CVE-2019-3699: Improper Link Resolution Before File Access

UNIX Symbolic Link Symlink Following vulnerability in the packaging of privoxy on openSUSE Leap 15.1, Factory allows local attackers to escalate from user privoxy to root. This issue affects: openSUSE Leap 15.1 privoxy version 3.0.28-lp151.1.1 and prior versions. openSUSE Factory privoxy version...

CVE-2019-3694: Improper Link Resolution Before File Access

A Symbolic Link Symlink Following vulnerability in the packaging of munin in openSUSE Factory, Leap 15.1 allows local attackers to escalate from user munin to root. This issue affects: openSUSE Factory munin version 2.0.49-4.2 and prior versions. openSUSE Leap 15.1 munin version 2.0.40-lp151.1.1...

CVE-2019-3692: Improper Link Resolution Before File Access

The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap 15.1 allows local attackers to escalate from user inn to root via symlink attacks. This issue affects: SUSE Linux Enterprise Server 11 inn version 2.4.2-170.21.3.1 and prior versions. openSUSE Factory inn version...

CVE-2019-3691

A Symbolic Link Symlink Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge versions prior to 0.5.13-4.3.1. openSUSE...

CVE-2019-3691

A Symbolic Link Symlink Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge versions prior to 0.5.13-4.3.1. openSUSE...

CVE-2019-3691 Local privilege escalation from user munge to root

A Symbolic Link Symlink Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge versions prior to 0.5.13-4.3.1. openSUSE...

CVE-2019-3691

CVE-2019-3691 is a local privilege escalation in the munge packaging for SUSE Linux Enterprise Server 15 and openSUSE Factory, caused by a Symbolic Link (Symlink) Following issue. Affected Munge versions are prior to 0.5.13-4.3.1 on SLES 15 and prior to 0.5.13-6.1 on openSUSE Factory. The vulnera...

CVE-2019-18898

UNIX Symbolic Link Symlink Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allowed local attackers escalate privileges from user tss to root. This issue affects: SUSE Linux Enterprise Server 15 SP1 trousers versions prior to 0.3.14-6.3.1...

CVE-2019-18898

UNIX Symbolic Link Symlink Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allowed local attackers escalate privileges from user tss to root. This issue affects: SUSE Linux Enterprise Server 15 SP1 trousers versions prior to 0.3.14-6.3.1...

Spoofing

UNIX Symbolic Link Symlink Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allowed local attackers escalate privileges from user tss to root. This issue affects: SUSE Linux Enterprise Server 15 SP1 trousers versions prior to 0.3.14-6.3.1...

CVE-2019-18898

CVE-2019-18898 concerns a local symlink attack in the trousers package for SUSE/openSUSE, allowing a local attacker (tss user) to gain ownership of arbitrary files during installation/update. The issue affects SUSE Linux Enterprise Server 15 SP1 trousers versions prior to 0.3.14-6.3.1 and openSUS...

CVE-2019-3691: Improper Link Resolution Before File Access

A Symbolic Link Symlink Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge versions prior to 0.5.13-4.3.1. openSUSE...

CVE-2019-18898: Improper Link Resolution Before File Access

UNIX Symbolic Link Symlink Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allowed local attackers escalate privileges from user tss to root. This issue affects: SUSE Linux Enterprise Server 15 SP1 trousers versions prior to 0.3.14-6.3.1...

com.github.dexecutor:dexecutor-infinispan (>=0.0.1, <=1.0.0), org.apache.camel:camel-infinispan (>=2.16.0, <=2.16.5) +39 more potentially affected by CVE-2019-10158 via org.infinispan:infinispan-core (7.2.5.final)

org.infinispan:infinispan-core MAVEN version 7.2.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - com.github.dexecutor:dexecutor-infinispan =0.0.1, =2.16.0, =0.7, =5.0.0, =5.0.9.final,...

org.infinispan.server:infinispan-server-feature-pack (8.1.6.final), org.infinispan.server:infinispan-server-infinispan (8.1.6.final) +33 more potentially affected by CVE-2019-10158 via org.infinispan:infinispan-core (8.1.6.final)

org.infinispan:infinispan-core MAVEN version 8.1.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.1.6.final -...

org.entando.entando.plugins:entando-plugin-jpinfinispan (5.1.0), org.hibernate.ogm:hibernate-ogm-infinispan (5.0.0.beta1) +35 more potentially affected by CVE-2019-10158 via org.infinispan:infinispan-core (8.0.2.final)

org.infinispan:infinispan-core MAVEN version 8.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.entando.entando.plugins:entando-plugin-jpinfinispan 5.1.0 -...

JetBrains TeamCity 2018.2.4 - Remote Code Execution

Exploit Title: JetBrains TeamCity 2018.2.4 - Remote Code Execution Date: 2020-01-07 Exploit Author: Harrison Neal Vendor Homepage: https://www.jetbrains.com/ Software Link: https://confluence.jetbrains.com/display/TW/Previous+Releases+Downloads Version: 2018.2.4 for Windows CVE: CVE-2019-15039...

CVE-2019-16272

On DTEN D5 and D7 before 1.3.4 devices, factory settings allows for firmware reflash and Android Debug Bridge adb enablement...

Design/Logic Flaw

On DTEN D5 and D7 before 1.3.4 devices, factory settings allows for firmware reflash and Android Debug Bridge adb enablement...

We Be Jammin’ – Bypassing Chamberlain myQ Garage Doors

ARCHIVED STORY We Be Jammin’ – Bypassing Chamberlain myQ Garage Doors Sam Quinn · JAN 06, 2020 The idea of controlling your garage door remotely and verifying that everything is secure at home, or having packages delivered directly into your garage is enticing for many people. The convenience tha...