exploit the possibilities
Showing 1 - 11 of 11 RSS Feed

Files Date: 2019-04-12

Ubuntu Security Notice USN-3945-1
Posted Apr 12, 2019
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 3945-1 - It was discovered that Ruby incorrectly handled certain RubyGems. An attacker could possibly use this issue to execute arbitrary commands. It was discovered that Ruby incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code.

tags | advisory, arbitrary, ruby
systems | linux, ubuntu
advisories | CVE-2019-8320, CVE-2019-8324
MD5 | e31c0b3ee67169a56b90d68e0524ec93
Ubuntu Security Notice USN-3946-1
Posted Apr 12, 2019
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 3946-1 - It was discovered that rssh incorrectly handled certain command-line arguments and environment variables. An authenticated user could bypass rssh's command restrictions, allowing an attacker to run arbitrary commands.

tags | advisory, arbitrary
systems | linux, ubuntu
advisories | CVE-2019-1000018
MD5 | 4f673b4e30b7456bf9f5c03e61b35cf6
DirectAdmin 1.561 Cross Site Scripting
Posted Apr 12, 2019
Authored by Numan OZDEMIR

DirectAdmin versions 1.561 and below suffer from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss
advisories | CVE-2019-11193
MD5 | 55fb7c5c8f2bb42df534a00528ddba62
ATutor file_manager Remote Code Execution
Posted Apr 12, 2019
Authored by Ozkan Mustafa Akkus | Site metasploit.com

This Metasploit module allows the user to run commands on the server with the teacher user privilege. The 'Upload files' section in the 'File Manager' field contains an arbitrary file upload vulnerability.

tags | exploit, arbitrary, file upload
MD5 | 720c50c8ee708b2b3df793d3b1d82de3
CyberArk EPM 10.2.1.603 Security Restrictions Bypass
Posted Apr 12, 2019
Authored by Alpcan Onaran

CyberArk EPM version 10.2.1.603 suffers from a security restrictions bypass vulnerability.

tags | exploit, bypass
advisories | CVE-2018-14894
MD5 | 4825d0713d3a0b2f7fdbf74b91102824
Nagios XI 5.5.10 XSS / Remote Code Execution
Posted Apr 12, 2019
Authored by Abdel Adim Oisfi

Various vulnerabilities have been found in Nagios XI version 5.5.10, which allow a remote attacker able to trick an authenticated victim (with "autodiscovery job" creation privileges) to visit a malicious URL to obtain a remote root shell via a reflected cross site scripting, an authenticated remote code Execution and a local privilege escalation.

tags | exploit, remote, shell, local, root, vulnerability, code execution, xss
advisories | CVE-2019-9164, CVE-2019-9165, CVE-2019-9166, CVE-2019-9167, CVE-2019-9202, CVE-2019-9203, CVE-2019-9204
MD5 | a57f6817171de50e793d88c586dbe05c
Linux/x86 Add User To Passwd File Shellcode
Posted Apr 12, 2019
Authored by strider

149 bytes small Linux/x86 add user to passwd file shellcode.

tags | x86, shellcode
systems | linux
MD5 | 44caa95cda5b50ce19fab3550fbc0038
OrangeScrum Project Management Software 1.6.1 Database Disclosure
Posted Apr 12, 2019
Authored by KingSkrupellos

OrangeScrum Project Management Software version 1.6.1 suffers from a database disclosure vulnerability.

tags | exploit, info disclosure
MD5 | 0dae945ee025a5d89462c96d4fb3f408
Opus Online Placement University System 4.2.0 Database Disclosure
Posted Apr 12, 2019
Authored by KingSkrupellos

Opus Online Placement University System version 4.2.0 suffers from a database disclosure vulnerability.

tags | exploit, info disclosure
MD5 | 075512ec53eedb5de2a0b47d1fbcfd45
JobSkee Open Source JobBoard 1.1.3 Database Disclosure
Posted Apr 12, 2019
Authored by KingSkrupellos

JobSkee Open Source JobBoard version 1.1.3 suffers from a database disclosure vulnerability.

tags | exploit, info disclosure
MD5 | 26692fee2ddf5b350ebfb978f944382a
Gibbonedu The Flexible School Platform 17.0.00 Database Disclosure
Posted Apr 12, 2019
Authored by KingSkrupellos

Gibbonedu The Flexible School Platform version 17.0.00 suffers from a database disclosure vulnerability.

tags | exploit, info disclosure
MD5 | 0e50660436253b0246d7ef620868fbb6
Page 1 of 1
Back1Next

File Archive:

April 2020

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Apr 1st
    60 Files
  • 2
    Apr 2nd
    20 Files
  • 3
    Apr 3rd
    8 Files
  • 4
    Apr 4th
    0 Files
  • 5
    Apr 5th
    0 Files
  • 6
    Apr 6th
    0 Files
  • 7
    Apr 7th
    0 Files
  • 8
    Apr 8th
    0 Files
  • 9
    Apr 9th
    0 Files
  • 10
    Apr 10th
    0 Files
  • 11
    Apr 11th
    0 Files
  • 12
    Apr 12th
    0 Files
  • 13
    Apr 13th
    0 Files
  • 14
    Apr 14th
    0 Files
  • 15
    Apr 15th
    0 Files
  • 16
    Apr 16th
    0 Files
  • 17
    Apr 17th
    0 Files
  • 18
    Apr 18th
    0 Files
  • 19
    Apr 19th
    0 Files
  • 20
    Apr 20th
    0 Files
  • 21
    Apr 21st
    0 Files
  • 22
    Apr 22nd
    0 Files
  • 23
    Apr 23rd
    0 Files
  • 24
    Apr 24th
    0 Files
  • 25
    Apr 25th
    0 Files
  • 26
    Apr 26th
    0 Files
  • 27
    Apr 27th
    0 Files
  • 28
    Apr 28th
    0 Files
  • 29
    Apr 29th
    0 Files
  • 30
    Apr 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2016 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close