Code injection

IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 including IBM WebSphere Message Broker 8.0.0.0 and 8.0.0.9 has insecure permissions on certain files. A local attacker could exploit this vulnerability to modify or delete these files with an unknown impact. IBM X-Force ID: 127406...

Apple macOS file modification vulnerability

macOS is Apple's proprietary operating system for the Mac line of products. A file modification vulnerability exists in the EFI component in Apple macOS High Sierra 10.13.6, macOS Mojave 10.14. A local user can exploit the vulnerability to modify protected portions of the file system...

Photo Nettoyeur 1.4.5 Insecure File Permission Vulnerability

Exploit for windows platform in category local exploits i?-------------------------------------------------------- Exploit Title: Photo Nettoyeur 1.4.5 - Insecure File Permission Exploit Author : ZwX Vendor Homepage : http://www.marseillesoft.com/ Link Software :...

CVE-2018-14808

Emerson AMS Device Manager (AMS DM) versions 12.0–13.5 are affected by CVE-2018-14808 (CWE-269). The root cause is improper privilege management, allowing non-administrative users to overwrite or modify executable and library files, potentially impacting integrity and availability as per NVD/ICS ...

CVE-2018-14808

Emerson AMS Device Manager v12.0 to v13.5. Non-administrative users are able to change executable and library files on the affected products...

HPE enhanced Internet Usage Manager Arbitrary File Modification Vulnerability

HPE enhanced Internet Usage Manager eIUM is a real-time billing platform from Hewlett Packard Enterprise HPE, USA. The platform provides features such as charge control and session management. An arbitrary file modification vulnerability exists in HPE eIUM version 9.0FP1 including other user...

CVE-2018-7109

HPE has addressed a remote arbitrary file modification vulnerability in HPE enhanced Internet Usage Manager eIUM v9.0FP1 with the cumulative patch for v9.0FP1 - eIUM90FP01XXX.YYYYMMDD-HHMM...

CVE-2018-7109

HPE has addressed a remote arbitrary file modification vulnerability in HPE enhanced Internet Usage Manager eIUM v9.0FP1 with the cumulative patch for v9.0FP1 - eIUM90FP01XXX.YYYYMMDD-HHMM...

CVE-2018-7102

A security vulnerability in HPE Intelligent Management Center iMC PLAT E0506P09, createFabricAutoCfgFile could be remotely exploited via directory traversal to allow remote arbitrary file modification...

Directory traversal

A security vulnerability in HPE Intelligent Management Center iMC PLAT E0506P09, createFabricAutoCfgFile could be remotely exploited via directory traversal to allow remote arbitrary file modification...

CVE-2018-7102

A security vulnerability in HPE Intelligent Management Center iMC PLAT E0506P09, createFabricAutoCfgFile could be remotely exploited via directory traversal to allow remote arbitrary file modification...

CVE-2018-7102

HPE Intelligent Management Center (iMC) PLAT E0506P09 contains a directory traversal vulnerability in the imciccdm component (function createFabricAutoCfgFile). The issue arises from insufficient filtering of user-supplied paths before file operations, enabling remote attackers to modify or creat...

CVE-2018-7109

HPE has addressed a remote arbitrary file modification vulnerability in HPE enhanced Internet Usage Manager eIUM v9.0FP1 with the cumulative patch for v9.0FP1 - eIUM90FP01XXX.YYYYMMDD-HHMM...

CVE-2018-7102

A security vulnerability in HPE Intelligent Management Center iMC PLAT E0506P09, createFabricAutoCfgFile could be remotely exploited via directory traversal to allow remote arbitrary file modification...

CVE-2018-7109

HPE eIUM (enhanced Internet Usage Manager), a real-time billing platform, is affected by CVE-2018-7109. The vulnerability is described as a remote arbitrary file modification vulnerability in eIUM v9.0FP1 (and related 9.0 FP01-based builds). The root cause details are not fully disclosed in the p...

CVE-2018-16597

An issue was discovered in the Linux kernel where an incorrect access check in overlayfs mounts could be used by local attackers to modify or truncate files in the underlying filesystem...

CVE-2018-16597

An issue was discovered in the Linux kernel before 4.8. Incorrect access checking in overlayfs mounts could be used by local attackers to modify or truncate files in the underlying filesystem...

CVE-2018-16597

An issue was discovered in the Linux kernel before 4.8. Incorrect access checking in overlayfs mounts could be used by local attackers to modify or truncate files in the underlying filesystem...

HPESBGN03896 rev.1 - HPE enhanced Internet Usage Manager (eIUM), Remote Arbitrary File Modification

Potential Security Impact: Remote: Arbitrary File Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE enhanced Internet Usage Manager eIUM 9.0 FP01 - Including customer specific versions based on 9.0 FP01 release. CVSS Scores: | CVE | CVSS Vector | Base Score | | --- ...

Linux/x86 - File Modification(/etc/hosts) Polymorphic Shellcode (99 bytes)

/ Title: Linux/86 - File Modification/etc/hosts Polymorphic Shellcode 99 bytes Author: Ray Doyle @doylersec Tested on: Linux/x86 gcc -o polyhostsshellcode -z execstack -fno-stack-protector polyhostsshellcode.c / / Disassembly of section .text: 08048060 : 8048060: 29 c9 sub ecx,ecx 8048062: 51 pus...