what you don't know can hurt you
Showing 1 - 16 of 16 RSS Feed

Files Date: 2012-12-20

WordPress 3.4.2 Failed Session Invalidation
Posted Dec 20, 2012
Authored by Christopher Emerson | Site whiteoaksecurity.com

WordPress version 3.4.2 fails to invalidate a user's session upon logout. Although it clears the cookie in the browser, the system will still accept it.

tags | advisory, bypass
advisories | CVE-2012-5868
MD5 | c937bfe74bf5ed99786e882f8f1bd18e
HackMiami 2013 Call For Papers
Posted Dec 20, 2012
Site hackmiami.com

The HackMiami 2013 Hackers Conference seeks to bring together the brightest minds within the information security industry and the digital underground. This conference will showcase cutting edge tools, techniques, and methodologies that are at the forefront of the global threatscape. The call for papers has been announced. It will take place in Miami, FL, USA in May of 2013.

tags | paper, conference
MD5 | 2d00920a1f3e72b9cb4c05acb02e0e64
Sony PC Companion 2.1 WebServices.dll Unicode Buffer Overflow
Posted Dec 20, 2012
Authored by LiquidWorm | Site zeroscience.mk

Sony PC Companion version 2.1 suffers from a boundary error in WebServices.dll when handling the value assigned to the 'bstrFile' item in the DownloadURLToFile function and can be exploited to cause a stack-based buffer overflow via an overly long string which may lead to execution of arbitrary code on the affected machine.

tags | exploit, overflow, arbitrary
MD5 | 08640839f22190bc8dd81d3ac4186e29
Topera IPv6 Port Scanner 0.0.2
Posted Dec 20, 2012
Authored by Daniel Garcia, Rafa Sanchez | Site code.google.com

Topera is a brand new TCP port scanner under IPv6, with the particularity that these scans are not detected by Snort.

Changes: Various bug fixes.
tags | tool, scanner, tcp
systems | unix
MD5 | 13cff8b8b47568985d81c186b3b1af03
Loganalyzer 3.6.0 Cross Site Scripting
Posted Dec 20, 2012
Authored by Mohd Izhar Ali | Site johncrackernet.blogspot.com

LogAnalyzer version 3.6.0 suffers from a cross site scripting vulnerability.

tags | exploit, xss
MD5 | 523d5e439a6902fc9f5c54f7447806f0
ELBA 5 5.5.0 SQL Injection / Default Credentials
Posted Dec 20, 2012
Authored by Kestutis Gudinavicius | Site sec-consult.com

ELBA 5 version 5.5.0 R00006 build 0796 suffers from remote SQL injection, unencrypted password storage, default credential use, and buffer overflow vulnerabilities.

tags | exploit, remote, overflow, vulnerability, sql injection
MD5 | 896112b30c4c9596b6787eba484d097c
Ubuntu Security Notice USN-1678-1
Posted Dec 20, 2012
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 1678-1 - A flaw was discovered in the Linux kernel's handling of new hot-plugged memory. An unprivileged local user could exploit this flaw to cause a denial of service by crashing the system.

tags | advisory, denial of service, kernel, local
systems | linux, ubuntu
advisories | CVE-2012-5517
MD5 | 677d656cefdec29396fa13626a1aca85
Ubuntu Security Notice USN-1677-1
Posted Dec 20, 2012
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 1677-1 - A flaw was discovered in the Linux kernel's handling of new hot-plugged memory. An unprivileged local user could exploit this flaw to cause a denial of service by crashing the system.

tags | advisory, denial of service, kernel, local
systems | linux, ubuntu
advisories | CVE-2012-5517
MD5 | 3663242020dc16019ed748ca0e864f9d
Ubuntu Security Notice USN-1679-1
Posted Dec 20, 2012
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 1679-1 - A flaw was discovered in the Linux kernel's handling of new hot-plugged memory. An unprivileged local user could exploit this flaw to cause a denial of service by crashing the system.

tags | advisory, denial of service, kernel, local
systems | linux, ubuntu
advisories | CVE-2012-5517
MD5 | 8cc7829df3e4556b048e411bec896b6a
Banana Dance B.2.6 Inclusion / Access Control / SQL Injection
Posted Dec 20, 2012
Authored by High-Tech Bridge SA | Site htbridge.com

