Twenty Year Anniversary
Showing 1 - 18 of 18 RSS Feed

Files Date: 2018-08-14

Debian Security Advisory 4271-1
Posted Aug 14, 2018
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4271-1 - Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix.

tags | advisory, vulnerability
systems | linux, unix, debian
advisories | CVE-2018-10858, CVE-2018-10919
MD5 | 2af05a2b97ffe360a280e8abf1ef54c4
Debian Security Advisory 4272-1
Posted Aug 14, 2018
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4272-1 - Juha-Matti Tilli discovered a flaw in the way the Linux kernel handled reassembly of fragmented IPv4 and IPv6 packets. A remote attacker can take advantage of this flaw to trigger time and calculation expensive fragment reassembly algorithms by sending specially crafted packets, leading to remote denial of service. This is mitigated by reducing the default limits on memory usage for incomplete fragmented packets.

tags | advisory, remote, denial of service, kernel
systems | linux, debian
advisories | CVE-2018-5391
MD5 | 7c5e38c47c610c412e385893c4194f02
Linux PAM 0.6.9 Authentication Replay
Posted Aug 14, 2018
Authored by Eric Sesterhenn

It is possible to replay an authentication by using a specially prepared smartcard or token in case pam-pkcs11 is compiled with NSS support. Furthermore two minor implementation issues have been identified. Linux PAM version 0.6.9 is affected.

tags | advisory
systems | linux
MD5 | 42cff7513a00f9e744ee4a2533ad69ec
Yubico 0.1.9 libykneomgr Out Of Bounds Read / Write
Posted Aug 14, 2018
Authored by Eric Sesterhenn

Yubico version 0.1.9 libykneomgr suffers from out of bounds read and write vulnerabilities.

tags | advisory, vulnerability
MD5 | 18095da83af4eeb2ebecbbde25a9bb78
Apple Smart Card Services Memory Corruption
Posted Aug 14, 2018
Authored by Eric Sesterhenn

Attackers with local access can exploit security issues in the smartcard driver. These result in memory corruptions, which might lead to code execution. Since smartcards can be used for authentication, the vulnerabilities may allow an attacker to login to the system without valid credentials as any user.

tags | advisory, local, vulnerability, code execution
advisories | CVE-2018-4300, CVE-2018-4301
MD5 | ecc75d2e3e4e765c8de7001179ad0ec1
Kernel Live Patch Security Notice LSN-0042-1
Posted Aug 14, 2018
Authored by Benjamin M. Romer

On August 14, fixes for CVE-2018-3620 and CVE-2018-3646 were released into the Ubuntu Xenial and Bionic kernels. These CVEs are security vulnerabilities caused by flaws in the design of speculative execution hardware in the computer's CPU. Researchers discovered that memory present in the L1 data cache of an Intel CPU core may be visible to other processes running on the same core.

tags | advisory, kernel, vulnerability
systems | linux, ubuntu
advisories | CVE-2018-3620, CVE-2018-3646
MD5 | dfbdb00734352df26fe57ac4d26bfeac
OpenSC 0.18.0 Buffer Overflow / Out Of Bounds Read
Posted Aug 14, 2018
Authored by Eric Sesterhenn

Multiple issues have been identified in OpenSC, ranging from stack based buffer overflows to out of bounds reads and writes on the heap. They can be triggered by malicious smartcards sending malformed responses to APDU commands. Additionally to those fixes reported here, a lot of minor issues (eg. OOB reads and similar) have been reported and fixed. Version 0.18.0 is affected.

tags | advisory, overflow
MD5 | a2dd502bfe24ba28f95e8149df61a905
ASUSTOR NAS ADM 3.1.0 Remote Command Execution / SQL Injection
Posted Aug 14, 2018
Authored by Kyle Lovett

ASUSTOR NAS ADM version 3.1.0 suffers from code execution and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, code execution, sql injection
advisories | CVE-2018-11509, CVE-2018-11510, CVE-2018-11511
MD5 | 2cbb9fa8f1740ec14856c26142f6ffd4
cgit Directory Traversal
Posted Aug 14, 2018
Authored by Mishra Dhiraj | Site metasploit.com

This Metasploit module exploits a directory traversal vulnerability in cgit versions prior to 1.2.1.

tags | exploit
advisories | CVE-2018-14912
MD5 | 9cb22f90ff6602ff71d0f3a6065eb878
Nasdaq BWise 5.0 JMX/RMI Interface Remote Code Execution
Posted Aug 14, 2018
Authored by Anibal Aguiar

