CVE-2019-8568

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A local user may be able to modify protected parts of the file system...

CVE-2019-1423

An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1420, CVE-2019-1422...

PT-2019-2990 · Microsoft · Windows Defender

Name of the Vulnerable Software and Affected Versions: Windows Defender affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the MpSigStub.exe file for Defender, allowing file deletion in arbitrary locations. To exploit this, an attacker...

Privilege escalation

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the deleteConfig functionality. The program is able to delete any protected file on the system. An attacker would need local access to the machine to successfully exploit the bug...

CVE-2018-4007

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the deleteConfig functionality. The program is able to delete any protected file on the system. An attacker would need local access to the machine to successfully exploit the bug...

Apple macOS file modification vulnerability

macOS is Apple's proprietary operating system for the Mac line of products. A file modification vulnerability exists in the EFI component in Apple macOS High Sierra 10.13.6, macOS Mojave 10.14. A local user can exploit the vulnerability to modify protected portions of the file system...

CVE-2017-2744

The vulnerability allows attacker to extract binaries into protected file system locations in HP Support Assistant before 12.7.26.1...

The vulnerability of the Android CAF-release operating system, due to insufficient validation of input data, allows a perpetrator to cause damage to the protected file system.

The vulnerability of the Android CAF-release operating system exists due to insufficient checks on input data. Exploiting this vulnerability can allow a remote attacker to cause damage to the protected file system...

Unspecified Vulnerability in Mozilla Firefox and Firefox ESR for Windows (CNVD-2017-12555)

Mozilla Firefox for Windows is an open source web browser for the Windows platform from the Mozilla Foundation in the U.S. Firefox ESR for Windows is an extended support version of Firefox for the Windows platform. A security vulnerability exists in Mozilla Firefox versions prior to 54 and Firefo...

CVE-2017-7574

Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability. The Project Protection feature is used to prevent unauthorized users from opening an XML protected project file, by prompting the user for a password. This XML...

ASP.NET source code disclosure

It's possible to retrieve source codes for scripts and executable, except protected file extensions...

Multiple Sun Solaris vulnerabilities

File system privilege management feature panic. procfs protected file names information leak...

CVE-2001-1172

OmniSecure HTTProtect 1.1.1 is affected by a local privilege escalation: a superuser without omnish privileges can modify a protected file by creating a symbolic link to that file. Root cause is improper protection against symbolic link exploitation in HTTProtect, allowing bypass of protection me...

[SecurityOffice] LocalWeb2000 Web Server Protected File Access Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---- LocalWeb2000 Web Server Protected File Access Vulnerability ---- - ---- Type File Disclosure - ---- Release Date May 24, 2002 - ---- Product / Vendor LocalWEB2000 is an HTTP server for the Windows suite of operating systems. LocalWEB2000 is...

SecurityOffice Security Advisory:// LilHTTP Web Server Protected File Access Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 LilHTTP Web Server Protected File Access Vulnerability Type: File Disclosure Release Date: February 21, 2002 Product / Vendor: LilHTTP Web Server is very small yet powerfull Web Server. This server weighs in at just under 120k in size as a stand-alone...

PT-2001-2309 · Omnisecure · Omnisecure Httprotect

Name of the Vulnerable Software and Affected Versions: OmniSecure HTTProtect version 1.1.1 Description: The issue allows a superuser without omnish privileges to modify a protected file. This can be achieved by creating a symbolic link to the protected file, thereby bypassing the intended...

[SNS Advisory No.37] HTTProtect allows attackers to change the protected file using a symlink

----------------------------------------------------------------------- SNS Advisory No.37 HTTProtect allows attackers to change the protected file using a symlink Problem first discovered: Mon, 4 Jun 2001 Published: Wed, 18 Jul 2001...

excel.macro.virus.patch.flaw.txt

Date: Thu, 13 May 1999 16:12:48 -0400 From: rotaiv To: [email protected] Subject: Re: Microsoft Security Bulletin MS99-014 -----BEGIN PGP SIGNED MESSAGE----- This is in response to the Microsoft Security Bulletin MS99-014. On 3/29/99 I posted a message to BugTraq titled, "Bypassing Excel Macro...