3373 matches found
CVE-2016-8856
Foxit Reader for Mac 2.1.0.0804 and earlier and Foxit Reader for Linux 2.1.0.0805 and earlier suffered from a vulnerability where weak file permissions could be exploited by attackers to execute arbitrary code. After the installation, Foxit Reader's core files were world-writable by default,...
CVE-2016-8856: Undefined Security Weakness
Foxit Reader for Mac 2.1.0.0804 and earlier and Foxit Reader for Linux 2.1.0.0805 and earlier suffered from a vulnerability where weak file permissions could be exploited by attackers to execute arbitrary code. After the installation, Foxit Reader's core files were world-writable by default,...
PT-2016-7597
Name of the Vulnerable Software and Affected Versions Foxit Reader for Mac versions 2.1.0.0804 and earlier Foxit Reader for Linux versions 2.1.0.0805 and earlier Description The issue is related to weak file permissions that could be exploited by attackers to execute arbitrary code. After...
OpenNMS - Java Object Unserialization Remote Code Execution (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'OpenNMS Java Object Unserialization Remote Code Execution', 'Description' = %q This module exploits a vulnerability in the...
OpenNMS Java Object Unserialization Remote Code Execution
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'OpenNMS Java Object Unserialization Remote Code Execution', 'Description' = %q This module exploits a vulnerability in the...
Magento Community Edition 2.x < 2.0.6 Multiple Vulnerabilities
Binary data 9694.prm...
Security update for systemd (important)
This update for systemd fixes the following security issue: - CVE-2016-7796: A zero-length message received over systemd's notification socket could make managerdispatchnotifyfd return an error and, as a side effect, disable the notification handler completely. As the notification socket is...
tomcat: tomcat writable config files allow privilege escalation
It was discovered that the Tomcat packages installed certain configuration files read by the Tomcat initialization script as writeable to the tomcat group. A member of the group or a malicious web application deployed on Tomcat could use this flaw to escalate their privileges...
tomcat: tomcat writable config files allow privilege escalation
It was discovered that the Tomcat packages installed certain configuration files read by the Tomcat initialization script as writeable to the tomcat group. A member of the group or a malicious web application deployed on Tomcat could use this flaw to escalate their privileges...
tomcat: Local privilege escalation via systemd-tmpfiles service
It was discovered that the Tomcat packages installed configuration file /usr/lib/tmpfiles.d/tomcat.conf writeable to the tomcat group. A member of the group or a malicious web application deployed on Tomcat could use this flaw to escalate their privileges...
Oracle MySQL 'my.conf' Security Bypass Vulnerability - Windows
Oracle MySQL is prone to a security bypass vulnerability. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Oracle MySQL 'my.conf' Security Bypass Vulnerability - Linux
Oracle MySQL is prone to a security bypass vulnerability. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Docker Daemon - Local Privilege Escalation (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Docker Daemon Privilege Escalation', 'Description' = %q This module obtains root privileges from any host account with access to the Docker daemon...
ZKTeco ZKTime.Net Insecure File Elevation of Privilege Vulnerability
ZKTime.Net V3.0 is a new generation of attendance management software. ZKTeco ZKTime.Net 3.0.1.6 suffers from an insecure file elevation of privilege vulnerability. The vulnerability exists due to incorrect permissions, flagged changed with 'C' for the group 'Everyone', making the entire director...
VUPlayer 2.49 .pls Stack Buffer Overflow
!/usr/bin/python import os,sys Tested Windows 7 Home x86 & Windows 10 Home x86x64 badchars \x00\x0a\x1a\x20\x40 msfvenom -a x86 --platform windows -p windows/exec CMD=calc.exe -b "\x00\x0a\x1a\x20\x40" -f python buf = "" buf += "\xbf\x3b\x99\xdd\xa3\xdb\xc4\xd9\x74\x24\xf4\x58\x29" buf +=...
CVE-2016-1611
Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.sh, which allows local users to gain privileges by replacing this file's content with arbitrary shell commands...
CVE-2016-1611
Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.sh, which allows local users to gain privileges by replacing this file's content with arbitrary shell commands...
CVE-2016-1611
CVE-2016-1611 affects Micro Focus (Novell) Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2. The issue is world-writable permissions on /etc/profile.d/vainit.sh, allowing a local user to replace the file and gain privileges (local privilege escalation). Affected versions include Filr 1.2 an...
CVE-2016-1611: Undefined Security Weakness
Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.sh, which allows local users to gain privileges by replacing this file's content with arbitrary shell commands...
