CVE-2022-38611
https://notcve.org/view.php?id=CVE-2022-38611
Incorrect access control in Watchdog Anti-Virus v1.4.158 allows attackers to perform a DLL hijacking attack and execute arbitrary code via a crafted binary. El control de acceso incorrecto en Watchdog Anti-Virus versión v1.4.158, permite a atacantes llevar a cabo un ataque de secuestro de DLL y ejecutar código arbitrario por medio de un binario diseñado • https://gist.github.com/dru1d-foofus/835423de77c3522d53b9e7bdf5a28dfe •
CVE-2015-4355
https://notcve.org/view.php?id=CVE-2015-4355
Cross-site request forgery (CSRF) vulnerability in the Watchdog Aggregator module for Drupal allows remote attackers to hijack the authentication of administrators for requests that enable or disable monitoring sites via unspecified vectors. Vulnerabilidad de CSRF en el módulo Watchdog Aggregator para Drupal permite a atacantes remotos secuestrar la autenticación de administradores para solicitudes que habilitan o deshabilitan sitios de monitorización a través de vectores no especificados. • http://www.openwall.com/lists/oss-security/2015/04/25/6 http://www.securityfocus.com/bid/72810 https://www.drupal.org/node/2437993 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVE-2015-2831
https://notcve.org/view.php?id=CVE-2015-2831
Buffer overflow in das_watchdog 0.9.0 allows local users to execute arbitrary code with root privileges via a large string in the XAUTHORITY environment variable. Desbordamiento de buffer en das_watchdog 0.9.0 permite a usuarios locales ejecutar código arbitrario con privilegios root a través de una cadena grande en la variable de entorno XAUTHORITY. • http://www.debian.org/security/2015/dsa-3221 http://www.openwall.com/lists/oss-security/2015/04/01/8 http://www.openwall.com/lists/oss-security/2015/04/02/13 http://www.securityfocus.com/bid/73706 https://github.com/kmatheussen/das_watchdog/commit/bd20bb02e75e2c0483832b52f2577253febfb690 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •