what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New
Showing 1 - 10 of 10 RSS Feed

Files Date: 2022-10-01

Packet Storm New Exploits For September, 2022
Posted Oct 1, 2022
Authored by Todd J. | Site packetstormsecurity.com

This archive contains all of the 118 exploits added to Packet Storm in September, 2022.

tags | exploit
SHA-256 | e8769c7d7fbd55f5a041781a53024d1c91b5564634f5d62fd852af01b6828895
Ubuntu Security Notice USN-5650-1
Posted Oct 1, 2022
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 5650-1 - It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. It was discovered that the virtual terminal driver in the Linux kernel did not properly handle VGA console font changes, leading to an out-of-bounds write. A local attacker could use this to cause a denial of service or possibly execute arbitrary code.

tags | advisory, denial of service, arbitrary, kernel, local
systems | linux, ubuntu
advisories | CVE-2021-33655, CVE-2021-33656, CVE-2021-4037, CVE-2022-0850, CVE-2022-1199, CVE-2022-1204, CVE-2022-1729, CVE-2022-20368, CVE-2022-2639, CVE-2022-2964, CVE-2022-2978, CVE-2022-3028, CVE-2022-3202, CVE-2022-36946
SHA-256 | a632d5cd01e37da5d6b95bdc8fbe10f589561b1c98bfa15fbef375169d7f4e19
Ubuntu Security Notice USN-5648-1
Posted Oct 1, 2022
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 5648-1 - It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. Duoming Zhou discovered that race conditions existed in the timer handling implementation of the Linux kernel's Rose X.25 protocol layer, resulting in use-after-free vulnerabilities. A local attacker could use this to cause a denial of service.

tags | advisory, denial of service, arbitrary, kernel, local, vulnerability, protocol
systems | linux, ubuntu
advisories | CVE-2021-33655, CVE-2022-2318, CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-33743, CVE-2022-33744, CVE-2022-34494, CVE-2022-36946
SHA-256 | 694947a97de47224c18315b0b897bc61af2cb457626d7aece0e9acce30f80ef1
ZKSecurity BIO 3.0.5.0_R Privilege Escalation
Posted Oct 1, 2022
Authored by Silton Santos, Caio Burgardt

ZKSecurity BIO version 3.0.5.0_R suffers from a privilege escalation vulnerability.

tags | exploit
advisories | CVE-2022-36634
SHA-256 | b6d43dcace9b3768b3e0de50fde36243efa24ef1737964b40fee68c99c229b39
ZKSecurity BIO 4.1.2 SQL Injection / Code Execution
Posted Oct 1, 2022
Authored by Silton Santos, Caio Burgardt

ZKSecurity BIO version 4.1.2 suffers from a remote SQL injection vulnerability that can allow for remote code execution.

tags | exploit, remote, code execution, sql injection
advisories | CVE-2022-36635
SHA-256 | 2f5ddba7cf7e3024ddc6ad5a39968b8c149a652831c65c828f1565ea29f0e84d
Centreon 22.04.0 Cross Site Scripting
Posted Oct 1, 2022
Authored by syad

Centreon version 22.04.0 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss
advisories | CVE-2022-39988
SHA-256 | 69cf7baade94fd5e803782c07bbd53d7ff5f985beb2b08f0768155d0e8d0e38f
GuppY CMS 6.00.10 Shell Upload
Posted Oct 1, 2022
Authored by Chokri Hammedi

GuppY CMS version 6.00.10 suffers from an authenticated remote shell upload vulnerability.

tags | exploit, remote, shell
SHA-256 | 7379f5703f8c8447e89b8393459ce54d04deb30eed715a6df6b281a1b380609b
Joomla MyMuse 4.3.0 SQL Injection
Posted Oct 1, 2022
Authored by CraCkEr

Joomla MyMuse extension version 4.3.0 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
SHA-256 | 5deedb4e9c6f4ba784330c0618c0b611b0d2f5c953c41021281d833c3fab451c
Joomla JS Jobs Pro 1.3.6 SQL Injection
Posted Oct 1, 2022
Authored by CraCkEr

Joomla JS Jobs Pro extension version 1.3.6 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
SHA-256 | 1660f7d887aa22210db0f906f32132f8374ecb3142a0efecf10ad4eff14b83fa
Joomla jMarket 5.15 Cross Site Scripting
Posted Oct 1, 2022
Authored by CraCkEr

Joomla jMarket extension version 5.15 suffers from a cross site scripting vulnerability.

tags | exploit, xss
SHA-256 | 8da5768e7cb7b5cc942dd12baf6b03bdcf8be558191a68d4c29a450bdde8b5c9
Page 1 of 1
Back1Next

File Archive:

December 2022

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Dec 1st
    2 Files
  • 2
    Dec 2nd
    12 Files
  • 3
    Dec 3rd
    0 Files
  • 4
    Dec 4th
    0 Files
  • 5
    Dec 5th
    14 Files
  • 6
    Dec 6th
    0 Files
  • 7
    Dec 7th
    0 Files
  • 8
    Dec 8th
    0 Files
  • 9
    Dec 9th
    0 Files
  • 10
    Dec 10th
    0 Files
  • 11
    Dec 11th
    0 Files
  • 12
    Dec 12th
    0 Files
  • 13
    Dec 13th
    0 Files
  • 14
    Dec 14th
    0 Files
  • 15
    Dec 15th
    0 Files
  • 16
    Dec 16th
    0 Files
  • 17
    Dec 17th
    0 Files
  • 18
    Dec 18th
    0 Files
  • 19
    Dec 19th
    0 Files
  • 20
    Dec 20th
    0 Files
  • 21
    Dec 21st
    0 Files
  • 22
    Dec 22nd
    0 Files
  • 23
    Dec 23rd
    0 Files
  • 24
    Dec 24th
    0 Files
  • 25
    Dec 25th
    0 Files
  • 26
    Dec 26th
    0 Files
  • 27
    Dec 27th
    0 Files
  • 28
    Dec 28th
    0 Files
  • 29
    Dec 29th
    0 Files
  • 30
    Dec 30th
    0 Files
  • 31
    Dec 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Hosting By
Rokasec
close