SUSE CVE-2019-12816

Modules.cpp in ZNC before 1.7.4-rc1 allows remote authenticated non-admin users to escalate privileges and execute arbitrary code by loading a module with a crafted name...

ZNC Elevation of Privilege and Arbitrary Code Execution Vulnerabilities

ZNC is a set of IRC proxies that allow users to log in to IRC servers from their workstations. A security vulnerability exists in the Modules.cpp file in versions of ZNC prior to 1.7.4-rc1. A remote attacker can exploit this vulnerability to elevate privileges and execute arbitrary code with the...