MAPLE Computer WBT SNMP Administrator version 2.0.195.15 remote buffer overflow exploit with egghunter.

fuelCMS versions 1.4.1 and below suffer from a remote code execution vulnerability.

Web Ofisi E-Ticaret version 3 suffers from a remote SQL injection vulnerability.

Web Ofisi Emlak version 3 suffers from a remote SQL injection vulnerability.

Web Ofisi Emlak version 2 suffers from a remote SQL injection vulnerability.

Web Ofisi Platinum E-Ticaret version 5 suffers from a remote SQL injection vulnerability.

REDCap versions prior to 9.1.2 suffer from a cross site scripting vulnerability.

Web Ofisi Firma version 13 suffers from a remote SQL injection vulnerability.

Web Ofisi Rent a Car version 3 suffers from a remote SQL injection vulnerability.

Web Ofisi Firma Rehberi version 1 suffers from a remote SQL injection vulnerability.

Ubuntu Security Notice 4066-1 - It was discovered that libmspack incorrectly handled certain CHM files. A remote attacker could possibly use this issue to access sensitive information.

Ubuntu Security Notice 4065-1 - It was discovered that Squid incorrectly handled Digest authentication. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. It was discovered that Squid incorrectly handled Basic authentication. A remote attacker could use this issue to cause Squid to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 19.04. Various other issues were also addressed.

Wireshark is a GTK+-based network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and Win32 and to give Wireshark features that are missing from closed-source sniffers.

On Microsoft Windows, the RPCSS Activation Kernel RPC server's security callback can be bypassed resulting in elevation of privilege.

WordPress OneSignal plugin version 1.17.5 suffers from a persistent cross site scripting vulnerability.

Ubuntu Security Notice 4064-1 - A sandbox escape was discovered in Thunderbird. If a user were tricked in to installing a malicious language pack, an attacker could exploit this to gain additional privileges. Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, bypass same origin restrictions, conduct cross-site scripting attacks, spoof origin attributes, or execute arbitrary code. Various other issues were also addressed.

Ubuntu Security Notice 4063-1 - Nils Emmerich discovered that LibreOffice incorrectly handled LibreLogo scripts. If a user were tricked into opening a specially crafted document, a remote attacker could cause LibreOffice to execute arbitrary code. Matei "Mal" Badanoiu discovered that LibreOffice incorrectly handled stealth mode. Contrary to expectations, bullet graphics could be retrieved from remote locations when running in stealth mode. Various other issues were also addressed.

Oracle Siebel CRM version 19.0 suffers from a persistent cross site scripting vulnerability.

Ubuntu Security Notice 4059-2 - USN-4059-1 and USN-3557-1 fixed several vulnerabilities in Squid. This update provides the corresponding update for Ubuntu 12.04 ESM. Louis Dion-Marcil discovered that Squid incorrectly handled certain Edge Side Includes responses. A malicious remote server could possibly cause Squid to crash, resulting in a denial of service. Various other issues were also addressed.

MAPLE Computer WBT SNMP Administrator version 2.0.195.15 suffers from a buffer overflow vulnerability that allows for code execution.

Debian Linux Security Advisory 4483-1 - Two security issues have been discovered in LibreOffice.

Huawei HG530 suffers from unauthenticated remote reboot and restore vulnerabilities.

WinMPG iPod Convert version 3.0 Register flow denial of service proof of concept exploit.

Sysdig falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco will notify you when these rules are violated. You can think about falco as a mix between snort, ossec and strace.