6355 matches found
CVE-2013-2777: Undefined Security Weakness
sudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the ttytickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to a session without a controlling...
CVE-2013-2776: Undefined Security Weakness
sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or the sysctl function with the ttytickets option enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another...
PT-2013-1250
Name of the Vulnerable Software and Affected Versions sudo versions prior to 1.8.6p7 sudo versions 1.8.x prior to 1.8.6p6 sudo versions prior to 1.7.10p5 Description The issue affects the sudo package in Gentoo Linux, potentially compromising confidentiality, integrity, and availability of...
CVE-2013-1776: Undefined Security Weakness
sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the ttytickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard...
China Mobile self-service terminal to bypass the sandbox-vulnerability warning-the black bar safety net
Brief description: After login, click a query item, a long press on the image after the pop-up Save Image option. Detailed description: 1, The! 2, The after login select—"bill query"—the"tariff of gold Abacus"—query within the picture by long pressing it will bring up the Save Image options such ...
Apache Httpd < 2.0.65 : mod_rewrite log escape filtering
modrewrite does not filter terminal escape sequences from logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences...
Apache Httpd < 2.2.25 : mod_rewrite log escape filtering
modrewrite does not filter terminal escape sequences from logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences...
[JSQL v0.3] Java Tool for Automatic Database Injection
jSQL Injection is a lightweight application used to find database information from a distant server. jSQL is free, open source and cross-platform Windows, Linux, Mac OS X, Solaris. Version 0.2 features: GET, POST, header, cookie methods normal, error based, blind, time based algorithms automatic...
Immunity Canvas: SUDO_TIMESTAMP
Name| sudotimestamp ---|--- CVE| CVE-2013-1775 Exploit Pack| CANVAS Description| sudotimestamp: Linux/MacOS timestamp privilege escalation Notes| CVE Name: CVE-2013-1775 VENDOR: Intel, GNU/Linux, Apple Notes: This exploit runs on GNU/Linux and MacOS X. On both systems this exploit requires: - Use...
Fedora Update for dtach FEDORA-2013-2923
Check for the Version of dtach OpenVAS Vulnerability Test Fedora Update for dtach FEDORA-2013-2923 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
sudo -- Potential bypass of tty_tickets constraints
Todd Miller reports: A potentially malicious program run by a user with sudo access may be able to bypass the "ttyticket" constraints. In order for this to succeed there must exist on the machine a terminal device that the user has previously authenticated themselves on via sudo within the last...
Terminal Services Use SSL/TLS
The remote Terminal Services is configured to use SSL/TLS. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid64814; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/07/10"; scriptnameenglish:"Terminal Services Use SSL/TLS";...
sudo: bypass of tty_tickets constraints
sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the ttytickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard...
Bastillion
!Buildhttps://github.com/bastillion-io/Bastillion/actions/wor...
PT-2012-5685
Name of the Vulnerable Software and Affected Versions VeriFone VeriCentre Web Console versions prior to 2.2 build 36 Description The issue concerns SQL injection vulnerabilities in the terminal/paramedit.aspx file. Remote attackers can execute arbitrary SQL commands by manipulating the TerminalId...
CVE-2012-4951: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attackers to execute arbitrary SQL commands via the 1 TerminalId, 2 ModelName, or 3 ApplicationName parameter...
MyAuth3 - Blind SQL Injection
MyAuth3 - Blind SQL Injection Exploit Title: MyAuth3 Blind SQL Injection / Root Shell Access 0day exploit Google Dork: allinurl:1881/?console=panel Date: 09/06/2011 Author: Marcio Almeida marcioatalligatorteamdot org | @marcioalm Version: 3.0 Tested on: Linux EDB-Note: apparently no true exploit ...
MyAuth3 - Blind SQL Injection
Exploit Title: MyAuth3 Blind SQL Injection / Root Shell Access 0day exploit Google Dork: allinurl:1881/?console=panel Date: 09/06/2011 Author: Marcio Almeida marcioatalligatorteamdot org | @marcioalm Version: 3.0 Tested on: Linux EDB-Note: apparently no true exploit is needed to dump system pwd...
MyAuth3 Blind SQL Injection
Exploit Title: MyAuth3 Blind SQL Injection / Root Shell Access 0day exploit Google Dork: allinurl:1881/?console=panel Date: 09/06/2011 Author: Marcio Almeida marcioatalligatorteamdotorg | @marcioalm Version: 3.0 Tested on: Linux EDB-Note: apparently no true exploit is needed to dump system pwd...
