what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New
Showing 251 - 275 of 305 RSS Feed

Files Date: 2023-12-01 to 2023-12-31

Red Hat Security Advisory 2023-7604-03
Posted Dec 6, 2023
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2023-7604-03 - Red Hat OpenShift Container Platform release 4.13.25 is now available with updates to packages and images that fix several bugs and add enhancements.

tags | advisory
systems | linux, redhat
advisories | CVE-2023-39325
SHA-256 | a01638a1173466b29f2df1496c1efceee3f56d26984a6b9172caa663d2ecb4e1
Red Hat Security Advisory 2023-7602-03
Posted Dec 6, 2023
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2023-7602-03 - Red Hat OpenShift Container Platform release 4.13.25 is now available with updates to packages and images that fix several bugs.

tags | advisory
systems | linux, redhat
advisories | CVE-2023-39325
SHA-256 | ec40c81127506ce07da5a22a41d45fc986cae5a3d6c4a329fe63b19b9a2c1cf9
Ubuntu Security Notice USN-6529-1
Posted Dec 5, 2023
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 6529-1 - It was discovered that Request Tracker incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to obtain sensitive information.

tags | advisory, remote
systems | linux, ubuntu
advisories | CVE-2021-38562, CVE-2023-41260
SHA-256 | b7781b6cef2d4e5a1231114d065fcd56952e3d3a8b5206f0f7f485e28a574086
BSides SF 2024 Call For Papers
Posted Dec 5, 2023
Site bsidessf.org

BSidesSF is soliciting submissions for presentations and panels for BSidesSF 2024 in San Francisco on May 4 and 5 2024.

tags | paper, conference
SHA-256 | 75e553207fcfe4803295c83bffc1e8269caff8e7f6dcc22679181410a2cfe306
WordPress MW WP Form 5.0.1 Arbitrary File Upload
Posted Dec 5, 2023
Authored by Istvan Marton | Site wordfence.com

WordPress MW WP Form plugin versions 5.0.1 and below suffer from an arbitrary file upload vulnerability.

tags | advisory, arbitrary, file upload
advisories | CVE-2023-6316
SHA-256 | 167c564d778ce9bc5dcaef0a3792319f6c3de4886f227d1ab0620bb35de396b6
FortiWeb VM 7.4.0 build577 CLI Crash
Posted Dec 5, 2023
Authored by Cody Sixteen

FortiWeb VM version 7.4.0 build577 suffers from a post authentication CLI crash when provided a long password.

tags | exploit
SHA-256 | 72af24d9c4b59a9c012276d1a41593a054fdc93f5709821fab01faa7b140b6cd
Simple Universal Fortigate Fuzzer Extension Script
Posted Dec 5, 2023
Authored by Cody Sixteen

This is a small extension script to monitor suff.py, or the Simple Universal Fortigate Fuzzer, and to collect crashlogs for future analysis.

tags | tool, fuzzer
SHA-256 | e4664830b3fe02fbdd2cb9687909e1cb5827c21ad4da619143c039c0d4cbe83d
Red Hat Security Advisory 2023-7641-03
Posted Dec 5, 2023
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2023-7641-03 - An update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Issues addressed include a denial of service vulnerability.

tags | advisory, denial of service
systems | linux, redhat
advisories | CVE-2023-2976
SHA-256 | 29033eb714a47da68f4d45f9d6fbf6094142a3de5ce6f102cfa95050e495fef8
Red Hat Security Advisory 2023-7639-03
Posted Dec 5, 2023
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2023-7639-03 - An update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 9. Issues addressed include a denial of service vulnerability.

tags | advisory, denial of service
systems | linux, redhat
advisories | CVE-2023-2976
SHA-256 | b4ee05f7a15ddafe3c0934b1d9a627794db64819e4ce36c26e59a574f3fbc087
Red Hat Security Advisory 2023-7638-03
Posted Dec 5, 2023
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2023-7638-03 - An update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 8. Issues addressed include a denial of service vulnerability.

tags | advisory, denial of service
systems | linux, redhat
advisories | CVE-2023-2976
SHA-256 | ac5c2282a89529d2f826e04ecc189318a28b3da80bd340e76a01e56dd2eb10d8
Red Hat Security Advisory 2023-7637-03
Posted Dec 5, 2023
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2023-7637-03 - An update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 7. Issues addressed include a denial of service vulnerability.

