exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New
Showing 1 - 25 of 410 RSS Feed

Files Date: 2020-03-01 to 2020-03-31

Ubuntu Security Notice USN-4311-1
Posted Mar 30, 2020
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 4311-1 - It was discovered that BlueZ incorrectly handled bonding HID and HOGP devices. A local attacker could possibly use this issue to impersonate non-bonded devices. It was discovered that BlueZ incorrectly handled certain commands. A local attacker could use this issue to cause BlueZ to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. Various other issues were also addressed.

tags | advisory, denial of service, arbitrary, local
systems | linux, ubuntu
advisories | CVE-2016-7837, CVE-2020-0556
SHA-256 | 2401291c8cfe00861ad69e1d24575c9b4a44b76e244600145ac823763df30bc5
Ubuntu Security Notice USN-4313-1
Posted Mar 30, 2020
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 4313-1 - Manfred Paul discovered that the bpf verifier in the Linux kernel did not properly calculate register bounds for certain operations. A local attacker could use this to expose sensitive information or gain administrative privileges.

tags | advisory, kernel, local
systems | linux, ubuntu
advisories | CVE-2020-8835
SHA-256 | fa187c728fb6ea55e45b4e9d7eb10b0d30203f2c246d29022b946cc478f7154c
10-Strike Network Inventory Explorer 9.03 Buffer Overflow
Posted Mar 30, 2020
Authored by Hodorsec

10-Strike Network Inventory Explorer version 9.03 Read-from-file buffer overflow exploit that uses SEH and ROP.

tags | exploit, overflow
SHA-256 | d9902b1b7f52b90b881ecd03566b14bdebeafb458532ad05ad92d0692856be5f
Recon Informer
Posted Mar 30, 2020
Authored by hyp3rlinx | Site hyp3rlinx.altervista.org

Recon-Informer is a basic real-time anti-reconnaissance detection tool for offensive security systems, useful for penetration testers. It runs on Windows/Linux and leverages scapy.

tags | tool
systems | linux, windows, unix
SHA-256 | 146ce8d8d2242cab323c77d566f77441925783b4b3a014f6c04050d000ff0ae7
Ubuntu Security Notice USN-4312-1
Posted Mar 30, 2020
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 4312-1 - Matthias Gerstner discovered that Timeshift did not securely create temporary files. An attacker could exploit a race condition in Timeshift and potentially execute arbitrary commands as root.

tags | advisory, arbitrary, root
systems | linux, ubuntu
advisories | CVE-2020-10174
SHA-256 | e5a1409e9d1a412aedb562b4d151252c5a7c2be77599c7c1e42b61660d3d4f46
Gentoo Linux Security Advisory 202003-66
Posted Mar 30, 2020
Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 202003-66 - Multiple vulnerabilities have been found in QEMU, the worst of which could result in the arbitrary execution of code. Versions less than 4.2.0-r2 are affected.

tags | advisory, arbitrary, vulnerability
systems | linux, gentoo
advisories | CVE-2019-13164, CVE-2020-8608
SHA-256 | 26d01ed289b866f334e985320e13cc92a34d670f55069043019c8c11db2221aa
Gentoo Linux Security Advisory 202003-65
Posted Mar 30, 2020
Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 202003-65 - Multiple vulnerabilities have been found in FFmpeg, the worst of which allows remote attackers to execute arbitrary code. Versions greater than or equal to 4 are affected.

tags | advisory, remote, arbitrary, vulnerability
systems | linux, gentoo
advisories | CVE-2018-10001, CVE-2018-6912, CVE-2018-7557, CVE-2018-7751, CVE-2018-9841, CVE-2019-12730, CVE-2019-13312, CVE-2019-13390, CVE-2019-17539, CVE-2019-17542
SHA-256 | 08bea2fea0ca58305840c700a9d387be009f877cc9024d75fa1464f89d1424b1
Gentoo Linux Security Advisory 202003-64
Posted Mar 30, 2020
Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 202003-64 - Multiple vulnerabilities have been found in libxls, the worst of which could result in the arbitrary execution of code. Versions less than 1.5.2 are affected.

tags | advisory, arbitrary, vulnerability
systems | linux, gentoo
advisories | CVE-2017-12110, CVE-2017-12111, CVE-2017-2896, CVE-2017-2897, CVE-2017-2919, CVE-2018-20450, CVE-2018-20452
SHA-256 | 1a18cd954c42cd43388347d9bf3054c60fdf894469784eff535b974352d59298
Gentoo Linux Security Advisory 202003-63
Posted Mar 30, 2020
Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 202003-63 - Multiple vulnerabilities have been found in GNU IDN Library 2, the worst of which could result in the remote execution of arbitrary code. Versions less than 2.2.0 are affected.

