1828 matches found
powerpc-utils: snap creates archives with fstab and yaboot.conf which may expose certain passwords
A flaw was found in the way the snap utility of powerpc-utils generated an archive containing a configuration snapshot of a service. A local attacker could obtain sensitive information from the generated archive such as plain text passwords...
Low: Red Hat Security Advisory: powerpc-utils security, bug fix, and enhancement update
Updated powerpc-utils packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives...
CVE-2014-5615
The Snap Secure aka com.exclaim.snapsecure.app application 9.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Snap Secure aka com.exclaim.snapsecure.app application 9.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5615
CVE-2014-5615 affects the Snap Secure app (com.exclaim.snapsecure.app) version 9.5 for Android, where SSL/TLS certificate verification is not performed. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via crafted certificates. The vulnerability details ar...
CVE-2014-5615
The Snap Secure aka com.exclaim.snapsecure.app application 9.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
IBM AIX <= 4.2.1 snap Insecure Temporary File Creation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/375/info The snap command is a diagnostic utlitiy for gathering system information on AIX platforms. It can only be executed by root, but it copies various system files into /tmp/ibmsupt/ under /tmp/ibmsupt/general/ you...
UBUNTU-CVE-2014-4040
snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a...
CVE-2013-4299
Interpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6 allows remote authenticated users to obtain sensitive information or modify data via a crafted mapping to a snapshot block device...
kernel: dm: dm-snapshot data leak
Interpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6 allows remote authenticated users to obtain sensitive information or modify data via a crafted mapping to a snapshot block device...
PEStudio 3.69 - Denial of Service
Exploit for windows platform in category remote exploits Title: PEStudio Version 3.69 Denial of Service Date: 5th June 2013 Author: Debasish Mandal https://twitter.com/debasishm89 Blog : http://www.debasish.in/ Software Homepage: http://www.winitor.com/ Version: PEStudio Version 3.69 Tested on:...
Site Go - multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Site Go - multiple Vulnerabilities D0rk: allintitle: "بوابة التدوين" Date: 12.mar.29 Author: L3b-r1'z Email Me : email protected \ email protected Security : Low Xss Vuln : in search b0x , you can put alert"Sec3ever" And you wil...
Multiple Snap Appliance (SnapServer) Bypass Vulnerabilities
Exploit Title: Multiple Snap Appliance SnapServer Vulnerabilities Date: 13-02-2011 Author: SeeMe Vendor Link: http://www.overlandstorage.com/ Effected Versions: N/A Multiple SnapAppliance SnapServer suffers from Multi-vulnerabilities which allows unprivileged users to view and modify Storage-Data...
HyperStrike Integration With Snap Fitness SSO Bypass
HyperStrike Integration with Snap Fitness, SSO Bypass Vulnerability Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability existed within the single sign-on SSO integration of HyperStrike and Snap Fitness websites. By altering the defined...
Google Chrome 4.1.249.1064 - Remote Memory Corrupt
Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm eidelweiss member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Save this script...
Google Chrome v4.0.249 XML Denial of Service PoC
Exploit for windows platform in category dos / poc ================================================ Google Chrome v4.0.249 XML Denial of Service PoC ================================================ Exploit Title: Google Chrome 4.0.249 XML PoC Date: 3/6/2009 Author: Blade Software Link:...
CVE-2009-4607
The command line interface in Overland Storage Snap Server 410 with GuardianOS 5.1.041 runs the "less" utility with a higher-privileged uid than the CLI user and without sufficient restriction on shell escapes, which allows local users to gain privileges using the "!" character within less to...
Design/Logic Flaw
The command line interface in Overland Storage Snap Server 410 with GuardianOS 5.1.041 runs the "less" utility with a higher-privileged uid than the CLI user and without sufficient restriction on shell escapes, which allows local users to gain privileges using the "!" character within less to...
CVE-2009-4607
CVE-2009-4607 affects Overland Storage Snap Server 410 with GuardianOS 5.1.041. The CLI runs the less utility with a higher-privileged uid than the invoking user and does not sufficiently restrict shell escapes, enabling a local attacker to gain a privileged shell via the ! escape in less (local ...
CVE-2009-4607
The command line interface in Overland Storage Snap Server 410 with GuardianOS 5.1.041 runs the "less" utility with a higher-privileged uid than the CLI user and without sufficient restriction on shell escapes, which allows local users to gain privileges using the "!" character within less to...