exploit the possibilities
Showing 1 - 14 of 14 RSS Feed

Files Date: 2013-06-28 to 2013-06-29

Debian Security Advisory 2717-1
Posted Jun 28, 2013
Authored by Debian | Site debian.org

Debian Linux Security Advisory 2717-1 - Jon Erickson of iSIGHT Partners Labs discovered a heap overflow in xml-security-c, an implementation of the XML Digital Security specification. The fix to address CVE-2013-2154 introduced the possibility of a heap overflow in the processing of malformed XPointer expressions in the XML Signature Reference processing code, possibly leading to arbitrary code execution.

tags | advisory, overflow, arbitrary, code execution
systems | linux, debian
advisories | CVE-2013-2210
MD5 | e77b2ac1c69587019e6303726502b7af
Mandriva Linux Security Advisory 2013-186
Posted Jun 28, 2013
Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2013-186 - Updated puppet packages fix remote code execution vulnerability. When making REST api calls, the puppet master takes YAML from an untrusted client, deserializes it, and then calls methods on the resulting object. A YAML payload can be crafted to cause the deserialization to construct an instance of any class available in the ruby process, which allows an attacker to execute code contained in the payload.

tags | advisory, remote, code execution, ruby
systems | linux, mandriva
advisories | CVE-2013-3567
MD5 | d84c160ca7e05a2b999e98cd41a576ac
Slackware Security Advisory - ruby Updates
Posted Jun 28, 2013
Authored by Slackware Security Team | Site slackware.com

Slackware Security Advisory - New ruby packages are available for Slackware 13.1, 13.37, 14.0, and -current to fix a security issue. Related CVE Numbers: CVE-2013-4073.

tags | advisory, ruby
systems | linux, slackware
advisories | CVE-2013-4073
MD5 | 4f6fde76da879e81713e68dd639551e4
Fortigate Firewall Cross Site Request Forgery
Posted Jun 28, 2013
Authored by Sven Wurth

Fortigate Firewall versions prior to 4.3.13 and 5.0.2 suffer from multiple cross site request forgery vulnerabilities.

tags | exploit, vulnerability, csrf
advisories | CVE-2013-1414
MD5 | fbca49c87adc2d6887f9b55df4504d6b
YOPMail XSS / Injection / HTTP Response Splitting
Posted Jun 28, 2013
Authored by Juan Carlos Garcia

YOPMail suffers from cross site scripting, HTTP response splitting, CRLF injection, and session token handling vulnerabilities.

tags | exploit, web, vulnerability, xss
MD5 | a5d9881d634167e06e2db886f4cca8b3
Windows 7 SP1 Local Access SYSTEM Compromise
Posted Jun 28, 2013
Authored by Anastasios Monachos

If you have physical access to a Microsoft Windows 7 SP1 instance, you can leverage the "Launch startup Repair" functionality to gain SYSTEM access.

tags | exploit
systems | windows, 7
MD5 | c52e640cc11080951b3b69430724c758
Red Hat Security Advisory 2013-1001-01
Posted Jun 28, 2013
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2013-1001-01 - In accordance with the Red Hat Enterprise Linux Errata Support Policy, Extended Update Support for Red Hat Enterprise Linux 6.2 will be retired on December 31, 2013, and support will no longer be provided. Accordingly, Red Hat will no longer provide updated packages, including critical impact security patches or urgent priority bug fixes, for Red Hat Enterprise Linux 6.2 EUS after that date. In addition, after December 31, 2013, technical support through Red Hat's Global Support Services will no longer be provided. Note: This notification applies only to those customers subscribed to the Extended Update Support channel for Red Hat Enterprise Linux 6.2.

tags | advisory
systems | linux, redhat
MD5 | d6e9e6e8bab7cfee4a7eb576004543db
Mobile USB Drive HD 1.2 Shell Upload
Posted Jun 28, 2013
Authored by Benjamin Kunz Mejri | Site vulnerability-lab.com

