accept no compromises
Showing 1 - 14 of 14 RSS Feed

Files Date: 2014-08-04

Adobe ColdFusion MX6 Password Decryptor
Posted Aug 4, 2014
Authored by Mr.Un1k0d3r

This tool enables you to retrieve the plain text password for ColdFusion MX6.

tags | tool, cracker
systems | linux
MD5 | 12d5ce8eb717c7eba43738e6fbbe3c70
Tenshi Log Monitoring Program 0.15
Posted Aug 4, 2014
Authored by Andrea Barisani | Site dev.inversepath.com

tenshi is a log monitoring program, designed to watch one or more log files for lines matching user defined regular expressions and report on the matches. The regular expressions are assigned to queues which have an alert interval and a list of mail recipients. Queues can be set to send a notification as soon as there is a log line assigned to it, or to send periodic reports.

Changes: Added mailhelo option. Various bugfixes. See Changelog for complete list of changes.
tags | tool, system logging
systems | unix
MD5 | 3eb858893e29f0f6e7fb9f58f653a5b1
ownCloud 7.0.0 Private RSA Key Disclosure
Posted Aug 4, 2014
Authored by Senderek Web Security

In consequence of an insufficient threat model, ownCloud is storing all user's private RSA keys in clear text in PHP session files. These unencrypted private keys can be accessed by every web application that has the privilege of the web server user. The affected files exposing cryptographic keys will be stored in the PHP session directory for a number of hours until they are removed. All versions of ownCloud since the introduction of the encryption module in version 5.0.7 including version 7.0.0 are affected.

tags | advisory, web, php, info disclosure
MD5 | 9a2fb1f3e8b44cbf8ffdd62847a1159b
Barracuda WAF Authentication Bypass
Posted Aug 4, 2014
Authored by Nick Hayes | Site portcullis-security.com

It is possible to re-use a link which includes a non-expiring authentication token in the query string to gain access to the interface of the Barracuda Web Application Firewall (WAF) firmware version 7.8.1.013.

tags | exploit, web, bypass
advisories | CVE-2014-2595
MD5 | 642edeb502f95d2b0ada54de256848be
FreeDisk 1.01 Local File Inclusion / File Upload
Posted Aug 4, 2014
Authored by Benjamin Kunz Mejri | Site vulnerability-lab.com

FreeDisk version 1.01 suffers from local file inclusion and remote file upload vulnerabilities.

tags | exploit, remote, local, vulnerability, file inclusion, file upload
MD5 | d63619e5eb935ec25afa013a9adf9ccb
Video WiFi Transfer 1.01 Directory Traversal
Posted Aug 4, 2014
Authored by Benjamin Kunz Mejri | Site vulnerability-lab.com

Video WiFi Transfer version 1.01 suffers from a directory traversal vulnerability.

tags | exploit
MD5 | 49e427e02f6c0e9e1be208ae01dcd8ea
Gentoo Linux Security Advisory 201408-01
Posted Aug 4, 2014
Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201408-1 - A vulnerability in Zend Framework could allow a remote attacker to inject SQL commands. Versions less than 1.11.6 are affected.

tags | advisory, remote
systems | linux, gentoo
advisories | CVE-2011-1939
MD5 | 307855eb289a4649faa9702e1b24d6a8
Ubuntu Security Notice USN-2306-1
Posted Aug 4, 2014
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 2306-1 - Maksymilian Arciemowicz discovered that the GNU C Library incorrectly handled the getaddrinfo() function. An attacker could use this issue to cause a denial of service. This issue only affected Ubuntu 10.04 LTS. It was discovered that the GNU C Library incorrectly handled the getaddrinfo() function. An attacker could use this issue to cause a denial of service. This issue only affected Ubuntu 10.04 LTS and Ubuntu 12.04 LTS. Various other issues were also addressed.

tags | advisory, denial of service
systems | linux, ubuntu
advisories | CVE-2013-4357, CVE-2013-4458, CVE-2014-0475, CVE-2014-4043
MD5 | 579fa5c25c72e2ab3f95731313197a97
Red Hat Security Advisory 2014-1002-01
Posted Aug 4, 2014
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2014-1002-01 - Red Hat Enterprise Virtualization is a feature-rich server virtualization management system that provides advanced capabilities for managing Red Hat virtualization infrastructure for Servers and Desktops. It was found that the oVirt storage back end did not wipe memory snapshots when VMs were deleted, even if wipe-after-delete was enabled for the VM's disks. A remote attacker with credentials to create a new VM could use this flaw to potentially access the contents of memory snapshots in an uninitialized storage volume, possibly leading to the disclosure of sensitive information.

