PT-2019-12092

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 3.9.5 Description An issue was discovered in the Media Manager component, which does not properly sanitize the folder parameter. This allows attackers to act outside the media manager root directory. Recommendations F...

GOG Galaxy elevation of privilege vulnerability (CNVD-2019-39725)

GOG Galaxy is a game client program. The program is used to install, launch and update games. A security vulnerability exists in GOG Galaxy that originates from a networked system or product that does not properly validate incoming data. An attacker can exploit the vulnerability to adjust folder...

Synology Router Manager Information Disclosure Vulnerability (CNVD-2019-08958)

Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology Inc. of Taiwan, China. An information disclosure vulnerability exists in SYNO.FolderSharing.List in Synology SRM versions prior to 1.1.7-6941-2. The vulnerability, which originates from errors su...

CVE-2018-4050

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally adjust folder permissions leading to execution of arbitrary code with elevated privileges...

Privilege escalation

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally adjust folder permissions leading to execution of arbitrary code with elevated privileges...

CVE-2018-13289

Information exposure vulnerability in SYNO.FolderSharing.List in Synology Router Manager SRM before 1.1.7-6941-2 allows remote attackers to obtain sensitive information via the 1 folderpath or 2 realpath parameter...

CVE-2018-13288

Information exposure vulnerability in SYNO.FolderSharing.List in Synology File Station before 1.2.3-0252 and before 1.1.5-0125 allows remote attackers to obtain sensitive information via the 1 folderpath or 2 realpath parameter...

CVE-2018-13289

Information exposure vulnerability in SYNO.FolderSharing.List in Synology Router Manager SRM before 1.1.7-6941-2 allows remote attackers to obtain sensitive information via the 1 folderpath or 2 realpath parameter...

CVE-2018-13288

Information exposure vulnerability in SYNO.FolderSharing.List in Synology File Station before 1.2.3-0252 and before 1.1.5-0125 allows remote attackers to obtain sensitive information via the 1 folderpath or 2 realpath parameter...

PT-2019-8954

Name of the Vulnerable Software and Affected Versions Synology Router Manager SRM versions prior to 1.1.7-6941-2 Description The issue allows remote attackers to obtain sensitive information. This is achieved via the folder path or real path parameter in the SYNO.FolderSharing.List endpoint...

PT-2019-8953

Name of the Vulnerable Software and Affected Versions Synology File Station versions prior to 1.2.3-0252 Synology File Station versions prior to 1.1.5-0125 Description The issue allows remote attackers to obtain sensitive information. This is achieved via the folder path or real path parameter in...

PortSwigger Web Security: DLL Hijacking in Burp Suite Pro 2.0.19 Installer

I've found that the latest installer of Burp Suite Pro tries to load some DLLs from an unprotected folder. After providing it with admin privileges required to install it tries to load these DLLs: C:\Users\bortto\AppData\Local\Temp\e4jA5E5.tmpdir1553882416\jre\bin\WINMM.dll...

Sql injection

A SQL Injection issue was discovered in BlueCMS 1.6. The variable $adid is spliced directly in uploads/admin/ad.php in the admin folder, and is not wrapped in single quotes, resulting in injection around the escape of magic quotes...

CVE-2019-10262

A SQL Injection issue was discovered in BlueCMS 1.6. The variable $adid is spliced directly in uploads/admin/ad.php in the admin folder, and is not wrapped in single quotes, resulting in injection around the escape of magic quotes...

Cybercriminals Have a Heyday with WinRAR Bug in Fresh Campaigns

A recently discovered vulnerability in the WinRAR file archival utility has been exploited in a slew of new campaigns, including one with a never-before-seen payload. The flurry of activity shows no sign of waning as cybercriminals continue to find success exploiting the bug. The campaigns take...

NuGet Package Management System Folder Alteration

The vulnerability of the NuGet package management system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor, operating remotely, to alter the package’s folder structure...

GOG Galaxy Games changeFolderPermissionsAtPath privilege escalation vulnerability

Summary An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy’s Games, version 1.2.47 for macOS. An attacker can globally adjust folder permissions leading to execution of arbitrary code with elevated privileges. Tested Versions Gog Galaxy 1.2....

Workspace Web: Managing Folder Permissions

Using Citrix Workspace to set folder permissions provides admins with the ability to set the following permissions and alerts for users:Permission / Alert| Description ---|--- View permission| Granting a user view permission allows them to view a document without downloading it. A user must be...

Directory Traversal

serve is vulnerable to directory traversal. The vulnerability exists because it gives an easy interface to list directory contents and traverse into sub-folder just by submitting a URL with dot-slash before the file name, e.g. http://127.0.0.1:6060/dir/./file.txt...

Default configuration

KioWare Server version 4.9.6 and older installs by default to "C:\kiowarecom" with weak folder permissions granting any user full permission "Everyone: F" to the contents of the directory and it's sub-folders. In addition, the program installs a service called "KWSService" which runs as...