CVE-2017-14937

The CVE describes a vulnerability in airbag pyrotechnic control units (PCUs) affecting unspecified passenger vehicles (2014+ when ignition is on and speed

rubygem-passenger -- arbitrary file read vulnerability

Phusion reports: The cPanel Security Team discovered a vulnerability in Passenger that allows users to list the contents of arbitrary files on the system. CVE-2017-16355 has been assigned to this issue...

SUSE-SU-2017:1316-1 Security update for rubygem-passenger

This update for rubygem-passenger fixes this security issue: - CVE-2016-10345: A known /tmp filename was used during passenger-install-nginx-module execution, which could have allowed local attackers to gain the privileges of the passenger user bsc1034594...

CVE-2016-10345

In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the privileges of the passenger user...

File Overwrite

passenger is vulnerable to a file overwrite. A malicious user can create a symlink to the /tmp/passenger-check.c file, attempting to overwrite the chosen file by running passenger-install-nginx-module. The overwriting attempt would run with the same user permissions as the user running...

Phusion Passenger Elevation of Privilege Vulnerability

Phusion Passenger is an Apache module for deploying Ruby on Rails projects on Apache and Nginx web servers from Phusion Netherlands. An elevation of privilege vulnerability exists in versions of Phusion Passenger prior to 5.1.0. A local attacker can exploit this vulnerability to gain privileges...

Phusion Passenger File Overwrite Vulnerability

Phusion Passenger is prone to a /tmp file overwrite vulnerability which could allow local attackers to gain the privileges of the passenger user. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Phusion Passenger Detection

Detection of Phusion Passenger The script sends a connection request to the server and attempts to detect Phusion Passenger and to extract the version number from the reply. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

CVE-2016-10345

In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the privileges of the passenger user...

CVE-2016-10345

In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the privileges of the passenger user...

CVE-2016-10345

In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the privileges of the passenger user...

Design/Logic Flaw

In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the privileges of the passenger user...

UBUNTU-CVE-2016-10345

In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the privileges of the passenger user...

DEBIAN-CVE-2016-10345

In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the privileges of the passenger user...

CVE-2016-10345

CVE-2016-10345 affects Phusion Passenger prior to 5.1.0, where a known /tmp filename used during passenger-install-nginx-module execution could allow a local attacker to gain the privileges of the passenger user. The vulnerability is local and depends on the /tmp filename handling during installa...

CVE-2016-10345

In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the privileges of the passenger user...

CVE-2016-10345

In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the privileges of the passenger user...

Alstrasoft ProTaxi Enterprise 3.5 - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Alstrasoft ProTaxi Enterprise v3.5 Script - Arbitrary File Upload Google Dork: N/A Date: 04.02.2017 Vendor Homepage: http://www.alstrasoft.com/ Software Buy: http://www.alstrasoft.com/protaxi-uber-clone.htm Demo:...

Panasonic, IOActive Clash on Vulnerability Report

Panasonic Avionics has pushed back against research released Tuesday by IOActive suggesting that in-flight entertainment system firmware used by more than a dozen airlines contains vulnerabilities that allow a local attacker to manipulate data displayed to passengers, or put their personal data a...

In-Flight Entertainment System Flaws Put Passenger Data at Risk

A simple tap on an in-flight entertainment system touchscreen kicked off an intellectual exercise that resulted in the discovery of a number of firmware vulnerabilities in embedded systems used by at least 13 airlines. The vulnerabilities in the Panasonic Avionics IFE firmware could allow a local...