43 matches found
SUSE CVE-2022-37704
Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as root with controlled arguments from the attacker which may lead to escalation of privileges, denial of service, and information disclosure...
7.8CVSS6.8AI score0.0053EPSS
SaveExploits1References4
h2desk helpdesk path disclosure vulnerability
Heathco's h2desk helpdesk ticking system provides a ticketing solution for small and large organizations alike. Blah blah. On to the exploit. h2desk's session handling is custom and doesnt use the standard phpsession id handling. As a result, if you add a tic ' or any other invalid character to t...
SaveExploits0
20