Osc Open OnDemand 安全漏洞

Osc Open OnDemand is an application from the Osc open source organization in the United States. It provides a for accessing HPC services. A security vulnerability exists in Osc Open OnDemand versions prior to 3.1.14 and prior to 4.0.6 that stems from improper log handling and could lead to a deni...

Symbolic Link Attack

github.com/golang/glog is vulnerable to symbolic link attack. The vulnerability is due to improper log file handling, which allows logs to be written to a widely-writable directory and also allows an attacker to pre-create a symlink to a sensitive file, which a privileged process may then overwri...