tags | advisory, remote, arbitrary, vulnerability
systems | linux, gentoo
advisories | CVE-2019-12290, CVE-2019-18224
SHA-256 | 53fb6354b0d8ed24a8a1cf0c1606c26800da39fd68fec33fe50b30cd527397ec
Joomla Fabrik 3.9.11 Directory Traversal
Posted Mar 30, 2020
Authored by qw3rTyTy

Joomla Fabrik component version 3.9.11 suffers from a directory traversal vulnerability.

tags | exploit, file inclusion
SHA-256 | 6bad29182a6bd3575ab9ca57bc52555b04aabb4cfdc488f7b87d996ef4ae786b
Gentoo Linux Security Advisory 202003-62
Posted Mar 30, 2020
Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 202003-62 - A buffer overflow in GNU Screen might allow remote attackers to corrupt memory. Versions less than 4.8.0 are affected.

tags | advisory, remote, overflow
systems | linux, gentoo
advisories | CVE-2020-9366
SHA-256 | 1adece542b013250731f7a551b384436a018e20e377848029349af3d1343d53a
Ubuntu Security Notice USN-4310-1
Posted Mar 30, 2020
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 4310-1 - A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution.

tags | advisory, remote, web, denial of service, arbitrary, javascript, code execution, xss
systems | linux, ubuntu
advisories | CVE-2020-10018
SHA-256 | 47400d1f7e7cbbdb1caa0b033a37774a32b0a0c826ca918da1deba8193be05e9
Ubuntu Security Notice USN-4308-2
Posted Mar 30, 2020
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 4308-2 - USN-4308-1 fixed several vulnerabilities in Twisted. This update provides the corresponding update for Ubuntu 14.04 ESM. it was discovered that Twisted incorrectly validated or sanitized certain URIs or HTTP methods. A remote attacker could use this issue to inject invalid characters and possibly perform header injection attacks. Various other issues were also addressed.

tags | advisory, remote, web, vulnerability
systems | linux, ubuntu
advisories | CVE-2019-12387, CVE-2019-12855, CVE-2020-10109
SHA-256 | 39bb858ec4921004263891b18b84c7e30cbaece7168ad65d0909bacbbf72c14e
Zen Load Balancer 3.10.1 Remote Code Execution
Posted Mar 30, 2020
Authored by Cody Sixteen

Zen Load Balancer version 3.10.1 suffers from a remote code execution vulnerability.

tags | exploit, remote, code execution
SHA-256 | 29c20561040a95db93c50db27ac160b719fa168e3166212b7e43c1092858f647
Pentesting Zen Load Balancer
Posted Mar 30, 2020
Authored by Cody Sixteen

This whitepaper is a quick tutorial on pentesting the Zen load balancer.

tags | paper
SHA-256 | 8ebf09c3635ca8278455d6f94536ff8b1c047cc31e15ee939200ecc06d560253
WordPress Event-Registration 5.43 Arbitrary File Upload
Posted Mar 30, 2020
Authored by KingSkrupellos

WordPress Event-Registration plugin version 5.43 suffers from an arbitrary file upload vulnerability.

tags | exploit, arbitrary, file upload
SHA-256 | 2029bbf836e7de4bb57eb88c7f5f10198718d2552a017080a1b57d33050ff81d
DesignMasterEvents CMS 1.0 SQL Injection / Cross Site Scripting
Posted Mar 30, 2020
Authored by thelastvvv

DesignMasterEvents CMS version 1.0 suffers from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection
SHA-256 | 68ddabd38ad26973fa944fdad5a667cbba331245d7a590161e74580d356dcbb6
Odin Secure FTP Expert 7.6.3 Site Info Denial Of Service
Posted Mar 30, 2020
Authored by Ivan Marmolejo

Odin Secure FTP Expert version 7.6.3 Site Info denial of service proof of concept exploit.

tags | exploit, denial of service, proof of concept
SHA-256 | 9237bd29aa749c0ee8fcd4e1c5a083c2943a4774708d940945375839849a0cb5
Redis Replication Code Execution
Posted Mar 29, 2020
Authored by Green-m | Site metasploit.com

This Metasploit module can be used to leverage the extension functionality added since Redis 4.0.0 to execute arbitrary code. To transmit the given extension it makes use of the feature of Redis which called replication between master and slave.

tags | exploit, arbitrary
SHA-256 | 2714070c8deee280f0dce194081f510869dec8b4d01b5127d461fe882cd026f7
Debian Security Advisory 4637-1
Posted Mar 28, 2020
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4637-1 - Kobus van Schoor discovered that network-manager-ssh, a plugin to provide VPN integration for SSH in NetworkManager, is prone to a privilege escalation vulnerability. A local user with privileges to modify a connection can take advantage of this flaw to execute arbitrary commands as root.

