SUSE CVE-2010-1163

The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a...

Synology Photo Station Uploader Arbitrary Code Execution Vulnerability

Synology Photo Station Uploader is a suite of applications that allow you to mass upload photos and videos to Photo Station. An arbitrary code execution vulnerability exists in the Synology Photo Station Uploader installer, which can be exploited by a local attacker to execute arbitrary code and...