Banana Dance version B.2.6 suffers from local file inclusion, remote SQL injection, and improper access control vulnerabilities.

tags | exploit, remote, local, vulnerability, sql injection, file inclusion
advisories | CVE-2012-5242, CVE-2012-5243, CVE-2012-5244
MD5 | a8f4a63a7b653047212f410fffa9ab12
FireFly Mediaserver 1.0.0.1359 NULL Pointer Dereference
Posted Dec 20, 2012
Authored by High-Tech Bridge SA | Site htbridge.com

FireFly Mediaserver version 1.0.0.1359 suffers from a denial of service vulnerability that can be triggered by a NULL pointer dereference.

tags | exploit, denial of service
advisories | CVE-2012-5875
MD5 | b6f6fb8b75e3dfc2e67578a461ccc23a
Elite Bulletin Board 2.1.21 SQL Injection
Posted Dec 20, 2012
Authored by High-Tech Bridge SA | Site htbridge.com

Elite Bulletin Board version 2.1.21 suffers from multiple remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, sql injection
advisories | CVE-2012-5874
MD5 | f74179b5a4fe8a960e4cbb83b23c2862
Drupal Context 6.x / 7.x Information Disclosure
Posted Dec 20, 2012
Authored by hefox | Site drupal.org

Drupal Context third party module versions 6.x and 7.x suffer from an information disclosure vulnerability.

tags | advisory, info disclosure
MD5 | 773a7ede5ea1acfd564847e85d7895c4
Drupal Core 6.x / 7.x Access Bypass / Code Execution
Posted Dec 20, 2012
Authored by Derek Wright, Damien Tournoud, Simon Rycroft | Site drupal.org

Drupal core versions 6.x and 7.x suffer from access bypass and arbitrary PHP code execution vulnerabilities.

tags | advisory, arbitrary, php, vulnerability, code execution
MD5 | 271c0b91aa455cc4ea126db7a1264fab
SurgeFTP Remote Command Execution
Posted Dec 20, 2012
Authored by Spencer McIntyre | Site metasploit.com

This Metasploit module exploits a flaw in the SurgeFTP server's web-based administrative console to execute arbitrary commands.

tags | exploit, web, arbitrary
MD5 | 27837668ae567b3ace02e8d21d13e7ae
GNU Debugger 7.5.1 NULL Pointer Dereference
Posted Dec 20, 2012
Authored by nitr0us

gdb (GNU debugger) versions 7.5.1 and below ELF anti-debugging / reversing patcher that causes a NULL pointer dereference to trigger.

tags | exploit
MD5 | 0ad84bba981e241b6325590e3b428267
Page 1 of 1
Back1Next

File Archive:

October 2021

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Oct 1st
    16 Files
  • 2
    Oct 2nd
    1 Files
  • 3
    Oct 3rd
    1 Files
  • 4
    Oct 4th
    24 Files
  • 5
    Oct 5th
    24 Files
  • 6
    Oct 6th
    11 Files
  • 7
    Oct 7th
    14 Files
  • 8
    Oct 8th
    19 Files
  • 9
    Oct 9th
    1 Files
  • 10
    Oct 10th
    0 Files
  • 11
    Oct 11th
    7 Files
  • 12
    Oct 12th
    15 Files
  • 13
    Oct 13th
    26 Files
  • 14
    Oct 14th
    10 Files
  • 15
    Oct 15th
    6 Files
  • 16
    Oct 16th
    2 Files
  • 17
    Oct 17th
    1 Files
  • 18
    Oct 18th
    14 Files
  • 19
    Oct 19th
    15 Files
  • 20
    Oct 20th
    20 Files
  • 21
    Oct 21st
    12 Files
  • 22
    Oct 22nd
    14 Files
  • 23
    Oct 23rd
    0 Files
  • 24
    Oct 24th
    0 Files
  • 25
    Oct 25th
    0 Files
  • 26
    Oct 26th
    0 Files
  • 27
    Oct 27th
    0 Files
  • 28
    Oct 28th
    0 Files
  • 29
    Oct 29th
    0 Files
  • 30
    Oct 30th
    0 Files
  • 31
    Oct 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2020 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close