CVE-2020-25989

Privilege escalation via arbitrary file write in pritunl electron client 1.0.1116.6 through v1.2.2550.20. Successful exploitation of the issue may allow an attacker to execute code on the effected system with root privileges...

Privilege escalation

Privilege escalation via arbitrary file write in pritunl electron client 1.0.1116.6 through v1.2.2550.20. Successful exploitation of the issue may allow an attacker to execute code on the effected system with root privileges...

CVE-2020-25989

The CVE-2020-25989 entry concerns pritunl's Electron client (versions 1.0.1116.6 up to 1.2.2550.20). The issue is a privilege-escalation via arbitrary file write that may allow code execution with root privileges on the affected system. The connected documents confirm the vulnerability class and ...

CVE-2020-25989

Privilege escalation via arbitrary file write in pritunl electron client 1.0.1116.6 through v1.2.2550.20. Successful exploitation of the issue may allow an attacker to execute code on the effected system with root privileges...

CVE-2020-25989

Privilege escalation via arbitrary file write in pritunl electron client 1.0.1116.6 through v1.2.2550.20. Successful exploitation of the issue may allow an attacker to execute code on the effected system with root privileges...

CVE-2020-25989: Improper Link Resolution Before File Access

Privilege escalation via arbitrary file write in pritunl electron client 1.0.1116.6 through v1.2.2550.20. Successful exploitation of the issue may allow an attacker to execute code on the effected system with root privileges...

Pritunl-client Backlink Vulnerability

Pritunl-client is an open source OpenVPN client application from US-based Pritunl. A backlink vulnerability exists in pritunl electron client versions 1.0.1116.6 through v1.2.2550.20, which originates from an arbitrary file write. An attacker can exploit this vulnerability to execute code with ro...

PT-2020-16263

Name of the Vulnerable Software and Affected Versions pritunl electron client versions 1.0.1116.6 through 1.2.2550.20 Description The issue allows for privilege escalation via arbitrary file write. Successful exploitation may enable an attacker to execute code on the affected system with root...

CVE-2020-26405: Improper Limitation of a Pathname to a Restricted Directory

Path traversal vulnerability in package upload functionality in GitLab CE/EE starting from 12.8 allows an attacker to save packages in arbitrary locations. Affected versions are =12.8, =13.4, =13.5, 13.5.2...

PEAR Archive_Tar 1.4.10 Arbitrary File Write

This module takes advantages of ArchiveTar use exploit/multi/fileformat/archive/tararbfilewrite msf undefinedtararbfilewrite show actions ...actions... msf undefinedtararbfilewrite set ACTION msf undefinedtararbfilewrite show options ...show and set options... msf undefinedtararbfilewrite run Thi...

PT-2020-16953

Name of the Vulnerable Software and Affected Versions lettre library versions through 0.10.0-alpha Description The issue allows arbitrary sendmail option injection via transport/sendmail/mod.rs. Affected versions of lettre allowed argument injection to the sendmail command, making it possible to...

python-pip security update

9.0.3-18 - Patch for pip install allow directory traversal, leading to arbitrary file write Resolves: rhbz1868016 9.0.3-17 - Remove unused CA bundle from the bundled requests library Resolves: rhbz1775200...

CVE-2020-15708 Libvirt Service Arbitrary File Write Privilege Escalation Vulnerability

Ubuntu's packaging of libvirt in 20.04 LTS created a control socket with world read and write permissions. An attacker could use this to overwrite arbitrary files or execute arbitrary code...

CVE-2020-27128: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to write arbitrary files to an affected system. The vulnerability is due to improper validation of requests to APIs. An attacker could exploit this vulnerability by...

Arbitrary File Write

file-roller is vulnerable to arbitrary file write. The vulnerability exists through a directory symlink pointing outside of the target directory...

CVE-2020-27128

A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to write arbitrary files to an affected system. The vulnerability is due to improper validation of requests to APIs. An attacker could exploit this vulnerability by...

PT-2020-4619

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN vManage Software affected versions not specified Description The issue is related to improper validation of requests to APIs within the application data endpoints, allowing an authenticated, remote attacker to write arbitrary file...

Nagios XI Command Injection Vulnerability (CNVD-2020-58771)

Nagios XI and Nagios are both products of Nagios, Inc.Nagios XI is an IT infrastructure monitoring solution. The solution supports monitoring and alerting of applications, services, operating systems, etc. Nagios is an open source, free network monitoring tool. A security vulnerability exists in...

CVE-2020-5792

Improper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote, authenticated admin user to write to arbitrary files and ultimately execute code with the privileges of the apache user...

CVE-2020-5792: Improper Neutralization of Argument Delimiters in a Command

Improper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote, authenticated admin user to write to arbitrary files and ultimately execute code with the privileges of the apache user...