Arbitrary file deletion

HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/database/ajax?action=delete, a similar issue to CVE-2018-16774. If the attacker deletes config.php and visits install/index.php, they can reinstall the product...

ARCservIT 6.61/6.63 Client - asagent.tmp Arbitrary File Overwrite

source: https://www.securityfocus.com/bid/2741/info ARCservIT from Computer Associates contains a vulnerability which may allow malicious local users to overwrite arbitrary files. When it runs for the first time, 'asagent', opens and truncates it if it exists a file in /tmp called 'asagent.tmp'...

Minicom 1.821.83 - Capture-file Group Ownership

Minicom 1.821.83 - Capture-file Group Ownership source: https://www.securityfocus.com/bid/1599/info Minicom is a unix terminal program often used for communication between computers with modems. It is often installed setgid uucp, as this access is required for regular users to use certain devices...