EUVD-2011-1573

Malware in sbrugna...

CVE-2024-50701

TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin...

TeamPass 安全漏洞

TeamPass is an open source password manager from the individual developer Nils Laumaillé. A security vulnerability exists in versions prior to TeamPass 3.1.3.1, which stems from the inability to properly check whether a folder is located in an administrator-defined list of user-allowed folders wh...

Design/Logic Flaw

The Crimson 3.2 Windows-based configuration tool allows users with administrative access to define new passwords for users and to download the resulting security configuration to a device. If such a password contains the percent % character, invalid values will be included, potentially truncating...

Directory traversal

Directory traversal vulnerability in the Admin Defined Commands ADC feature in gitolite before 1.5.9.1 allows remote attackers to execute arbitrary commands via .. dot dot sequences in admin-defined commands...

CVE-2011-1572

Directory traversal vulnerability in the Admin Defined Commands ADC feature in gitolite before 1.5.9.1 allows remote attackers to execute arbitrary commands via .. dot dot sequences in admin-defined commands...

CVE-2011-1572

CVE-2011-1572 affects gitolite’s Admin Defined Commands (ADC) feature up to version 1.5.9.1. The vulnerability is a directory traversal that enables remote attackers to execute arbitrary commands by crafting .. sequences in admin-defined commands. This is the described risk; multiple OpenVAS/Debi...

CVE-2011-1572

Directory traversal vulnerability in the Admin Defined Commands ADC feature in gitolite before 1.5.9.1 allows remote attackers to execute arbitrary commands via .. dot dot sequences in admin-defined commands...

Fedora 15 : gitolite-1.5.8-3.fc15 (2011-1616)

Dylan Alex Simon discovered and reported a directory traversal flaw in the way Gitolite restricted access to admin defined commands 'ADC'. An authenticated attacker could execute arbitrary code with privileges of Gitolite server user using specially crafted command name. The flaw does not affect...