David

A SQL injection flaw exists in the `get()` function within the `edit accounts.php` file. This issue occurs when the `user id`, `patient id`, `physician id`, `discounts id`, or `services id` arguments are manipulated, allowing for remote exploitation.

theshit is a command-line utility designed to identify and correct common errors in shell commands. Prior to version 0.1.1, the application loads custom Python rules and configuration files from user-writable locations, such as `~/.config/theshit/`, without validating ownership or permissions when run with elevated privileges. If executed with `sudo` or as root, the tool trusts configuration files from the unprivileged user's environment. This allows a local attacker to inject arbitrary Python code through a malicious rule or configuration file, which is then executed with root privileges. Any system where the tool is executed with elevated privileges is affected. In environments where the tool is permitted to run via `sudo` without a password, a local unprivileged user can escalate privileges to root without further interaction. The issue stems from insufficient validation of configuration file ownership and permissions. The application loads files without verifying that they are owned by the effective user executing the tool. When running with elevated privileges, it fails to enforce that rules are owned by root or are not writable by non-root users. This allows for the execution of untrusted code with root privileges.

A Missing Authorization issue is present in the Putler / Storeapps Putler Connector for WooCommerce. This issue allows for unauthorized access.

The issue is related to insufficient authorization checks, which could allow unauthenticated attackers to obtain a valid admin session by logging in as another user. This could impact the integrity, availability, and confidentiality of protected information.

Name of the Vulnerable Software and Affected Versions: foo2zjs versions prior to 20110722dfsg-3ubuntu1 foo2zjs version 20110722dfsg-1 foo2zjs version 20090908dfsg-5.1+squeeze0 Description: The issue allows local users to write over arbitrary files via a symlink attack on /tmp/foo2zjs, due to insecure creation of temporary files. Recommendations: For foo2zjs version 20110722dfsg-1, update to a version later than 20110722dfsg-1 to resolve the issue. For foo2zjs version 20090908dfsg-5.1+squeeze0, update to a version later than 20090908dfsg-5.1+squeeze0 to resolve the issue. For foo2zjs versions prior to 20110722dfsg-3ubuntu1, update to version 20110722dfsg-3ubuntu1 or later to resolve the issue.

The issue allows context-dependent attackers to execute arbitrary code via vectors related to the use of the `yaml.load` function instead of the `yaml.safe load` function, as demonstrated using Puppet. This is due to a problem in the `set mgmt parameters` function in item.py.

The issue concerns the failure to validate the server certificate when downloading PPA GPG key fingerprints. This allows man-in-the-middle (MITM) attackers to spoof GPG keys for a package repository.

The issue allows man-in-the-middle attackers to create or overwrite arbitrary files via a directory traversal attack using a crafted tar file, or bypass authentication via a crafted meta-release file, due to the lack of GPG signature verification before extracting an upgrade tarball.

The issue arises from improper creation of temporary files in the Update Manager, allowing local users to potentially obtain sensitive information, such as the XAUTHORITY file content, via a symlink attack on the temporary file.

The issue allows local users to overwrite arbitrary files via a symlink attack on a file in the /tmp/pip-build temporary directory.

The issue concerns the HTMLQuoteColorer::process function in messageviewer/htmlquotecolorer.cpp, which fails to disable JavaScript, Java, and Plugins. This allows remote attackers to inject arbitrary web script or HTML via a crafted email.

The issue allows local users to gain privileges via a crafted Lisp expression in a Project.ede file. This can occur when the file is located in the directory, or a parent directory, of an opened file.

A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences. This can be achieved by crafting a nickname field to the "vserver/apply" endpoint.

The issue allows local users to write to arbitrary files via a symlink attack on the HH LOG file or the REPORT LOG file.