Nasdaq BWise version 5.0 suffers from a JMX/RMI interface remote code execution vulnerability.

tags | exploit, remote, code execution
advisories | CVE-2018-11247
MD5 | c20152c2cc85ca80573c3e531ec54d1e
Yubico PIV Tool 1.5.0 Buffer Overflow
Posted Aug 14, 2018
Authored by Eric Sesterhenn

A buffer overflow and an out of bounds memory read were identified in the yubico-piv-tool-1.5.0, these can be triggered by a malicious token.

tags | advisory, overflow
advisories | CVE-2018-14779, CVE-2018-14780
MD5 | 2c4440042ac214d8089605f593a3a025
Wansview 1.0.2 Denial Of Service
Posted Aug 14, 2018
Authored by Gionathan Reale

Wansview version 1.0.2 suffers from a denial of service vulnerability.

tags | exploit, denial of service
MD5 | 96f28e046f59b661cc828dff83ac69b1
Slackware Security Advisory - openssl Updates
Posted Aug 14, 2018
Authored by Slackware Security Team | Site slackware.com

Slackware Security Advisory - New openssl packages are available for Slackware 14.2 and -current to fix security issues.

tags | advisory
systems | linux, slackware
advisories | CVE-2018-0732, CVE-2018-0737
MD5 | d5b9ce8668d747aec7c4bda0e16c5502
Microsoft Security Advisory Updates For August 14, 2018
Posted Aug 14, 2018
Site microsoft.com

This Microsoft advisory notification includes advisories released or updated on August 14, 2018.

tags | advisory
MD5 | 7e0525404a0c9b0e56ccdcdc421e5ed5
Microsoft Security Advisory Updates For August 14, 2018
Posted Aug 14, 2018
Site microsoft.com

This Microsoft advisory notification includes security updates released on August 14, 2018.

tags | advisory
MD5 | 87ce75cf1cc743c8da60a2096462d0dd
Cloudme 1.9 Buffer Overflow
Posted Aug 14, 2018
Authored by Raymond Wellnitz | Site metasploit.com

This Metasploit module exploits a stack buffer overflow in Cloudme version 1.8.x and 1.9.x.

tags | exploit, overflow
advisories | CVE-2018-6892
MD5 | a7cfec39270aece50bd8e04ccfea568b
Jetty 6.1.6 Cross Site Scripting
Posted Aug 14, 2018
Authored by 1N3

Jetty version 6.1.6 suffers from a cross site scripting vulnerability.

tags | exploit, xss
advisories | CVE-2009-1524
MD5 | b8448b99415e5f600db3cf74c918bfe2
cPanel 76 Cross Site Scripting
Posted Aug 14, 2018
Authored by Numan OZDEMIR

cPanel versions 76 and below suffer from a filename based cross site scripting vulnerability.

tags | exploit, xss
MD5 | 5c0c24423a2f89afd9b1b3aefc67eee1
Page 1 of 1
Back1Next

File Archive:

November 2018

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Nov 1st
    10 Files
  • 2
    Nov 2nd
    15 Files
  • 3
    Nov 3rd
    2 Files
  • 4
    Nov 4th
    2 Files
  • 5
    Nov 5th
    32 Files
  • 6
    Nov 6th
    27 Files
  • 7
    Nov 7th
    8 Files
  • 8
    Nov 8th
    9 Files
  • 9
    Nov 9th
    17 Files
  • 10
    Nov 10th
    2 Files
  • 11
    Nov 11th
    2 Files
  • 12
    Nov 12th
    33 Files
  • 13
    Nov 13th
    29 Files
  • 14
    Nov 14th
    23 Files
  • 15
    Nov 15th
    0 Files
  • 16
    Nov 16th
    0 Files
  • 17
    Nov 17th
    0 Files
  • 18
    Nov 18th
    0 Files
  • 19
    Nov 19th
    0 Files
  • 20
    Nov 20th
    0 Files
  • 21
    Nov 21st
    0 Files
  • 22
    Nov 22nd
    0 Files
  • 23
    Nov 23rd
    0 Files
  • 24
    Nov 24th
    0 Files
  • 25
    Nov 25th
    0 Files
  • 26
    Nov 26th
    0 Files
  • 27
    Nov 27th
    0 Files
  • 28
    Nov 28th
    0 Files
  • 29
    Nov 29th
    0 Files
  • 30
    Nov 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2018 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close