Unspecified Vulnerability in Red Hat Enterprise Linux

Red Hat Enterprise Linux RHEL is a Linux operating system for business users maintained and distributed by Red Hat, Inc. xdg-user-dirs is a tool used to manage common directories in the ... A security vulnerability exists in xdg-user-dirs in RHEL that stems from the program's failure to adhere to...

CVE-2017-15131: Improper Access Control

It was found that system umask policy is not being honored when creating XDG user directories, since Xsession sources xdg-user-dirs.sh before setting umask policy. This only affects xdg-user-dirs before 0.15.5 as shipped with Red Hat Enterprise Linux...

Icinga Elevation of Privilege Vulnerability

Icinga is a set of enterprise-grade open source monitoring system from the Icinga project, a product between the Nagios Community Edition and Enterprise Edition. A security vulnerability exists in etc/initsystem/prepare-dirs in Icinga versions 2.x through 2.8.0. A local attacker could exploit thi...

CVE-2017-16933

etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local users to gain privileges by leveraging access to the $ICINGA2USER account for creation of a link...

CVE-2017-16933: Incorrect Permission Assignment for Critical Resource

etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local users to gain privileges by leveraging access to the $ICINGA2USER account for creation of a link...

SuSE 11.2 Security Update : cifs-utils (SAT Patch Number 6196)

The following issue has been fixed : - Don't allow unprivileged users to mount onto dirs to which they can't chdir. CVE-2012-1586 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

eyeOS <= 1.9.0.2 Stored XSS Vulnerability Using Image Files

Exploit for php platform in category web applications Title: eyeOS alert"XSS done"; - Risks and consequences: Malicious users can inject code inside image files malware, browser exploits, etc... to attack other users and compromise the whole system via shared files or internal messages. -...

Mandriva Update for xdg-user-dirs MDVA-2010:205 (xdg-user-dirs)

Check for the Version of xdg-user-dirs OpenVAS Vulnerability Test Mandriva Update for xdg-user-dirs MDVA-2010:205 xdg-user-dirs Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...

Mandriva Update for xdg-user-dirs MDVA-2010:205 (xdg-user-dirs)

Check for the Version of xdg-user-dirs OpenVAS Vulnerability Test Mandriva Update for xdg-user-dirs MDVA-2010:205 xdg-user-dirs Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...

MDVA-2010:205 : xdg-user-dirs

The translations for the default download directory was missing for several languages. This update adds the missing translations. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network...

Exim hard links vulnerability

Hard links vulnerability on mail dirs and lock files handling...

cpanel10-xss.txt

Aria-Security Team Advisory Original Advisory : http://aria-security.net/advisory/cpanel.txt ----------------------------------------------------------- Software: CPanel Tested On CPanel 10 CPanel file Manager: PoC: http://target.com:2082/frontend/Servername/files/seldir.html?dir=XSS CPanel...