tags | advisory, remote
systems | linux, redhat
advisories | CVE-2014-3559
MD5 | b6c65f8d876e7cc55bd0bc359dc18160
Debian Security Advisory 2996-1
Posted Aug 4, 2014
Authored by Debian | Site debian.org

Debian Linux Security Advisory 2996-1 - Multiple security issues have been found in Icedove, Debian's version of errors and use-after-frees may lead to the execution of arbitrary code or denial of service.

tags | advisory, denial of service, arbitrary
systems | linux, debian
advisories | CVE-2014-1544, CVE-2014-1547, CVE-2014-1555, CVE-2014-1556, CVE-2014-1557
MD5 | 87ec53175b475074dfd0da0bc661aa6e
Debian Security Advisory 2995-1
Posted Aug 4, 2014
Authored by Debian | Site debian.org

Debian Linux Security Advisory 2995-1 - Don A. Bailey from Lab Mouse Security discovered an integer overflow flaw in the way the lzo library decompressed certain archives compressed with the LZO algorithm. An attacker could create a specially crafted LZO-compressed input that, when decompressed by an application using the lzo library, would cause that application to crash or, potentially, execute arbitrary code.

tags | advisory, overflow, arbitrary
systems | linux, debian
advisories | CVE-2014-4607
MD5 | 677ddffd0f0a2576836ae00e8a1c0d3f
Slackware Security Advisory - dhcpcd Updates
Posted Aug 4, 2014
Authored by Slackware Security Team | Site slackware.com

Slackware Security Advisory - New dhcpcd packages are available for Slackware 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue.

tags | advisory
systems | linux, slackware
MD5 | d05df8cddf260d2f6162a5a2313f73f5
Slackware Security Advisory - samba Updates
Posted Aug 4, 2014
Authored by Slackware Security Team | Site slackware.com

Slackware Security Advisory - New samba packages are available for Slackware 14.1 and -current to fix a security issue.

tags | advisory
systems | linux, slackware
advisories | CVE-2014-3560
MD5 | dc47574093089476b9b8c4a773691776
Ebay Inc Magento ProStore CP Filter Bypass
Posted Aug 4, 2014
Authored by Benjamin Kunz Mejri | Site vulnerability-lab.com

Ebay Inc Magento ProStore CP suffers from filter validation bypass and persistence vulnerabilities.

tags | exploit, web, vulnerability
MD5 | e9ddc25868f86cae9d7188f6665cd379
Page 1 of 1
Back1Next

File Archive:

July 2017

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jul 1st
    2 Files
  • 2
    Jul 2nd
    3 Files
  • 3
    Jul 3rd
    15 Files
  • 4
    Jul 4th
    4 Files
  • 5
    Jul 5th
    15 Files
  • 6
    Jul 6th
    15 Files
  • 7
    Jul 7th
    10 Files
  • 8
    Jul 8th
    2 Files
  • 9
    Jul 9th
    10 Files
  • 10
    Jul 10th
    15 Files
  • 11
    Jul 11th
    15 Files
  • 12
    Jul 12th
    19 Files
  • 13
    Jul 13th
    16 Files
  • 14
    Jul 14th
    15 Files
  • 15
    Jul 15th
    3 Files
  • 16
    Jul 16th
    2 Files
  • 17
    Jul 17th
    8 Files
  • 18
    Jul 18th
    11 Files
  • 19
    Jul 19th
    15 Files
  • 20
    Jul 20th
    15 Files
  • 21
    Jul 21st
    15 Files
  • 22
    Jul 22nd
    7 Files
  • 23
    Jul 23rd
    2 Files
  • 24
    Jul 24th
    19 Files
  • 25
    Jul 25th
    28 Files
  • 26
    Jul 26th
    2 Files
  • 27
    Jul 27th
    0 Files
  • 28
    Jul 28th
    0 Files
  • 29
    Jul 29th
    0 Files
  • 30
    Jul 30th
    0 Files
  • 31
    Jul 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2016 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close