what you don't know can hurt you
Showing 1 - 16 of 16 RSS Feed

Files Date: 2018-10-10 to 2018-10-11

OpenSCAP Libraries 1.3.0
Posted Oct 10, 2018
Site open-scap.org

The openscap project is a set of open source libraries that support the SCAP (Security Content Automation Protocol) set of standards from NIST. It supports CPE, CCE, CVE, CVSS, OVAL, and XCCDF.

Changes: Added Microsoft Windows CPEs. oscap-ssh can supply SSH options into an environment variable. Verbose mode is a global option in all modules. Various other updates.
tags | protocol, library
systems | unix
MD5 | 0bf56a97fe3c97e5af744adddcbc922c
XMeye P2P Cloud Remote Code Execution / Integrity Issues
Posted Oct 10, 2018
Authored by Stefan Viehbock | Site sec-consult.com

XMeye P2P Cloud used with Xiongmai IP Cameras, NVRs and DVRs suffer from predictable Cloud IDs, default admin password, and various other issues that can result in remote code execution.

tags | exploit, remote, code execution
advisories | CVE-2018-17915, CVE-2018-17917, CVE-2018-17919
MD5 | a15fae239526f5d8cd72ff3aed5b1d4c
jQuery-File-Upload 9.22.0 Arbitrary File Upload
Posted Oct 10, 2018
Authored by Larry W. Cashdollar

jQuery-File-Upload versions 9.22.0 and below suffer from an unauthenticated arbitrary file upload vulnerability that allows for remote command execution.

tags | exploit, remote, arbitrary, file upload
MD5 | ea6808b39068792822a1f9dce775e157
Ubuntu Security Notice USN-3787-1
Posted Oct 10, 2018
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 3787-1 - It was discovered that Tomcat incorrectly handled returning redirects to a directory. A remote attacker could possibly use this issue with a specially crafted URL to redirect to arbitrary URIs.

tags | advisory, remote, arbitrary
systems | linux, ubuntu
advisories | CVE-2018-11784
MD5 | efdee0a52ec648f69a1310f947764a1a
Ubuntu Security Notice USN-3781-2
Posted Oct 10, 2018
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 3781-2 - USN-3781-1 fixed vulnerabilities in WebKitGTK+. The updated package was missing some header files, preventing certain applications from building. This update fixes the problem. A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution. Various other issues were also addressed.

tags | advisory, remote, web, denial of service, arbitrary, javascript, vulnerability, code execution, xss
systems | linux, ubuntu
MD5 | a6bc4a13b0557d357067efa2bbc88f09
Red Hat Security Advisory 2018-2902-01
Posted Oct 10, 2018
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2018-2902-01 - .NET Core is a managed software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET Core that address several security vulnerabilities are now available. The updated versions are .NET Core 1.1.1 and 1.0.13. These versions correspond to the October 2018 security release by .NET Core upstream projects. Issues addressed include an information leakage vulnerability.

tags | advisory, vulnerability
systems | linux, redhat
advisories | CVE-2018-8292
MD5 | a4d86f2c3502487a38c5373db7ae6782
Mikrotik RouterOS Remote Root
Posted Oct 10, 2018
Authored by Jacob Baines

Mikrotik RouterOS versions 6.x suffer from a remote root code execution vulnerability.

tags | exploit, remote, root, code execution
advisories | CVE-2018-14847
MD5 | 65309fd018c6146c4490eff9ff55b2f5
Delta Electronics Delta Industrial Automation COMMGR 1.08 Buffer Overflow
Posted Oct 10, 2018
Authored by t4rkd3vilz

Delta Electronics Delta Industrial Automation COMMGR versions 1.08 and below suffer from a buffer overflow vulnerability.

tags | exploit, overflow
advisories | CVE-2018-10594
MD5 | 8813546854099e80dd5eea909b672bae
VMware Security Advisory 2018-0025
Posted Oct 10, 2018
Authored by VMware | Site vmware.com

VMware Security Advisory 2018-0025 - VMware ESXi, Workstation, and Fusion workarounds address a denial-of-service vulnerability.

