13 matches found
EUVD-2010-2933
Malware in sbrugna...
EUVD-2007-0368
Malware in sbrugna...
CVE-2024-6091 Shell Command Denylist Bypass in significant-gravitas/autogpt
A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist settings. The issue arises when the denylist is configured to block specific commands, such as 'whoami' and '/bin/whoami'. An attacker can circumvent this restriction by executin...
CVE-2006-7191
Untrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager LAM before 1.0.0 allows local users to gain privileges via a modified PATH that points to a malicious rm program...
CVE-2007-0366
Untrusted search path vulnerability in Rumpus 5.1 and earlier allows local users to gain privileges via a modified PATH that points to a malicious ipfw program...
Design/Logic Flaw
Untrusted search path vulnerability in Rumpus 5.1 and earlier allows local users to gain privileges via a modified PATH that points to a malicious ipfw program...
CVE-2007-0366
Untrusted search path vulnerability in Rumpus 5.1 and earlier allows local users to gain privileges via a modified PATH that points to a malicious ipfw program...
CVE-2006-0701
readfolder.php in imageVue 16.1 allows remote attackers to list directories via modified path and ext parameters...
Design/Logic Flaw
readfolder.php in imageVue 16.1 allows remote attackers to list directories via modified path and ext parameters...
CVE-2006-0576
Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows local users to execute arbitrary commands via a modified PATH that references malicious 1 which or 2 dirname programs. NOTE: while opcontrol normally is not run setuid, a common configuration suggests accessing...
CVE-2006-0576
Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows local users to execute arbitrary commands via a modified PATH that references malicious 1 which or 2 dirname programs. NOTE: while opcontrol normally is not run setuid, a common configuration suggests accessing...
CVE-1999-0820
FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands...
CVE-1999-1232
Untrusted search path vulnerability in day5datacopier in SGI IRIX 6.2 allows local users to execute arbitrary commands via a modified PATH environment variable that points to a malicious cp program...