tags | advisory, denial of service
systems | linux, redhat
advisories | CVE-2023-2976
SHA-256 | cd22f340b1a13fd02c2957c7522cc7895fa61f6a21efa0677fce5ed4ee129aaa
Red Hat Security Advisory 2023-7599-03
Posted Dec 5, 2023
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2023-7599-03 - Red Hat OpenShift Container Platform release 4.14.5 is now available with updates to packages and images that fix several bugs and add enhancements. Issues addressed include a denial of service vulnerability.

tags | advisory, denial of service
systems | linux, redhat
advisories | CVE-2023-39325
SHA-256 | bd9c075d394730b859bd975fb64ffa6db3fc0fdcd8a381c9f889cff2cd3fb0d6
TinyDir 1.2.5 Buffer Overflow
Posted Dec 4, 2023
Authored by Marco Ivaldi | Site security.humanativaspa.it

TinyDir versions 1.2.5 and below suffer from a buffer overflow vulnerability with long path names.

tags | exploit, overflow
advisories | CVE-2023-49287
SHA-256 | cdcc3ee8902aca56a1a663bef58fe0cd58c43fd5918cc6c25bfa566f389d2573
Debian Security Advisory 5572-1
Posted Dec 4, 2023
Authored by Debian | Site debian.org

Debian Linux Security Advisory 5572-1 - Rene Rehme discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, did not properly set headers when handling attachments. This would allow an attacker to load arbitrary JavaScript code.

tags | advisory, arbitrary, javascript, imap
systems | linux, debian
advisories | CVE-2023-47272
SHA-256 | 7488c1f8cb39c45a8e6fb8d221877649d21afc6a14f9c3eceb2b735b03ccc617
PHPJabbers Appointment Scheduler 3.0 CSV Injection
Posted Dec 4, 2023
Authored by Rahad Chowdhury, BugsBD Limited

PHPJabbers Appointment Scheduler version 3.0 suffers from a CSV injection vulnerability.

tags | exploit
advisories | CVE-2023-48841
SHA-256 | 91df452bdb8414c73939d446206345890d6047ab573faf07167ba3465035c78f
Nikto Web Scanner 2.5.0
Posted Dec 4, 2023
Authored by Sullo | Site cirt.net

Nikto is an Open Source web server scanner which performs comprehensive tests against web servers for multiple items, including over 3500 potentially dangerous files/CGIs, versions on over 900 servers, and version specific problems on over 250 servers.

Changes: Breaking changes to JSON and XML output may have occurred. IPv6 support added. Updated db_checks format uses multiple reference. Hundreds of OSVDB and BID references replaced. Removal of some very old and false-positive prone tests. Decodes Netscaler cookies. Added -usecookies flag to send received cookies with subsequent requests. Added -followredirects flag to signal 3xx responses should be fetched and tested. Added -noslash to remove trailing slash from directories. Check for indexing on redirect paths. Alert on alt-svc header. Hundreds of bug fixes, test updates and enhancements, and other optimization changes.
tags | tool, web, cgi
systems | unix
SHA-256 | fb0dc4b2bc92cb31f8069f64ea4d47295bcd11067a7184da955743de7d97709d
PHPJabbers Appointment Scheduler 3.0 Missing Rate Limiting
Posted Dec 4, 2023
Authored by Rahad Chowdhury, BugsBD Limited

PHPJabbers Appointment Scheduler version 3.0 suffers from a missing rate limiting control that can allow for resource exhaustion.

tags | exploit
advisories | CVE-2023-48840
SHA-256 | c4139915e46fef357730abad6be1bb960a85b529ac04b96475adeb2dae8eea93
PHPJabbers Appointment Scheduler 3.0 Cross Site Scripting
Posted Dec 4, 2023
Authored by Rahad Chowdhury, BugsBD Limited

PHPJabbers Appointment Scheduler version 3.0 suffers from multiple persistent cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss
advisories | CVE-2023-48839
SHA-256 | bfc938e6e7895ad38fb6bab62ee404ab6d5c6f4f9a1fc5f93e362333dc7bc331
PHPJabbers Appointment Scheduler 3.0 HTML Injection
Posted Dec 4, 2023
Authored by Rahad Chowdhury, BugsBD Limited