Mobile USB Drive HD version 1.2 suffers from a remote shell upload vulnerability.

tags | exploit, remote, shell
MD5 | 57bd463871e8a0cb71bbfc62aac51778
Barracuda CudaTel Communication Server 2.6.002.040 XSS
Posted Jun 28, 2013
Authored by Benjamin Kunz Mejri | Site vulnerability-lab.com

Barracuda CudaTel Communication Server version 2.6.002.040 suffers from multiple script injection vulnerabilities.

tags | exploit, vulnerability
MD5 | 4684145ae35bcc6c956181686c6b3503
PCMan's FTP Server 2.0 Buffer Overflow
Posted Jun 28, 2013
Authored by Chako

PCMan's FTP Server version 2.0 remote buffer overflow exploit that leverages USER and pops calc.exe.

tags | exploit, remote, overflow
MD5 | 75b5495b82efc4e8713620080cbaa441
PayPal Enumeration / Information Disclosure
Posted Jun 28, 2013
Authored by Karim H.B. | Site vulnerability-lab.com

The PayPal Hong Kong marketing site suffers from information disclosure, user enumeration, and bruteforcing vulnerabilities.

tags | exploit, vulnerability, info disclosure
MD5 | b517c2fc98d08ea05db8c5e8e6f1a8af
eFile Wifi Transfer Manager 1.0 LFI / XSS
Posted Jun 28, 2013
Authored by Benjamin Kunz Mejri | Site vulnerability-lab.com

eFile Wifi Transfer Manager version 1.0 for iOS suffers from local file inclusion and cross site scripting vulnerabilities.

tags | exploit, local, vulnerability, xss, file inclusion
systems | ios
MD5 | 730f03745fd75d14f23b6285dbf1288d
Sony Playstation Network Password Reset
Posted Jun 28, 2013
Authored by Benjamin Kunz Mejri | Site vulnerability-lab.com

A critical password reset (session) vulnerability was detected in the Sony PSN Network web server auth system account application. The vulnerability allows remote attackers without a privileged application account to exchange session values and reset any psn user accounts.

tags | advisory, remote, web
MD5 | d6e4bc15b8000387851d15849913b56b
PCMan's FTP Server 2.0.7 Remote Root
Posted Jun 28, 2013
Authored by Jacob Holcomb

PCMan's FTP Server version 2.0.7 remote root buffer overflow exploit that leverages the USER command and binds a shell to port 4444.

tags | exploit, remote, overflow, shell, root
MD5 | 26b44400415603fc3d92809f89abd244
Page 1 of 1
Back1Next

File Archive:

September 2019

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Sep 1st
    1 Files
  • 2
    Sep 2nd
    38 Files
  • 3
    Sep 3rd
    30 Files
  • 4
    Sep 4th
    15 Files
  • 5
    Sep 5th
    12 Files
  • 6
    Sep 6th
    17 Files
  • 7
    Sep 7th
    3 Files
  • 8
    Sep 8th
    1 Files
  • 9
    Sep 9th
    24 Files
  • 10
    Sep 10th
    22 Files
  • 11
    Sep 11th
    22 Files
  • 12
    Sep 12th
    15 Files
  • 13
    Sep 13th
    5 Files
  • 14
    Sep 14th
    2 Files
  • 15
    Sep 15th
    1 Files
  • 16
    Sep 16th
    11 Files
  • 17
    Sep 17th
    16 Files
  • 18
    Sep 18th
    8 Files
  • 19
    Sep 19th
    14 Files
  • 20
    Sep 20th
    20 Files
  • 21
    Sep 21st
    3 Files
  • 22
    Sep 22nd
    0 Files
  • 23
    Sep 23rd
    0 Files
  • 24
    Sep 24th
    0 Files
  • 25
    Sep 25th
    0 Files
  • 26
    Sep 26th
    0 Files
  • 27
    Sep 27th
    0 Files
  • 28
    Sep 28th
    0 Files
  • 29
    Sep 29th
    0 Files
  • 30
    Sep 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2019 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close