Twenty Year Anniversary
Showing 1 - 25 of 101,591 RSS Feed

Files

AF_PACKET chocobo_root Privilege Escalation
Posted May 22, 2018
Authored by rebel, Brendan Coles | Site metasploit.com

This Metasploit module exploits a race condition and use-after-free in the packet_set_ring function in net/packet/af_packet.c (AF_PACKET) in the Linux kernel to execute code as root (CVE-2016-8655). The bug was initially introduced in 2011 and patched in 2016 in version 4.4.0-53.74, potentially affecting a large number of kernels; however this exploit targets only systems using Ubuntu (Trusty / Xenial) kernels 4.4.0 < 4.4.0-53, including Linux distros based on Ubuntu, such as Linux Mint. The target system must have unprivileged user namespaces enabled and two or more CPU cores. Bypasses for SMEP, SMAP and KASLR are included. Failed exploitation may crash the kernel. This Metasploit module has been tested successfully on Linux Mint 17.3 (x86_64); Linux Mint 18 (x86_64); and Ubuntu 16.04.2 (x86_64) with kernel versions 4.4.0-45-generic and 4.4.0-51-generic.

tags | exploit, kernel, root
systems | linux, ubuntu
advisories | CVE-2016-8655
MD5 | 4e74e49fb99838182c2b1099fc25b230
ILIAS 5.3.2 / 5.2.14 / 5.1.25 Cross Site Scripting
Posted May 22, 2018
Authored by Moritz Bechler

ILIAS versions 5.3.2, 5.2.14, and 5.1.25 suffer from a cross site scripting vulnerability.

tags | exploit, xss
advisories | CVE-2018-10428
MD5 | e040c53ef97a1cf82b56b47ee94179a8
Red Hat Security Advisory 2018-1630-01
Posted May 22, 2018
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2018-1630-01 - The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Issues addressed include a bypass vulnerability.

tags | advisory, kernel, bypass
systems | linux, redhat
advisories | CVE-2018-3639
MD5 | 69027405b66a9d47b61f199b6db17fab
Teradek VidiU Pro 3.0.3 Change Password Cross Site Request Forgery
Posted May 21, 2018
Authored by LiquidWorm | Site zeroscience.mk

Teradek VidiU Pro version 3.0.3 change password cross site request forgery exploit.

tags | exploit, csrf
MD5 | 115198b7fedbb857773cdf3075ec2c62
GitBucket 4.23.1 Remote Code Execution / Arbitrary File Read
Posted May 21, 2018
Authored by Kacper Szurek

GitBucket version 4.23.1 suffers from remote code execution and arbitrary file read vulnerabilities.

tags | exploit, remote, arbitrary, vulnerability, code execution
MD5 | 11844999aa0564bbefc3be466336456d
Ubuntu Security Notice USN-3653-1
Posted May 21, 2018
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 3653-1 - Jann Horn and Ken Johnson discovered that microprocessors utilizing speculative execution of a memory read may allow unauthorized memory reads via a sidechannel attack. This flaw is known as Spectre Variant 4. A local attacker could use this to expose sensitive information, including kernel memory. It was discovered that the netlink subsystem in the Linux kernel did not properly restrict observations of netlink messages to the appropriate net namespace. A local attacker could use this to expose sensitive information. Various other issues were also addressed.

tags | advisory, kernel, local
systems | linux, ubuntu
advisories | CVE-2017-17449, CVE-2017-17975, CVE-2017-18203, CVE-2017-18208, CVE-2018-3639, CVE-2018-8822
MD5 | d2121073ebaaf6b8711069fd05c71d2c
Ubuntu Security Notice USN-3652-1
Posted May 21, 2018
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 3652-1 - Jann Horn and Ken Johnson discovered that microprocessors utilizing speculative execution of a memory read may allow unauthorized memory reads via a sidechannel attack. This flaw is known as Spectre Variant 4. A local attacker could use this to expose sensitive information, including kernel memory.

