The GNU tar archiver can be tricked into extracting files and directories in the given destination, regardless of the path name(s) specified on the command line. Versions 1.14 through 1.29 are affected.
http://phanhospital.go.th/my.html notified by Prosox
Tags: defacementSysdig falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco will notify you when these rules are violated. You […]
BigTree CMS version 4.2.13 suffers from a cross site request forgery vulnerability.
SmallFTPd version 1.0.3 suffers from a mkd command denial of service vulnerability.
Komfy Switch with Camera DKZ-201S/W suffers from a wifi password disclosure vulnerability.
task_t should be considered harmful and can lead to many XNU elevations of privilege.
Boonex Dolphin versions 7.3 and below suffer from an authentication bypass vulnerability.
Hewlett Packard TouchSmart Calendar Service version 4.1.4245 suffers from a privilege escalation vulnerability.
http://khukhan.go.th/by.htm notified by GeNErAL
Tags: defacement