The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via...
Read More[This is the first part of a multi-part a guest diary written byDr. Ali Dehghantanha] One of the nightmares of any forensics investigator is to come across a new or undocumented platform or application during an investigation...
Read Morentopng before 3.0 allows HTTP Response Splitting.
Read MorePassword exposure in Cognito Software Moneyworks 8.0.3 and earlier allows attackers to gain administrator access to all data, because verbose logging writes the administrator password to a world-readable file.
Read MoreThe executable httpd on the TP-Link WR841N V8 router before TL-WR841N(UN)_V8_170210 contained a design flaw in the use of DES for block encryption. This resulted in incorrect access control, which allowed attackers to gain...
Read More