USN-4804-1 puppet vulnerabilities

It was discovered that Puppet installed modules with world writable permissions. An attacker could use this vulnerability to execute arbitrary code or cause a denial of service. CVE-2017-10689 It was discovered that Puppet could be used to force YAML deserialization in an unsafe manner. A remote...

Windows Server 2012 SrClient DLL Hijacking

class MetasploitModule 'Windows Server 2012 SrClient DLL hijacking', 'Description' = %q All editions of Windows Server 2012 but not 2012 R2 are vulnerable to DLL hijacking due to the way TiWorker.exe will try to call the non-existent SrClient.dll file when Windows Update checks for updates. This...

OESA-2021-1084 kata-containers security update

This is core component of Kata Container, to make it work, you need a isulad/docker engine. Security Fixes: An improper file permissions vulnerability affects Kata Containers prior to 1.11.5. When using a Kubernetes hostPath volume and mounting either a file or directory into a container as...

CVE-2021-26028

An issue was discovered in Joomla! 3.0.0 through 3.9.24. Extracting an specifilcy crafted zip package could write files outside of the intended path...

CVE-2021-27804

JPEG XL aka jpeg-xl through 0.3.2 allows writable memory corruption...

PT-2021-11125

Name of the Vulnerable Software and Affected Versions: DIGSI 4 versions prior to V4.94 SP1 HF 1 Description: A security issue has been found where several folders in the %PATH% are writable by normal users. Since these folders are included in the search for dlls, an attacker could potentially pla...

SolarWinds Serv-U FTP Server Authorization Issues Vulnerability

SolarWinds Serv-U FTP Server is a suite of FTP and MFT file transfer software from the US-based SolarWinds Corporation. A security vulnerability exists in SolarWinds Serv-U before 15.2.2 Hotfix 1, which stems from a directory containing a user configuration file which includes a user's password...

CVE-2020-6024

Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vulnerable to a possible local privilege escalation due to running executables from a directory with write access to all authenticated users...

Check Point Smartconsole Security Vulnerability

Check Point Smartconsole is a desktop application for managing Check point environments from Check Point USA. A security vulnerability exists in Check Point SmartConsole that originates from running an executable file from a directory to which all authenticated users have write access, potentiall...

PT-2021-12493

Name of the Vulnerable Software and Affected Versions: Check Point SmartConsole versions prior to R80.10 Build 185 Check Point SmartConsole versions prior to R80.20 Build 119 Check Point SmartConsole versions prior to R80.30 Build 94 Check Point SmartConsole versions prior to R80.40 Build 415 Che...

Wyse ThinOS Licensing Issues Vulnerability

Wyse ThinOS is a specialized operating system for Dell servers from Dell USA. A security vulnerability exists in Wyse ThinOS 8.6 and prior versions, which can be exploited by an attacker to access writable files and manipulate the configuration of any targeted specific site...

Fluentd TD-agent plugin 4.0.1 - Insecure Folder Permission Vulnerability

Exploit Title: Fluentd TD-agent plugin 4.0.1 - Insecure Folder Permission Exploit Author: Adrian Bondocea Vendor Homepage: https://www.fluentd.org/ Software Link: https://td-agent-package-browser.herokuapp.com/4/windows Version: icacls C:\opt\td-agent\bin C:\opt\td-agent\bin...

Dell Wyse ThinOS 授权问题漏洞

Wyse ThinOS is a specialized operating system for Dell servers from Dell USA. A security vulnerability exists in Wyse ThinOS 8.6 and prior versions, which can be exploited by an attacker to access writable files and manipulate the configuration of any targeted specific site...

CVE-2020-25507

An incorrect permission assignment during the installation script of TeamworkCloud 18.0 thru 19.0 allows a local unprivileged attacker to execute arbitrary code as root. During installation, the user is instructed to set the system enviroment file with world writable permissions 0777...

Code injection

An incorrect permission assignment during the installation script of TeamworkCloud 18.0 thru 19.0 allows a local unprivileged attacker to execute arbitrary code as root. During installation, the user is instructed to set the system enviroment file with world writable permissions 0777...

CVE-2020-28169

The td-agent-builder plugin before 2020-12-18 for Fluentd allows attackers to gain privileges because the bin directory is writable by a user account, but a file in bin is executed as NT AUTHORITY\SYSTEM...

PT-2020-16936

Name of the Vulnerable Software and Affected Versions td-agent-builder plugin for Fluentd versions prior to 2020-12-18 Description The issue allows attackers to gain privileges because the bin directory is writable by a user account, but a file in bin is executed as NT AUTHORITYSYSTEM...

Kenhys Td Agent Builder Permission License and Access Control Issues Vulnerability

Kenhys Td Agent Builder is a Ruby-based software for collecting various types of log information by the individual developer Kenhys. Fluentd td-agent-builder plugin before 2020-12-18 A security vulnerability exists that could be exploited by an attacker to gain privileges because the bin director...

Exploit for Command Injection in Saltstack Salt

CVE-2020-28243 A command injection vulnerability in SaltStack...

PT-2020-17179

Name of the Vulnerable Software and Affected Versions Dell Wyse ThinOS versions 8.6 and prior Description The issue is related to an insecure default configuration, which could be exploited by a remote unauthenticated attacker to access a writable file and manipulate the configuration of any targ...