CVE-2019-19544

CA Automic Dollar Universe 5.3.3 contains a local privilege escalation vulnerability related to the uxdqmsrv binary being setuid root. An attacker with local access can exploit this to elevate privileges. The issue is tied to the 5.3.3 version, which reached End of Life on 2015-04-01. The availab...

CVE-2019-19544

CA Automic Dollar Universe 5.3.3 contains a vulnerability, related to the uxdqmsrv binary being setuid root, that allows local attackers to elevate privileges. This vulnerability was reported to CA several years after CA Automic Dollar Universe 5.3.3 reached End of Life EOL status on April 1, 201...

CVE-2019-19518

CVE-2019-19518 affects Broadcom CA Automic Sysload 5.6.0 through 6.1.2. The root cause is a lack of authentication on the File Server port, which potentially allows remote attackers to execute arbitrary commands. Public sources (NVD/Red Hat/Symantec) confirm the affected versions and the arbitrar...

CVE-2019-19518

CA Automic Sysload 5.6.0 through 6.1.2 contains a vulnerability, related to a lack of authentication on the File Server port, that potentially allows remote attackers to execute arbitrary commands...

geoedmonton2018.ca Cross Site Scripting vulnerability

Security Researcher KhanJanny Helped patch 2643 vulnerabilities Received 9 Coordinated Disclosure badges Received 38 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting geoedmonton2018.ca website and its users. Following...

geostjohns2019.ca Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1051229 Security Researcher KhanJanny Helped patch 3054 vulnerabilities Received 9 Coordinated Disclosure badges Received 38 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting geostjohns2019.ca websit...

CVE-2019-19231

An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that can allow a local attacker to gain escalated privileges...

CVE-2019-19231

An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that can allow a local attacker to gain escalated privileges...

Design/Logic Flaw

An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that can allow a local attacker to gain escalated privileges...

CVE-2019-19231

An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that can allow a local attacker to gain escalated privileges...

CVE-2019-19231

CVE-2019-19231 concerns a local privilege-escalation in Broadcom/CA Client Automation Agent for Windows (versions 14.0–14.3). The available documents confirm an insecure file access path as the root cause enabling a local attacker to gain elevated privileges. The details consistently reference th...

Inspecting TLS Web Traffic - Part 2

In the first blog post I covered why HTTPS web traffic has grown to unprecedented levels, provided a TLS primer and looked at the basic concept of intercepting and inspecting HTTPS web traffic with Man-In-The-Middle techniques MITM. In the second part, I will dive a bit deeper into how the TLS MI...

Payment Logic Vulnerability in Cloud Industry CMS ca***.php File

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. Payment logic vulnerability exists in the CMS ca.php file. Attackers can use this vulnerability to arbitrarily modify the size of the payment amount...

Broadcom CA Client Automation CVE-2019-19231 Local Privilege Escalation Vulnerability

Description Broadcom CA Client Automation is prone to a local privilege-escalation vulnerability. Local attackers may exploit this issue to execute arbitrary command with elevated privileges on the affected system. Broadcom CA Client Automation versions 14.0, 14.1, 14.2, 14.3 are vulnerable...

EulerOS 2.0 SP3 : openssl (EulerOS-SA-2019-2642)

According to the version of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - OpenSSL has internal defaults for a directory tree where it can find a configuration file as well as certificates used for verification in TLS. Th...

Debian: Security Advisory (DSA-4585-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SQL Injection Vulnerability in UQCMS Cloud Business System ca***.cl***.php Page

UQCMS cloud business system is a B2B2C e-commerce software with the program using PHP+MYSQL and the template using smarty template. UQCMS cloud business system ca.cl.php page SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

Broadcom CA Automic Sysload CVE-2019-19518 Arbitrary Command Execution Vulnerability

Description Broadcom CA Automic Sysload is prone to an arbitrary command-execution vulnerability. An attacker can exploit this issue to execute arbitrary system command on the affected system. This may aid in further attacks. CA Automic Sysload versions 5.6.0, 5.8.0, 5.8.1, 6.0.0, 6.0.1, 6.1.2 ar...

CVE-2019-19230

An unsafe deserialization vulnerability exists in CA Release Automation Nolio 6.6 with the DataManagement component that can allow a remote attacker to execute arbitrary code...

Deserialization of untrusted data

An unsafe deserialization vulnerability exists in CA Release Automation Nolio 6.6 with the DataManagement component that can allow a remote attacker to execute arbitrary code...