39 matches found
The vulnerability of Moxa TN-5916 series router microprogramming software, related to the possibility of modifying the cookie file, allows attackers to enhance their privileges.
The vulnerability of Moxa TN-5916 router microprogramming software is related to the possibility of modifying the cookie file. Exploiting this vulnerability can allow a remote attacker to increase their privileges...
CVE-2022-41158
Remote code execution vulnerability can be achieved by using cookie values as paths to a file by this builder program. A remote attacker could exploit the vulnerability to execute or inject malicious code...
The vulnerabilities of the microprogramming software for the OPC UA Modicon Communication Module (BMENUA0100) and the X80 advanced RTU Communication Module (BMENOR2200H) allow attackers to cause service interruptions.
The vulnerability of the microprogramming software for the OPC UA Modicon Communication Module BMENUA0100 and the X80 advanced RTU Communication Module BMENOR2200H is related to errors in cookie file processing. Exploiting this vulnerability can allow a remote attacker to cause service failures...
Internet Bug Bounty: CVE-2022-32207: Unpreserved file permissions
When curl saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name. In that rename operation, it might accidentally widen the permissions for the target file, leaving the update...
SUSE SLES12 Security Update : libzypp (SUSE-SU-2020:0079-2)
This update for libzypp fixes the following issues : Security issue fixed : CVE-2019-18900: Fixed assert cookie file that was world readable bsc1158763. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted...
Brave Android 1.16.68 Security Fixes
Fixed file-path for cookies as reported on HackerOne by kanytu. - Encrypted private wallet data preferences for Brave Rewards...
The vulnerability of Moxa EDR-G902 and Moxa EDR-G903 router microprogramming software lies in buffer overflow in the stack, allowing attackers to execute arbitrary code.
The vulnerability of Moxa EDR-G902 and Moxa EDR-G903 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted cookie file...
openSUSE: Security Advisory for libsolv, (openSUSE-SU-2020:0255-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
The vulnerability of the DBUS_COOKIE_SHA1 function in the D-Bus library of the process-interaction system allows a perpetrator to compromise data integrity or gain unauthorized access to protected information.
The vulnerability of the DBUSCOOKIESHA1 function in the D-Bus library related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow an attacker to compromise data integrity by replacing the uid value or gaining unauthorized access to protected information by usin...
The vulnerability of the Linux operating system, which allows a perpetrator to trigger a service failure or cause other effects
The vulnerability of the cookie file component in the implementation of the application’s software interface in the net/sched/actapi.c file of the Linux operating system leads to incorrect management of the tb nlattr array due to insufficient validation of input data. Exploiting this vulnerabilit...
e107 CMS-2.1.1 privilege elevation vulnerability
No description provided by source. $login, 'userpass' = $pass, 'userlogin' = 'Sign In'; curlsetopt$ch, CURLOPTPOST, 1; $content = curlexec$ch; if strpos$content, '?logout' === false die"Cannot login"; $data = array; $data'useradmin' = 1; $data'userperms' = 0; $data'userpassword' = md5$pass;...
The vulnerability of the Mac OS X operating system, which allows a perpetrator to obtain confidential information
The vulnerability of the CFNetwork component in the Mac OS X operating system is related to the use of weak permissions for cookie files in web browsers. Exploiting this vulnerability could allow an intruder, operating locally, to obtain confidential information using indefinite vectors...
Design/Logic Flaw
kinit in KDE Frameworks before 5.23.0 uses weak permissions 644 for /tmp/xauth-xxx-y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly gain privileges by reading the file...
The vulnerability of the InfoSphere Information Server software platform, which allows a perpetrator to circumvent existing access restrictions
The vulnerability of the InfoSphere Information Server software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions by modifying the cookie file...
FreiChat 9.6 - SQL Injection
FreiChat 9.6 - SQL Injection / Exploit Title: FreiChat 9.6 SQL Injection Date: 27-11-2014 Software Link: http://codologic.com/page/freichat-free-php-chat-script-software Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1...
Opera browser for Android issue in handling intent scheme URL's
Overview Opera browser for Android contains an issue in the handling of intent scheme URL's. Takeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact When a use...
IBM Lotus Domino Cookie File Authentication Bypass Vulnerability
IBM Lotus Domino Server is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Invision Power Board 2.0.3 - 'login.php' SQL Injection (Tutorial)
danica jones Tutorial for the recent exploit released by Petey Beege. 1. Get the exploit from http://www.milw0rm.com/id.php?id=1013 https://www.exploit-db.com/exploits/1013/ 2. Make sure you have LWP::UserAgent perl module if not do this: a. perl -MCPAN -e 'shell' b. inside the perl shell, do thi...
Invision Power Board <= 2.0.3 Login.PHP SQL Injection (tutorial)
No description provided by source. danica jones [email protected] Tutorial for the recent exploit released by Petey Beege. 1. Get the exploit from http://www.milw0rm.com/id.php?id=1013 2. Make sure you have LWP::UserAgent perl module if not do this: a. perl -MCPAN -e 'shell' b. inside the perl...