tags | advisory
advisories | CVE-2018-6977
MD5 | bfcb9abfaeb0d38ca07123f7fa05ad62
Red Hat Security Advisory 2018-2892-01
Posted Oct 10, 2018
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2018-2892-01 - GlusterFS is a key building block of Red Hat Gluster Storage. It is based on a stackable user-space design and can deliver exceptional performance for diverse workloads. GlusterFS aggregates various storage servers over network interconnections into one large, parallel network file system. The glusterfs packages have been upgraded to upstream version 3.12.2, which provides a number of bug fixes over the previous version. Issues addressed include a deserialization vulnerability.

tags | advisory
systems | linux, redhat
advisories | CVE-2018-10911
MD5 | dba7b0a37bf10dde4c9e57ef1a7de740
Ektron CMS 9.20 SP2 Improper Access Restrictions
Posted Oct 10, 2018
Authored by Alt3kx

Ektron CMS version 9.20 SP2 suffers from an improper access restriction vulnerability.

tags | exploit
advisories | CVE-2018-12596
MD5 | ca4ad2f1e7feda0dfa0819e60cce4e6b
Wikidforum 2.20 SQL Injection
Posted Oct 10, 2018
Authored by Ihsan Sencan

Wikidforum version 2.20 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
MD5 | c5521f2e8c2160e782f887d88667d5d6
FileZilla 3.33 Buffer Overflow
Posted Oct 10, 2018
Authored by Kagan Capar

FileZilla version 3.33 suffers from a buffer overflow vulnerability.

tags | exploit, overflow
MD5 | 7990ce5708a3bacdfcaaf6ae7cd8e40f
TestSSL 3.0rc2
Posted Oct 10, 2018
Authored by Dr. Dirk Wetter | Site drwetter.org

testssl.sh is a free command line tool which checks a server's service on any port for the support of TLS/SSL ciphers, protocols as well as recent cryptographic flaws, and much more. It is written in (pure) bash, makes only use of standard Unix utilities, openssl and last but not least bash sockets.

Changes: Partly addresses TCP fragmentation. Added name check for XMPP servers. Added support for STARTTLS LMTP. TLS 1.3 and OpenSSL 1.1.1 fixes.
tags | tool, scanner, protocol, bash
systems | unix
MD5 | 029f30f3ca7a6e138662ee6e8d60dffb
LOKIDN - Lapse Of Keyboard At Internationalized Domain Name
Posted Oct 10, 2018
Authored by Ozkan Mustafa Akkus

Whitepaper called LOKIDN - Lapse of Keyboard at Internationalized Domain Name.

tags | paper
MD5 | ad89882d630e6b45f937a59ccb45e033
Client Side Injection On Web Applications
Posted Oct 10, 2018
Authored by Milad Khoshdel

Whitepaper called Client Side Injection on Web Applications.

tags | paper, web
MD5 | 3d269f2d6a1fbcf25e9c559f0d53d23f
Page 1 of 1

File Archive:

March 2019

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Mar 1st
    15 Files
  • 2
    Mar 2nd
    5 Files
  • 3
    Mar 3rd
    3 Files
  • 4
    Mar 4th
    25 Files
  • 5
    Mar 5th
    20 Files
  • 6
    Mar 6th
    16 Files
  • 7
    Mar 7th
    17 Files
  • 8
    Mar 8th
    12 Files
  • 9
    Mar 9th
    3 Files
  • 10
    Mar 10th
    4 Files
  • 11
    Mar 11th
    23 Files
  • 12
    Mar 12th
    12 Files
  • 13
    Mar 13th
    12 Files
  • 14
    Mar 14th
    19 Files
  • 15
    Mar 15th
    12 Files
  • 16
    Mar 16th
    3 Files
  • 17
    Mar 17th
    1 Files
  • 18
    Mar 18th
    15 Files
  • 19
    Mar 19th
    1 Files
  • 20
    Mar 20th
    0 Files
  • 21
    Mar 21st
    0 Files
  • 22
    Mar 22nd
    0 Files
  • 23
    Mar 23rd
    0 Files
  • 24
    Mar 24th
    0 Files
  • 25
    Mar 25th
    0 Files
  • 26
    Mar 26th
    0 Files
  • 27
    Mar 27th
    0 Files
  • 28
    Mar 28th
    0 Files
  • 29
    Mar 29th
    0 Files
  • 30
    Mar 30th
    0 Files
  • 31
    Mar 31st
    0 Files

Top Authors In Last 30 Days

File Tags


packet storm

© 2019 Packet Storm. All rights reserved.

Security Services
Hosting By