tags | advisory, kernel, local
systems | linux, ubuntu
advisories | CVE-2018-3639
MD5 | 40cb02f366a158bd0e7c8355d9613112
Ubuntu Security Notice USN-3651-1
Posted May 21, 2018
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 3651-1 - Ken Johnson and Jann Horn independently discovered that microprocessors utilizing speculative execution of a memory read may allow unauthorized memory reads via sidechannel attacks. An attacker in the guest could use this to expose sensitive guest information, including kernel memory. This update allows QEMU to expose new CPU features added by microcode updates to guests on amd64 and i386.

tags | advisory, kernel
systems | linux, ubuntu
advisories | CVE-2018-3639
MD5 | 37d74fc3cc5c45d86571a4d0fe217013
Teradek VidiU Pro 3.0.3 Server-Side Request Forgery
Posted May 21, 2018
Authored by LiquidWorm | Site zeroscience.mk

Teradek VidiU Pro version 3.0.3 suffers from a server-side request forgery vulnerability.

tags | exploit
MD5 | 488097c41ddd0c67e161fdff46ba8227
Debian Security Advisory 4204-1
Posted May 21, 2018
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4204-1 - This update fixes several vulnerabilities in imagemagick, a graphical software suite. Various memory handling problems or issues about incomplete input sanitizing would result in denial of service or memory disclosure.

tags | advisory, denial of service, vulnerability
systems | linux, debian
advisories | CVE-2017-10995, CVE-2017-11533, CVE-2017-11535, CVE-2017-11639, CVE-2017-13143, CVE-2017-17504, CVE-2017-17879, CVE-2018-5248
MD5 | b2041a18c86e6378b0dd734443fadc12
VMware Security Advisory 2018-0013
Posted May 21, 2018
Authored by VMware | Site vmware.com

VMware Security Advisory 2018-0013 - VMware Workstation and Fusion updates address signature bypass and multiple denial-of-service vulnerabilities.

tags | advisory, vulnerability
advisories | CVE-2018-6962, CVE-2018-6963
MD5 | bfc59fb9723754c60a0eebdd65270702
Debian Security Advisory 4205-1
Posted May 21, 2018
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4205-1 - This is an advance notice that regular security support for Debian GNU/Linux 8 (code name "jessie") will be terminated on the 17th of June.

tags | advisory
systems | linux, debian
MD5 | e19684a55bf0a2787106fc6f11027867
Merge PACS 7.0 Cross Site Request Forgery
Posted May 21, 2018
Authored by Safak Aslan

Merge PACS version 7.0 suffers from a cross site request forgery vulnerability.

tags | exploit, csrf
MD5 | 85f3fcbf660343101de26d499c7e4907
Oracle Cross Site Scripting
Posted May 21, 2018
Authored by Ismail Tasdelen

eventreg.oracle.com suffers from a cross site scripting vulnerability.

tags | exploit, xss
MD5 | 1a3cc8c008bca4a51860ddf21b3ec91b
Model Agency Media House And Media Gallery 1.0 XSS / CSRF / SQL Injection
Posted May 21, 2018
Authored by Borna Nematzadeh

Model Agency Media House and Model Gallery version 1.0 suffers from cross site request forgery, remote SQL injection, and cross site scripting vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection, csrf
MD5 | 35bc5e526bc5047e68c12af85c567087
Auto Dealership And Vehicle Showroom WebSys 1.0 XSS / CSRF / SQL Injection
Posted May 21, 2018
Authored by Borna Nematzadeh

Auto Dealership and Vehicle Showroom WebSys version 1.0 suffers from cross site request forgery, remote SQL injection, and cross site scripting vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection, csrf
MD5 | dc32ea9b04f30a82d16c559c204735c5
Wchat PHP AJAX Chat Script 1.5 Cross Site Scripting
Posted May 21, 2018
Authored by Borna Nematzadeh

Wchat PHP AJAX Chat Script version 1.5 suffers from a persistent cross site scripting vulnerability.

tags | exploit, php, xss
MD5 | f581a1f41ea6f01cdb6ce90c2cc33f97
Schneider Electric PLCs Cross Site Request Forgery
Posted May 21, 2018
Authored by t4rkd3vilz

Schneider Electric PLCs suffer from a cross site request forgery vulnerability.

tags | exploit, csrf
advisories | CVE-2013-0663
MD5 | 3b618bf669aab8cd255548f7a29f63a6
Adobe Experience Manager (AEM) Remote Code Execution
Posted May 20, 2018
Authored by StaticFlow

