CVE-2018-11711

A remote attacker can bypass the System Manager Mode on the Canon MF210 and MF220 web interface without knowing the PIN for /login.html via vectors involving /portaltop.html to get full access to the device. NOTE: the vendor reportedly responded that this issue occurs when a customer keeps the...

AV-TEST’s April 2018 Windows Home User Test Report Shows 100% Protection Result and Top Product Award for Trend Micro Internet Security

Maintaining its Top Product protection rating, Trend Micro Internet Security 12.0 2018 continues to show 100% Protection results in tests conducted by the internationally respected testing lab AV-TEST.org. In its Mar-Apr 2018 test of 18 endpoint security products on Windows 10, the latest release...

PT-2018-10769 · Canon · Canon Mf210 +1

Name of the Vulnerable Software and Affected Versions: Canon MF210 and MF220 versions affected versions not specified Description: A remote attacker can bypass the System Manager Mode on the Canon MF210 and MF220 web interface without knowing the PIN for "/login.html" via vectors involving "/port...

top-law-schools.com XSS vulnerability

Open Bug Bounty ID: OBB-625875 Description| Value ---|--- Affected Website:| top-law-schools.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PHP Code Injection

phpWhois PHP Code Injection\nVulnerability Overview\nphpWhois and some of its forks in versions before 5.1.0 are prone to a\ncode injection vulnerability due to insufficient sanitization of returned\nWHOIS data. This allows attackers controlling the WHOIS information of a\nrequested domain to...

PHP Code Injection

phpWhois PHP Code Injection Vulnerability Overview phpWhois and some of its forks in versions before 5.1.0 are prone to a code injection vulnerability due to insufficient sanitization of returned WHOIS data. This allows attackers controlling the WHOIS information of a requested domain to execute...

extratorrents4.top XSS vulnerability

Open Bug Bounty ID: OBB-621940 Description| Value ---|--- Affected Website:| extratorrents4.top Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

procps-ng elevation of privilege vulnerability

procps-ng is a utility used on Linux platforms to provide information about proc filesystem processes. An elevation of privilege vulnerability exists in the 'configfile' function of top in versions of procps-ng prior to 3.3.15. A local attacker can exploit this vulnerability to elevate privileges...

[SECURITY] Fedora 27 Update: procps-ng-3.3.10-16.fc27

The procps package contains a set of system utilities that provide system information. Procps includes ps, free, skill, pkill, pgrep, snice, tload, top, uptime, vmstat, w, watch and pwdx. The ps command displays a snapshot of running processes. The top command provides a repetitive update of the...

USN-3658-1 procps vulnerabilities

It was discovered that the procps-ng top utility incorrectly read its configuration file from the current working directory. A local attacker could possibly use this issue to escalate privileges. CVE-2018-1122 It was discovered that the procps-ng ps tool incorrectly handled memory. A local user...

DEBIAN-CVE-2018-1122

procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset in an attacker-controlled directory, the attacker could achieve privilege escalation by exploiting one of several vulnerabilities in the configfile function...

CVE-2018-1122

Procps-ng: Local privilege escalation in top (CVE-2018-1122) due to config_file() in top when HOME is unset in attacker-controlled directory. Affected: procps-ng prior to 3.3.15. Impact: local privilege escalation; Mitigation: upgrade to procps-ng 3.3.15 or newer (per multiple advisories). No exp...

CVE-2018-1122

procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset in an attacker-controlled directory, the attacker could achieve privilege escalation by exploiting one of several vulnerabilities in the configfile function...

top-page.ru XSS vulnerability

Open Bug Bounty ID: OBB-620031 Description| Value ---|--- Affected Website:| top-page.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

top-brille.de XSS vulnerability

Open Bug Bounty ID: OBB-619985 Description| Value ---|--- Affected Website:| top-brille.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Procps-ng Audit Report

Qualys Security Advisory Procps-ng Audit Report ======================================================================== Contents ======================================================================== Summary 1. FUSE-backed /proc/PID/cmdline 2. Unprivileged process hiding 3. Local Privilege...

UBUNTU-CVE-2018-1122

procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset in an attacker-controlled directory, the attacker could achieve privilege escalation by exploiting one of several vulnerabilities in the configfile function...

CVE-2018-1122

procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset in an attacker-controlled directory, the attacker could achieve privilege escalation by exploiting one of several vulnerabilities in the configfile function...

MSTAR Set-Top BOX Command Injection Vulnerability

Exploit for hardware platform in category local exploits While I was working on diagnostic device for some of my clients I found command injections in MSTAR Set-Top box products. Diagnostic device is not specialy target this vendor but we used it in development phase and for testing. Vulnerable...

Oracle PeopleSoft Enterprise PRTL Interaction Hub Remote Vulnerability (CNVD-2018-09218)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and other capabilities.PeopleSoft Enterprise PRTL Interaction Hub is one of the interactive components...