Lucene search
+L

1271 matches found

Exploit DB
Exploit DB
added 2023/03/23 12:00 a.m.190 views

MAN-EAM-0003 V3.2.4 - XXE

Exploit Title: MAN-EAM-0003 V3.2.4 - XXE Date: 2022-09-19 Exploit Author: Ahmed Alroky Author: http://guralp.com/ Version: 3.2.4 Authentication Required: NO CVE : CVE-2022-38840 Google dork: " webconfig menu.cgi " Tested on: Windows Exploit 1 - browse to http:// name/cgi-bin/xmlstatus.cgi 2 - cli...

7.5CVSS7.3AI score0.09803EPSS
SaveExploits4
SUSE CVE
SUSE CVE
added 2023/02/15 6:19 a.m.10 views

SUSE CVE-2004-1268

lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors...

2.1CVSS6.7AI score0.00454EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:19 a.m.9 views

SUSE CVE-2004-1269

lppasswd in CUPS 1.1.22 does not remove the passwd.new file if it encounters a file-size resource limit while writing to passwd.new, which causes subsequent invocations of lppasswd to fail...

5CVSS6.9AI score0.08954EPSS
SaveExploits2References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:53 a.m.9 views

SUSE CVE-2011-1521

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service resource consumption via a crafted URL, as...

6.4CVSS6.7AI score0.03564EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
added 2023/02/15 5:19 a.m.9 views

SUSE CVE-2015-3246

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service inconsistent file state by causing an error during the modification. NOTE: this issue can be combined wi...

7.2CVSS8.9AI score0.08799EPSS
SaveExploits11References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:22 a.m.6 views

SUSE CVE-2018-19044

keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats. This allowed local users to overwrite arbitrary files if fs.protectedsymlinks is set to 0, as demonstrated by a symlink from /tmp/keepalived.data or...

7.8CVSS7.8AI score0.00501EPSS
SaveExploits1References6
SUSE CVE
SUSE CVE
added 2023/02/15 4:04 a.m.7 views

SUSE CVE-2020-1705

A vulnerability was found in openshift/template-service-broker-operator in all 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the openshift/template-service-broker-operator. An attacker with access to the container could use this...

7CVSS6.8AI score0.0026EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 3:30 a.m.5 views

SUSE CVE-2022-4318

A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable...

7.8CVSS6.9AI score0.0029EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 3:25 a.m.8 views

SUSE CVE-2022-32275

Grafana 8.4.3 allows reading files via for example a /dashboard/snapshot/%7B%7Bconstructor.constructor'/.. /.. /.. /.. /.. /.. /.. /.. /etc/passwd URI. NOTE: the vendor's position is that there is no vulnerability; this request yields a benign error page, not /etc/passwd content...

7.5CVSS9.5AI score0.09591EPSS
SaveExploits1References3
GithubExploit
GithubExploit
added 2023/02/06 10:44 a.m.427 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Imagemagick

ImageMagick LFI PoC CVE-2022-44268 The researchers at Me...

6.5CVSS6.9AI score0.89855EPSS
SaveExploits28
Github Security Blog
Github Security Blog
added 2022/12/29 1:49 a.m.62 views

CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation

Impact It is possible to craft an environment variable with newlines to add entries to a container's /etc/passwd. It is possible to circumvent admission validation of username/UID by adding such an entry. Note: because the pod author is in control of the container's /etc/passwd, this is not...

7.8CVSS1.6AI score0.0029EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2022/12/29 1:49 a.m.38 views

GHSA-CM9X-C3RH-7RC4 CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation

Impact It is possible to craft an environment variable with newlines to add entries to a container's /etc/passwd. It is possible to circumvent admission validation of username/UID by adding such an entry. Note: because the pod author is in control of the container's /etc/passwd, this is not...

6.1CVSS7AI score0.0029EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2022/12/23 12:00 a.m.7 views

PT-2022-7296

Name of the Vulnerable Software and Affected Versions cri-o versions prior to 1.26.0 Description A flaw exists that allows the addition of arbitrary lines into a container's /etc/passwd file by using a specially crafted environment variable containing newlines. This can be used to bypass admissio...

7.8CVSS7AI score0.0029EPSS
SaveExploits0References31
RedhatCVE
RedhatCVE
added 2022/12/12 6:34 p.m.36 views

CVE-2022-4318

A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable...

7.8CVSS3.8AI score0.0029EPSS
SaveExploits0References3
OSV
OSV
added 2022/12/05 9:15 p.m.7 views

CVE-2022-44039

Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File system overwrite. The impact is: File system rewrite remote. ¶¶ An attacker can overwrite system files like system.conf and passwd, this occurs because the insecure usage of "fopen" system function with the mode "wb" which allow...

9.8CVSS5.8AI score0.00997EPSS
SaveExploits1References1
Prion
Prion
added 2022/12/05 9:15 p.m.33 views

Default credentials

Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File system overwrite. The impact is: File system rewrite remote. ¶¶ An attacker can overwrite system files like system.conf and passwd, this occurs because the insecure usage of "fopen" system function with the mode "wb" which allow...

7.5CVSS9.6AI score0.00997EPSS
SaveExploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/11/29 12:00 a.m.15 views

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : shadow regression (USN-5745-2)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5745-2 advisory. USN-5745-1 fixed vulnerabilities in shadow. Unfortunately that update introduced a regression that caused useradd to behave incorrectly in...

5.6AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2022/11/15 9:45 a.m.20 views

dovecot: Privilege escalation when similar master and non-master passdbs are used

A vulnerability was found in the Dovecot IMAP Server. When two passdb configuration entries exist in the Dovecot configuration, which have the same driver and args settings, the incorrect usernamefilter and mechanism settings can be applied to passdb definitions. These incorrect settings can lead...

8.8CVSS7.3AI score0.02225EPSS
SaveExploits1References5
Microsoft CVE
Microsoft CVE
added 2022/11/09 8:00 a.m.14 views

Sudo 1.8.0 through 1.9.12 with the crypt() password backend contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer. The impact could vary depending on the system libraries compiler and processor architecture.

...

7.1CVSS7AI score0.00283EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/11/07 12:00 a.m.12 views

The vulnerability in the implementation of the crypt() function in the system administration software Sudo, which allows a hacker to trigger a service failure.

The vulnerability in the implementation of the crypt function in the system administration program Sudo relates to the ability to read data beyond the buffer in memory during the processing of the plugins/sudoers/auth/passwd.c file. Exploiting this vulnerability could allow an attacker to cause a...

7.1CVSS7.3AI score0.00283EPSS
SaveExploits0References11Affected Software5
Rows per page
Query Builder