Default credentials in Adobe Experience Manager (AEM) versions prior to 6.3 can lead to remote code execution.

tags | exploit, remote, code execution
MD5 | e16c1926d28aab23d1dc10543db6f4a9
D-Link DSL-3782 Authentication Bypass
Posted May 20, 2018
Authored by Giulio Comi

D-Link DSL-3782 suffers from an authentication bypass vulnerability.

tags | exploit, bypass
advisories | CVE-2018-8898
MD5 | 82877c3443f5f0d83fd34a6e522f4f8a
Easy MPEG To DVD Burner 1.7.11 Buffer Overflow
Posted May 20, 2018
Authored by Juan Prescotto

Easy MPEG to DVD Burner version 1.7.11 local buffer overflow SEH exploit with DEP bypass.

tags | exploit, overflow, local
MD5 | 2d2c9f99e2e27977fff8243f09ccfb09
Joomla EkRishta 2.10 Cross Site Scripting / SQL Injection
Posted May 20, 2018
Authored by Sina Kheirkhah

Joomla EkRishta component version 2.10 suffers from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection
MD5 | bbb01327012f75900dff9c4486d2bd9b
mySCADA myPRO 7 Hardcoded Credentials
Posted May 20, 2018
Authored by Emre AVANA

mySCADA myPRO version 7 has a hardcoded FTP username and password.

tags | exploit
advisories | CVE-2018-11311
MD5 | b36ac90484f85fddd1f5a1d02d46eabb
Gentoo Linux Security Advisory 201805-06
Posted May 20, 2018
Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201805-6 - Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in privilege escalation. Versions less than 66.0.3359.170 are affected.

tags | advisory, vulnerability
systems | linux, gentoo
advisories | CVE-2018-6120, CVE-2018-6121, CVE-2018-6122
MD5 | 2bcb893351d0198f15d907469c8c2718
Reliable Datagram Sockets (RDS) Privilege Escalation
Posted May 19, 2018
Authored by Dan Rosenberg, Brendan Coles | Site metasploit.com

This Metasploit module exploits a vulnerability in the rds_page_copy_user function in net/rds/page.c (RDS) in Linux kernel versions 2.6.30 to 2.6.36-rc8 to execute code as root (CVE-2010-3904). This Metasploit module has been tested successfully on Fedora 13 (i686) with kernel version 2.6.33.3-85.fc13.i686.PAE and Ubuntu 10.04 (x86_64) with kernel version 2.6.32-21-generic.

tags | exploit, kernel, root
systems | linux, fedora, ubuntu
advisories | CVE-2010-3904
MD5 | ca0aaa65162c3d2e20a520b81415f4ae
Page 1 of 4,064
Back12345Next

Want To Donate?


Bitcoin: 18PFeCVLwpmaBuQqd5xAYZ8bZdvbyEWMmU

File Archive:

May 2018

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    May 1st
    15 Files
  • 2
    May 2nd
    17 Files
  • 3
    May 3rd
    30 Files
  • 4
    May 4th
    29 Files
  • 5
    May 5th
    2 Files
  • 6
    May 6th
    3 Files
  • 7
    May 7th
    13 Files
  • 8
    May 8th
    27 Files
  • 9
    May 9th
    17 Files
  • 10
    May 10th
    15 Files
  • 11
    May 11th
    8 Files
  • 12
    May 12th
    2 Files
  • 13
    May 13th
    8 Files
  • 14
    May 14th
    7 Files
  • 15
    May 15th
    43 Files
  • 16
    May 16th
    19 Files
  • 17
    May 17th
    16 Files
  • 18
    May 18th
    15 Files
  • 19
    May 19th
    3 Files
  • 20
    May 20th
    6 Files
  • 21
    May 21st
    15 Files
  • 22
    May 22nd
    3 Files
  • 23
    May 23rd
    0 Files
  • 24
    May 24th
    0 Files
  • 25
    May 25th
    0 Files
  • 26
    May 26th
    0 Files
  • 27
    May 27th
    0 Files
  • 28
    May 28th
    0 Files
  • 29
    May 29th
    0 Files
  • 30
    May 30th
    0 Files
  • 31
    May 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2018 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close