Debian Security Advisory 1450-1 - It was discovered that util-linux, Miscellaneous system utilities, did not drop privileged users and groups in the correct order in the mount and umount commands. This could potentially allow a local user to gain additional privileges.
4734fc3adec246db57dff268bd354db2f13d0fcb4816a74542256e9fba9110acThis library provides a Ruby interface to Nmap's scan data. It can run Nmap and parse its XML output directly from the scan, parse a file containing the XML data from a separate scan, or parse a string of XML data from a scan. This information is presented in an easy to use fashion for storing and manipulating.
45aed780b003524f9dc083fdc67c4f13c902f0e6b7fea3e8c1892f4d60174938ClipShare version 2.6 remote user password change exploit.
72fa72b8b818fabbf7fd6f6c78388eb5d678876f780abe2decea471788392ef0SNetworks PHP Classifieds version 5.0 suffers from a remote file inclusion vulnerability.
817f408a892e870e8332ddd7fc6487a11d79e25ef5fad8e73d8132b18cffd60aTribisur versions 2.0 and below remote SQL injection exploit.
878cce10a4def497a0f3d1a4c22c3f0d02214ce1a22a7667ce0bc2305a0a76e8Debian Security Advisory 1449-1 - It was discovered that loop-aes-utils, tools for mounting and manipulating filesystems, didn't drop privileged users and groups in the correct order in the mount and umount commands. This could potentially allow a local user to gain additional privileges.
7ba837b3c03fe2093d868d969cfff17ad96234f1fbca2104edfba253113b86c4CoolPlayer version 2.17 .m3u playlist stack overflow exploit that binds a shell to port 4444.
cdff2e6770f455d03ba6e2c1262138e8142d7ae62186f141fcebc62cbbaf9f93Debian Security Advisory 1448-1 - It was discovered that eggdrop, an advanced IRC robot, was vulnerable to a buffer overflow which could result in a remote user executing arbitrary code.
97aca53b322c05c06cbb10f2526f36402b98cd7ff32c7120ab194ab5111a5068OpenSSH patch tested with versions 4.2p1 and 4.7p1 that allows for a hidden user to login with root permissions.
66a2fdc785f48b49192a9914e91513352963513dcdde7b456dccf8dc0ad3e725Invision Power Board version 2.1.7 suffers from cross site scripting and SQL injection vulnerabilities.
0f3e90fbbd4992ce6f7537f6aaf508d48434d3246f13f3ab1d5715b661bed087This code searches for Google Calendar accounts which exist and are not password protected.
3151bb236822f342ed070d2d4b6ddae739cbb33cf4ba0c9777a56abb9f7bb51b
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed