CVE-2018-4006

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the writeConfig functionality. A non-root user is able to write a file anywhere on the system. A user with local access can use this vulnerability to raise their privileges to root. An attacker wou...

CVE-2018-4006

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the writeConfig functionality. A non-root user is able to write a file anywhere on the system. A user with local access can use this vulnerability to raise their privileges to root. An attacker wou...

RaiseDreams Crowdfunding System version 2.2.4 SQL Injection Vulnerability in '/User/Handler1.ashx' File

RaiseDreams is an enterprise-level crowdfunding website platform. A SQL injection vulnerability exists in the '/User/Handler1.ashx' file in version 2.2.4 of the RaiseDreams Crowdfunding System, which allows an attacker to exploit the vulnerability to execute SQL statements, as well as add a super...

dbus -- incomplete fix for CVE-2014-3636 part A

Simon McVittie reports: The patch issued by the D-Bus maintainers for CVE-2014-3636 was based on incorrect reasoning, and does not fully prevent the attack described as "CVE-2014-3636 part A", which is repeated below. Preventing that attack requires raising the system dbus-daemon's RLIMITNOFILE...

BitchX IRC Client 75p1/75p3/1.0 c16 "/INVITE" Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1436/info BitchX IRC clients, versions 75 up to and including 1.0c16, are vulnerable to a Denial of Service and possible remote execution of code. By /invite-ing someone to a channel name containing formatting characters...

DEBIAN-CVE-2012-1620

slock 0.9 does not properly handle the XRaiseWindow event when the screen is locked, which might allow physically proximate attackers to obtain sensitive information by pressing a button, which reveals the desktop and active windows...

10 Lebanese government websites taken down by Hacktivist group

Several Lebanese ministry websites were the target of a hack attack Thursday by the group Raise Your Voice, in the second such attack on government-related portals this month. "We are RYV, short for Raise Your Voice, and we are simply a group of people who could not bare sic sitting in silence,...

Lebanese Government sites hacked by 'Raise Your Voice'

Lebanese Government sites hacked by 'Raise Your Voice' A group calling itself 'Raise Your Voice' hacked on Tuesday around 15 Lebanese government websites to ask for an improvement in living standards, the day the parliament launches a three-day session to assess the cabinet's performance. "To our...

Unprivilegued settings for FreeBSD kernel variables

CATEGORY: kern INTRODUCTION: i have found security threat in basic security facility in BSD systems that allows to lower sysctl variable in this case to bypass security settings, root privilegues are needed DESCRIPTION: sysctl8 ... The sysctl utility retrieves kernel state and allows processes wi...

2020-10 Security Only Quality Update for Windows 7 for x86-based Systems (KB4580387)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...