PHPJabbers Appointment Scheduler version 3.0 suffers from multiple html injection vulnerabilities.

tags | exploit, vulnerability
advisories | CVE-2023-48838
SHA-256 | 4e08e35e0e0eda4f6efe64d3e3a3248c3265ce78404eb2cf8969e8ea0bb8ae23
October CMS 3.4.0 Wiki Article Cross Site Scripting
Posted Dec 4, 2023
Authored by Nazli Soysal Kuran | Site zeroscience.mk

October CMS version 3.4.0 suffers from a persistent cross site scripting vulnerability when a user has article posting capabilities.

tags | exploit, xss
SHA-256 | d580a80cc73913f04ace7c62f85113ce9e77937e62898798e82b472da77074cf
October CMS 3.4.0 Category Cross Site Scripting
Posted Dec 4, 2023
Authored by Nazli Soysal Kuran | Site zeroscience.mk

October CMS version 3.4.0 suffers from a persistent cross site scripting vulnerability when a user has category-creating capabilities.

tags | exploit, xss
SHA-256 | 36668205e95cab2b322636af7be77779877c012806877e9084103fc48afda16b
October CMS 3.4.0 Blog Cross Site Scripting
Posted Dec 4, 2023
Authored by Nazli Soysal Kuran | Site zeroscience.mk

October CMS version 3.4.0 suffers from a persistent cross site scripting vulnerability when a user has blog-creating capabilities.

tags | exploit, xss
SHA-256 | 96b738ec0ed1ddb9e322f25138fff8f77ecb84dbd07ba3530ee0039680c3f1c1
October CMS 3.4.0 Author Cross Site Scripting
Posted Dec 4, 2023
Authored by Nazli Soysal Kuran | Site zeroscience.mk

October CMS version 3.4.0 suffers from a persistent cross site scripting vulnerability when a user has author posting capabilities.

tags | exploit, xss
SHA-256 | fa27de65868b7a449ef6325d904dca7874168f0b58c222353c466ee363abde93
October CMS 3.4.0 About Cross Site Scripting
Posted Dec 4, 2023
Authored by Nazli Soysal Kuran | Site zeroscience.mk

October CMS version 3.4.0 suffers from a persistent cross site scripting vulnerability where a user has the ability to edit the landing/about page.

tags | exploit, xss
SHA-256 | ca674a079c1f7de869829d79e2a37dbd839d64c194a488dc6d93277574fbe1fe
PHPJabbers Car Rental 3.0 HTML Injection
Posted Dec 4, 2023
Authored by Rahad Chowdhury, BugsBD Limited

PHPJabbers Car Rental version 3.0 suffers from an html injection vulnerability.

tags | exploit
advisories | CVE-2023-48837
SHA-256 | b615ce21c59a8802d26a9e4c2d6d5d4123022b8add6057aafeee363a9a711421
Page 11 of 13
Back910111213Next

File Archive:

September 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Sep 1st
    261 Files
  • 2
    Sep 2nd
    17 Files
  • 3
    Sep 3rd
    38 Files
  • 4
    Sep 4th
    52 Files
  • 5
    Sep 5th
    23 Files
  • 6
    Sep 6th
    27 Files
  • 7
    Sep 7th
    0 Files
  • 8
    Sep 8th
    1 Files
  • 9
    Sep 9th
    16 Files
  • 10
    Sep 10th
    38 Files
  • 11
    Sep 11th
    21 Files
  • 12
    Sep 12th
    40 Files
  • 13
    Sep 13th
    18 Files
  • 14
    Sep 14th
    0 Files
  • 15
    Sep 15th
    0 Files
  • 16
    Sep 16th
    21 Files
  • 17
    Sep 17th
    51 Files
  • 18
    Sep 18th
    23 Files
  • 19
    Sep 19th
    48 Files
  • 20
    Sep 20th
    36 Files
  • 21
    Sep 21st
    0 Files
  • 22
    Sep 22nd
    0 Files
  • 23
    Sep 23rd
    38 Files
  • 24
    Sep 24th
    65 Files
  • 25
    Sep 25th
    24 Files
  • 26
    Sep 26th
    26 Files
  • 27
    Sep 27th
    0 Files
  • 28
    Sep 28th
    0 Files
  • 29
    Sep 29th
    0 Files
  • 30
    Sep 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2024 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close