADC...

CVE-2011-1572: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Admin Defined Commands ADC feature in gitolite before 1.5.9.1 allows remote attackers to execute arbitrary commands via .. dot dot sequences in admin-defined commands...

Fedora 15 : gitolite-1.5.8-3.fc15 (2011-1616)

Dylan Alex Simon discovered and reported a directory traversal flaw in the way Gitolite restricted access to admin defined commands 'ADC'. An authenticated attacker could execute arbitrary code with privileges of Gitolite server user using specially crafted command name. The flaw does not affect...