2013 matches found
CVE-2018-20904: Incorrect Permission Assignment for Critical Resource
cPanel before 71.9980.37 allows attackers to make API calls that bypass the cron feature restriction SEC-427...
PT-2019-10335
Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 71.9980.37 Description: The issue allows attackers to make API calls that bypass the cron feature restriction. Recommendations: For versions prior to 71.9980.37, update to version 71.9980.37 or later to resolve the...
SUSE-SU-2019:1990-1 Security update for cronie
This update for cronie fixes the following issues: Security issues fixed: - CVE-2019-9704: Fixed an insufficient check in the return value of calloc which could allow a local user to create Denial of Service by crashing the deamon bsc1128937. - CVE-2019-9705: Fixed an implementation vulnerability...
Linux Kernel 4.15.x < 4.19.2 - map_write() CAP_SYS_ADMIN Local Privilege Escalation (cron Method)
Exploit for linux platform in category local exploits !/bin/sh EDB Note: Download https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/47164.zip wrapper for Jann Horn's exploit for CVE-2018-18955 uses crontab technique ---...
SUSE-SU-2019:1389-2 Security update for cronie
This update for cronie fixes the following issues: Security issues fixed: - CVE-2019-9704: Fixed an insufficient check in the return value of calloc which could allow a local user to create Denial of Service by crashing the daemon bsc1128937. - CVE-2019-9705: Fixed an implementation vulnerability...
RedGhost - Linux Post Exploitation Framework Designed To Gain Persistence And Reconnaissance And Leave No Trace
Linux post exploitation framework designed to assist red teams in gaining persistence, reconnaissance and leaving no trace. Payloads Function to generate various encoded reverse shells in netcat, bash, python, php, ruby, perl Crontab Function to create cron job that downloads and runs payload eve...
openSUSE Security Update : cronie (openSUSE-2019-1520)
This update for cronie fixes the following issues : Security issues fixed : - CVE-2019-9704: Fixed an insufficient check in the return value of calloc which could allow a local user to create Denial of Service by crashing the daemon bsc1128937. - CVE-2019-9705: Fixed an implementation vulnerabili...
OPENSUSE-SU-2019:1520-1 Security update for cronie
This update for cronie fixes the following issues: Security issues fixed: - CVE-2019-9704: Fixed an insufficient check in the return value of calloc which could allow a local user to create Denial of Service by crashing the daemon bsc1128937. - CVE-2019-9705: Fixed an implementation vulnerability...
CVE-2016-10757
In Redaxo 5.2.0, the cron management of the admin panel suffers from CSRF that leads to arbitrary Remote Code Execution via addons/cronjob/lib/types/phpcode.php...
Remote code execution
In Redaxo 5.2.0, the cron management of the admin panel suffers from CSRF that leads to arbitrary Remote Code Execution via addons/cronjob/lib/types/phpcode.php...
CVE-2016-10757
In Redaxo 5.2.0, the cron management of the admin panel suffers from CSRF that leads to arbitrary Remote Code Execution via addons/cronjob/lib/types/phpcode.php...
CVE-2016-10757
In Redaxo 5.2.0, the cron management of the admin panel suffers from CSRF that leads to arbitrary Remote Code Execution via addons/cronjob/lib/types/phpcode.php...
CVE-2016-10757
The CVE-2016-10757 entry concerns Redaxo 5.2.0: the admin panel’s cron management is vulnerable to CSRF that can lead to arbitrary Remote Code Execution via addons/cronjob/lib/types/phpcode.php. The Red Hat, NVD, CNVD and CVE records confirm a CSRF path enabling execution of arbitrary code, with ...
PT-2019-7553
Name of the Vulnerable Software and Affected Versions Redaxo version 5.2.0 Description The issue affects the cron management in the admin panel, where a CSRF vulnerability can lead to arbitrary Remote Code Execution. This is achieved through the addons/cronjob/lib/types/phpcode.php file...
CVE-2018-20052
An issue was discovered on Cerner Connectivity Engine CCE 4 devices. The user running the main CCE firmware has NOPASSWD sudo privileges to several utilities that could be used to escalate privileges to root. One example is the "sudo ln -s /tmp/script /etc/cron.hourly/script" command...
Improper Authentication in Apache Zeppelin
In Apache Zeppelin prior to 0.8.0 the cron scheduler was enabled by default and could allow users to run paragraphs as other users without authentication...
GHSA-9X2H-HVG6-4R5P Improper Authentication in Apache Zeppelin
In Apache Zeppelin prior to 0.8.0 the cron scheduler was enabled by default and could allow users to run paragraphs as other users without authentication...
Authentication flaw
In Apache Zeppelin prior to 0.8.0 the cron scheduler was enabled by default and could allow users to run paragraphs as other users without authentication...