tags | advisory, arbitrary, local, root
systems | linux, debian
advisories | CVE-2020-9355
SHA-256 | 0bcfc1f9b60f364e802b9703ccd302227b82c7fc8b2a3d093b9da1fde2116589
Debian Security Advisory 4638-1
Posted Mar 28, 2020
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4638-1 - Several vulnerabilities have been discovered in the chromium web browser.

tags | advisory, web, vulnerability
systems | linux, debian
advisories | CVE-2019-19880, CVE-2019-19923, CVE-2019-19925, CVE-2019-19926, CVE-2020-6381, CVE-2020-6382, CVE-2020-6383, CVE-2020-6384, CVE-2020-6385, CVE-2020-6386, CVE-2020-6387, CVE-2020-6388, CVE-2020-6389, CVE-2020-6390
SHA-256 | f1d7d8fc7660736bca421146ad5d260b843093a2c82bc57d8db4ffa2c3e4bbef
Debian Security Advisory 4639-1
Posted Mar 28, 2020
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4639-1 - Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.

tags | advisory, web, arbitrary
systems | linux, debian
advisories | CVE-2019-20503, CVE-2020-6805, CVE-2020-6806, CVE-2020-6807, CVE-2020-6811, CVE-2020-6812, CVE-2020-6814
SHA-256 | 58a11b57f05936127a466550683eb0fa6f42c5d12f66fd85a10e35384557a63b
Debian Security Advisory 4640-1
Posted Mar 28, 2020
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4640-1 - handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or the execution of arbitrary code if malformed media files are processed.

tags | advisory, denial of service, arbitrary
systems | linux, debian
advisories | CVE-2018-20184, CVE-2018-20185, CVE-2018-20189, CVE-2019-11005, CVE-2019-11006, CVE-2019-11007, CVE-2019-11008, CVE-2019-11009, CVE-2019-11010, CVE-2019-11473, CVE-2019-11474, CVE-2019-11505, CVE-2019-11506, CVE-2019-19950
SHA-256 | 270dc8a682bea4ac1ace4b7a2aa472c7d4bea5b4613a776864fbdf3740a2ab68
Debian Security Advisory 4641-1
Posted Mar 28, 2020
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4641-1 - Vulnerabilities have been discovered in the webkit2gtk web engine.

tags | advisory, web
systems | linux, debian
advisories | CVE-2020-10018
SHA-256 | c9568fb73cb85d36f251d23d6552f12efcbed59af201d8213e6671351790109a
Debian Security Advisory 4642-1
Posted Mar 28, 2020
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4642-1 - Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code.

tags | advisory, arbitrary
systems | linux, debian
advisories | CVE-2019-20503, CVE-2020-6805, CVE-2020-6806, CVE-2020-6807, CVE-2020-6811, CVE-2020-6812, CVE-2020-6814
SHA-256 | e1e39f2d3300a2b6b20787091d1689c4393bf0a273f99f3144c80ce1c4c7a1ab
Page 1 of 17
Back12345Next

File Archive:

March 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Mar 1st
    16 Files
  • 2
    Mar 2nd
    0 Files
  • 3
    Mar 3rd
    0 Files
  • 4
    Mar 4th
    32 Files
  • 5
    Mar 5th
    28 Files
  • 6
    Mar 6th
    42 Files
  • 7
    Mar 7th
    17 Files
  • 8
    Mar 8th
    13 Files
  • 9
    Mar 9th
    0 Files
  • 10
    Mar 10th
    0 Files
  • 11
    Mar 11th
    15 Files
  • 12
    Mar 12th
    19 Files
  • 13
    Mar 13th
    21 Files
  • 14
    Mar 14th
    38 Files
  • 15
    Mar 15th
    15 Files
  • 16
    Mar 16th
    0 Files
  • 17
    Mar 17th
    0 Files
  • 18
    Mar 18th
    10 Files
  • 19
    Mar 19th
    0 Files
  • 20
    Mar 20th
    0 Files
  • 21
    Mar 21st
    0 Files
  • 22
    Mar 22nd
    0 Files
  • 23
    Mar 23rd
    0 Files
  • 24
    Mar 24th
    0 Files
  • 25
    Mar 25th
    0 Files
  • 26
    Mar 26th
    0 Files
  • 27
    Mar 27th
    0 Files
  • 28
    Mar 28th
    0 Files
  • 29
    Mar 29th
    0 Files
  • 30
    Mar 30th
    0 Files
  • 31
    Mar 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close