6279 matches found
man-db: privilege escalation
Background man-db is a man replacement that utilizes BerkeleyDB instead of flat files. Description A root privilege escalation through setuid executable and cron job has been discovered in man-db. Please review the CVE identifier referenced below for details. Impact A local user with access to th...
GLSA-202310-08 : man-db: privilege escalation
The remote host is affected by the vulnerability described in GLSA-202310-08 man-db: privilege escalation - man-db before 2.8.5 on Gentoo allows local users with access to the man user account to gain root privileges because /usr/bin/mandb is executed by root but not owned by root. Also, the owne...
PT-2024-14759
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the lack of validity checks for db maxag and db agpref, which are used as indexes for the db agfree array. This can lead to errors, as reported by Syzbot with an...
EDRaser - Tool For Remotely Deleting Access Logs, Windows Event Logs, Databases, And Other Files
EDRaser is a powerful tool for remotely deleting access logs, Windows event logs, databases, and other files on remote machines. It offers two modes of operation: automated and manual. Automated Mode In automated mode, EDRaser scans the C class of a given address space of IPs for vulnerable syste...
CVE-2023-2567
A SQL Injection vulnerability has been found in Nozomi Networks Guardian and CMC, due to improper input validation in certain parameters used in the Query functionality. Authenticated users may be able to execute arbitrary SQL statements on the DBMS used by the web application...
Malicious code in synth-fhr-db (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08b15f2afb6158618f0f675049b7d15fa35646e7f4c630791df22eb59148f1d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8181 Malicious code in synth-fhr-db (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08b15f2afb6158618f0f675049b7d15fa35646e7f4c630791df22eb59148f1d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in synth-fhr-db
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2023-42387
An issue in TDSQL Chitu management platform v.10.3.19.5.0 allows a remote attacker to obtain sensitive information via getdbinfo function in install.php...
PT-2023-28326 · Unknown · Tdsql Chitu Management Platform
Name of the Vulnerable Software and Affected Versions: TDSQL Chitu management platform version 10.3.19.5.0 Description: An issue in the TDSQL Chitu management platform allows a remote attacker to obtain sensitive information via the get db info function in the install.php file. Recommendations: F...
colord Kernel Unauthenticated Access
The vulnerability of the components colord/src/cd-device-db.c and colord/src/cd-profile-db.c in the Linux operating system’s system daemon colord is related to a memory release error. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Exploit for Cross-site Scripting in Axigen Axigen_Mobile_Webmail
Exploit Title: Axigen if xhr1.readyState === XMLHttpRe...
Oracle Linux 5 : kernel (ELSA-2018-4219)
The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4219 advisory. 2.6.18-419.0.0.0.11 - x8664/entry: Don't use IST entry for BP stack orabug 28452062 CVE-2018-8897 Tenable has extracted the preceding description block directly...
db-prod-bcul.unil.ch Cross Site Scripting vulnerability OBB-3610724
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Nextcloud: Memcached used as RateLimiter backend is no-op
A vulnerability was discovered where the Memcached cache was used as the backend for rate limiting. This resulted in cache entries being wiped and rate limit attempts and bruteforce protection being bypassed...
WDAC OLE DB Driver Code Execution
The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
EuroTel ETL3100 Transmitter Authorization Bypass (IDOR)
Summary RF Technology For Television Broadcasting Applications. The Series ETL3100 Radio Transmitter provides all the necessary features defined by the FM and DAB standards. Two bands are provided to easily complain with analog and digital DAB standard. The Series ETL3100 Television Transmitter...
Microsoft Windows Multiple Vulnerabilities (KB5029259)
This host is missing a critical security update according to Microsoft KB5029259 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
