Gentoo Linux Security Advisory 202210-9 - Multiple vulnerabilities have been discovered in Rust, the worst of which could result in denial of service. Versions less than 1.63.0-r1 are affected.
dca09c9b5b67deda3afc4870bdc944f1d4ebba1aeff4e66d52165c1fe960a28dUbuntu Security Notice 5682-1 - It was discovered that the BPF verifier in the Linux kernel did not properly handle internal data structures. A local attacker could use this to expose sensitive information. It was discovered that an out-of-bounds write vulnerability existed in the Video for Linux 2 implementation in the Linux kernel. A local attacker could use this to cause a denial of service or possibly execute arbitrary code.
290d766370dff052f65510abe2bf8c1d9c4f1ae1e64f9589a9ec5f7dbb24a319MiniDVBLinux versions 5.4 and below suffer from an arbitrary file disclosure vulnerability.
69d96731d3c498b5f426e741af91e8e43bfa7a49c2a0925103aa5d80b98b0065Gentoo Linux Security Advisory 202210-8 - Multiple vulnerabilities have been discovered in Tcpreplay, the worst of which could result in denial of service. Versions less than 4.4.2 are affected.
6de73fba1f8439fdfa0979c1912b936ddba014a8650724a965d873e4bd8137bbWordPress Photo Gallery plugin version 1.8.0 suffers from a cross site scripting vulnerability.
840e13a4028153ee403a099b9ac40a4ad96f345c2e3249f313e1613d9523cfacRRX IOB LP version 1.0 suffers from a DNS cache snooping vulnerability.
8ce8187c58d781a05f73a88067a5f2b17db6d4d2ce1c9052996ce4507f3266d3Ubuntu Security Notice 5680-1 - It was discovered that gThumb did not properly managed memory when processing certain image files. If a user were tricked into opening a specially crafted JPEG file, an attacker could possibly use this issue to cause gThumb to crash, resulting in a denial of service, or possibly execute arbitrary code. It was discovered that gThumb did not properly handled certain malformed image files. If a user were tricked into opening a specially crafted JPEG file, an attacker could possibly use this issue to cause gThumb to crash, resulting in a denial of service.
2296132fc57a5ff5ae5b2832f8103907ff5a45d5ab443a11fb2ede151d9ae141MiniDVBLinux version 5.4 suffers from an OS command execution vulnerability. This can be exploited to execute arbitrary commands as root through the command GET parameter in /tpl/commands.sh.
2bb4ce0464a822e38ee9bcc20631bf3ad836836ac2e15053b5a69988dda50ce9WiFi File Transfer version 1.0.8 suffers from a cross site scripting vulnerability.
53ca229935553f0c6352490f9ec2709e2f8825793664588aa14a50245b6969d1Backdoor.Win32.Redkod.d malware suffers from a hardcoded credential vulnerability.
c8a2b863479547ba380b48a0438c4767f9701d170eaab936769fe27a7277e3d9MiniDVBLinux version 5.4 suffers from an OS command injection vulnerability. This can be exploited to execute arbitrary commands with root privileges.
e19e04d5e5328c8f948b2f62f7f2a2d8c6c3b2ef2b324f8e880e61bc0db1f5c1GnuPG (the GNU Privacy Guard or GPG) is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440. As such, it is meant to be compatible with PGP from NAI, Inc. Because it does not use any patented algorithms, it can be used without any restrictions.
540b7a40e57da261fb10ef521a282e0021532a80fd023e75fb71757e8a4969edGnuPG (the GNU Privacy Guard or GPG) is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440. As such, it is meant to be compatible with PGP from NAI, Inc. Because it does not use any patented algorithms, it can be used without any restrictions. This is the LTS release.
1164b29a75e8ab93ea15033300149e1872a7ef6bdda3d7c78229a735f8204c28This Metasploit module leverages a remote shell upload vulnerability in pfSense pfBlockerNG plugin versions 2.1.4_26 and below. Note that version 3.x is unaffected.
4189e967b6b81ffffd850d9ece99fb550a29985985f2bcf2dcb9de105fffe02cThis Metasploit module exploits an unauthenticated remote code execution vulnerability in Spring Cloud Gateway versions 3.0.0 through 3.0.6 and 3.1.0. The vulnerability can be exploited when the Gateway Actuator endpoint is enabled, exposed and unsecured. An unauthenticated attacker can use SpEL expressions to execute code and take control of the victim machine.
21645b3916729fad4fc93eb22039c634ac8ba5e477c97ca0844e7968d2668c3dGentoo Linux Security Advisory 202210-7 - A vulnerability has been found in Deluge which could result in XSS. Versions less than 2.1.1 are affected.
f083f61b7864d2689e552b76ba553bb35f5751285fca73919a13f5101c821176Webile version 1.0.1 suffers from a directory traversal vulnerability.
be201e06202d8b7ce2a067fee03f183bf011c8c95cb3b8d3eaaf2175c03b1382MiniDVBLinux versions 5.4 and below suffer from an unauthenticated live stream disclosure when /tpl/tv_action.sh is called and generates a snapshot in /var/www/images/tv.jpg through the Simple VDR Protocol (SVDRP).
7a02e7cf0734c411e5e95eff4c56fee10e23d22efe0169ff42aae7db5349ec0eGentoo Linux Security Advisory 202210-6 - Multiple vulnerabilities have been discovered in libvirt, the worst of which could result in denial of service. Versions less than 8.2.0 are affected.
efaa17b0f41687b0bceb00f211741b1f061350c0afeaa73b3795aab7e864c8caThe Nullcon Berlin 2023 Call For Papers is open. It will take place March 9th through the 10th, 2023 in Berlin, Germany.
fe1cb7a63d18537e4b4b907db517cecd2187c370eebe4852d306e3dc81a202d3Gentoo Linux Security Advisory 202210-5 - Multiple vulnerabilities have been discovered in virglrenderer, the worst of which could result in remote code execution. Versions less than 0.10.1 are affected.
b254071064779769b613f8607d262dd9e3d4f0df15818f4a7f56b45b878cbaa1Backdoor.Win32.DarkSky.23 malware suffers from a buffer overflow vulnerability.
ccfdc5120ab2daf0c23bd4df3097f4eb8bff39aa1e7887bbd6954a2132619c04Ubuntu Security Notice 5683-1 - It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. Selim Enes Karaduman discovered that a race condition existed in the General notification queue implementation of the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service or possibly execute arbitrary code.
2f714311a2bf42767fd2c040e5e7b4c70e5d9ee2315aaccde091a713f4953e03MiniDVBLinux versions 5.4 and below root password changing proof of concept exploit.
0517758916f5224ee0d63a86e0026b8a9d83c177f294a5ec74c5a0938e44fc11MiniDVBLinux versions 5.4 and below allows the usage of the SVDRP protocol/commands to be sent by a remote attacker to manipulate and/or remotely control the TV.
6ca45864b59b9bfcfbf2d0155585603457973998837abe6c8927faea25e9ab5c
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed