New authd users logging in via SSH are members of the root group

Impact When an authd user logs in via SSH for the first time meaning they do not yet exist in the authd user database and successfully authenticates via the configured broker, the user is considered a member of the root group in the context of that SSH session. This situation may allow the user t...

Movable Type XMLRPC API vulnerable to OS command injection

Overview Movable Type XMLRPC API provided by Six Apart Ltd. contains an OS command injection vulnerability CWE-78. Sending a specially crafted message by POST method to Movavle Type XMLRPC API may allow arbitrary OS command execution. Updated on 2021 November 10 As of 2021 November 10, a...

cisco.7xx.tcp.http.txt

Date: Thu, 11 Mar 1999 16:00:00 -0000 From: [email protected] Reply-To: [email protected] To: [email protected] Subject: Cisco security notice: Cisco 7xx TCP and HTTP vulnerabilities -----BEGIN PGP SIGNED MESSAGE----- Cisco 7xx TCP and HTTP Vulnerabilities...