Showing 1 - 7 of 7

Files Date: 2023-06-14

AIDE 0.18.4: Posted Jun 14, 2023; Authored by Rami Lehti | Site aide.github.io; AIDE (Advanced Intrusion Detection Environment) is a free replacement for Tripwire(tm). It generates a database that can be used to check the integrity of files on server. It uses regular expressions for determining which files get added to the database. You can use several message digest algorithms to ensure that the files have not been tampered with.; Changes: Fixed handling of extended attributes on symlinks. Added missing parenthesis to log message. Fixed static linking of the aide binary. Multiple other fixes.; tags | tool, intrusion detection; systems | unix; SHA-256 | 4f7e2c7f49f3ca25fdafad6170390a4d8c8334af17bbd48ad34dbd6dde4ee757; Download | Favorite | View

Online Examination System Project 1.0 Cross Site Request Forgery: Posted Jun 14, 2023; Authored by Ramil Mustafayev; Online Examination System Project version 1.0 suffers from a cross site request forgery vulnerability.; tags | exploit, csrf; SHA-256 | 725a88dfe9b8c996f100d84c63281a3913f10df196949588b33d25eb4b6fa78e; Download | Favorite | View

Teachers Record Management System 1.0 Validation Bypass: Posted Jun 14, 2023; Authored by AFFAN AHMED; Teachers Record Management System version 1.0 suffers from file upload validation bypass vulnerability.; tags | exploit, bypass, file upload; advisories | CVE-2023-3187; SHA-256 | e55edf3ad86e1cd11b6b01476b398e215f92844b97799ddf06369d679ceeee36; Download | Favorite | View

Sales Tracker Management System 1.0 HTML Injection: Posted Jun 14, 2023; Authored by AFFAN AHMED; Sales Tracker Management System version 1.0 suffers from an html injection vulnerability.; tags | exploit; advisories | CVE-2023-3184; SHA-256 | 085221c233f3a22c5160ea399bf256389adbc5451cabbe28a0388ef230718b2f; Download | Favorite | View

Symmetricom SyncServer Unauthenticated Remote Command Execution: Posted Jun 14, 2023; Authored by Robert Bronstein, Justin Fatuch Apt4hax, Steve Campbell | Site metasploit.com; This Metasploit module exploits an unauthenticated command injection vulnerability in /controller/ping.php in Symmetricom SyncServer. The S100 through S350 (End of Life) models should be vulnerable to unauthenticated exploitation due to a session handling vulnerability.; tags | exploit, php; advisories | CVE-2022-40022; SHA-256 | 9228aebd2b8cb829828420734c809d84e0b8b72d483a6286436970baa02fbb09; Download | Favorite | View

Debian Security Advisory 5426-1: Posted Jun 14, 2023; Authored by Debian | Site debian.org; Debian Linux Security Advisory 5426-1 - An arbitrary file reads from malformed XML payload vulnerability was discovered in owslib, the Python client library for Open Geospatial (OGC) web services. This issue has been addressed by always using lxml as the XML parser with entity resolution disabled.; tags | advisory, web, arbitrary, python; systems | linux, debian; advisories | CVE-2023-27476; SHA-256 | 37c20253f7881119a39c68de0bba619b7c6321b3d74efdbadda4472e2f508d6f; Download | Favorite | View

Ubuntu Security Notice USN-6161-1: Posted Jun 14, 2023; Authored by Ubuntu | Site security.ubuntu.com; Ubuntu Security Notice 6161-1 - It was discovered that .NET did not properly enforce certain restrictions when deserializing a DataSet or DataTable from XML. An attacker could possibly use this issue to elevate their privileges. Kevin Jones discovered that .NET did not properly handle the AIA fetching process for X.509 client certificates. An attacker could possibly use this issue to cause a denial of service.; tags | advisory, denial of service; systems | linux, ubuntu; advisories | CVE-2023-24936, CVE-2023-29331, CVE-2023-29337, CVE-2023-32032, CVE-2023-33128; SHA-256 | d9a88210f8d5a28da35d8d47eaac79e52239e45f7bc38b4cca8e4ed63b990813; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days