11 matches found
EUVD-2026-42403
GitLab has remediated an issue in GitLab EE affecting all versions from 16.10 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user to modify group-level settings beyond their intended permissions due to improper...
EUVD-2020-7807
Malware in sbrugna...
CVE-2020-15825
In JetBrains TeamCity before 2020.1, users with the Modify Group permission can elevate other users' privileges...
CVE-2020-15825
In JetBrains TeamCity before 2020.1, users with the Modify Group permission can elevate other users' privileges...
Design/Logic Flaw
In JetBrains TeamCity before 2020.1, users with the Modify Group permission can elevate other users' privileges...
EyesOfNetwork add_modify_group.php SQL Injection Vulnerability
EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides business process configuration tools, generating pop-up windows when events occur in the active queue, etc. EyesOfNetwork web interface aka eonweb is one of the web interfaces. A SQL injection vulnerability...
Linux Kernel 2.6.x < 2.6.7-rc3 - sys_chown() Privilege Escalation Exploit
Exploit for linux platform in category local exploits / $Id: raptorchown.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorchown.c - syschown missing DAC controls on Linux Copyright c 2004 Marco Ivaldi Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files,...
The vulnerability of the Moodle learning management system allows a hacker to modify data within arbitrary groups.
The vulnerability of the Moodle learning management system’s Forum module is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to modify data within arbitrary groups, thereby increasing their own influence as “teachers”...
CVE-2008-3789
Samba 3.2.0 uses weak permissions 0666 for the 1 groupmapping.tdb and 2 groupmapping.ldb files, which allows local users to modify the membership of Unix groups...
PYSEC-2008-15
Withdrawn as duplicate of PYSEC-2008-14. Multiple cross-site request forgery CSRF vulnerabilities in Plone CMS 3.0.5 and 3.0.6 allow remote attackers to 1 add arbitrary accounts via the joinform page and 2 change the privileges of arbitrary groups via the prefsgroupsoverview page...
Microsoft Security Bulletin MS02-070: Flaw in SMB Signing Could Enable Group Policy to be Modified (309376)
-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Flaw in SMB Signing Could Enable Group Policy to be Modified 309376 Released: 11 December 2002 Revised: 22 January 2003 version 2.0 Software: Microsoft Windows 2000 Microsoft Windows...