SuiteCRM Remote Code Execution Vulnerability

SuiteCRM is a free open source customer relationship management application. A remote code execution vulnerability exists in SuiteCRM versions prior to 7.11.17. The vulnerability can be exploited to achieve remote code execution via log file system settings and log file poisoning...

Linux: authpriv.* facility in /etc/rsyslog.conf

The facility argument is used to specify what type of program is logging the message. This lets the configuration file specify that messages from different facilities will be handled differently. - LOGAUTHPRIV: security/authorization messages private. The asterisk SPDX-FileCopyrightText: 2020...

Alkacon OpenCMS 7.0.3 - logfileViewSettings.jsp filePath.0 Parameter Arbitrary File Access

No description provided by source. source: http://www.securityfocus.com/bid/28152/info Alkacon OpenCms is prone to multiple input-validation vulnerabilities, including one cross-site scripting issue and a file-disclosure issue, because the application fails to properly sanitize user-supplied inpu...