< Back to JetLib.com

jetlib.sec

« Expand/Collapse

Recent items

Skip to page: 1 2 3 ... 848

November 19, 2018
8:30
NES Hack Lets the Mario Bros. Play Together
» ‎ Hack a Day

Being relegated to player two used to be a mark of disgrace in the 8-bit era of videogames. Between never being to select a level and having to wait your turn to play, the second player experience was decidedly third rate. Super Mario Bros. on the Nintendo Entertainment System was no different in this regard as it offered no character selection option and also required players to alternate taking control upon failing stages. It made the two player mode more like playing in parallel than actually together. However, there is a new ROM Hack for the original Super Mario Bros. …read more

Tags: nintendo hacks
7:00
How the Xbox Was Hacked
» ‎ Hack a Day

Enclosure: [download]

The millennium: a term that few had any use for before 1999, yet seemingly overnight it was everywhere. The turning of the millenium permeated every facet of pop culture. Unconventional popstars like Moby supplied electronica to the mainstream airwaves while audiences contemplated whether computers were the true enemy after seeing The Matrix. We were torn between anxiety — the impending Y2K bug bringing the end of civilization that Prince prophesied — and anticipation: the forthcoming release of the PlayStation 2.

Sony was poised to take control of the videogame console market once again. They had already sold more …read more

Tags: featured

6:57
#0daytoday #HTML Video Player 1.2.5 - Buffer-Overflow (SEH) Exploit [remote #exploits #0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #HTML Video Player 1.2.5 - Buffer-Overflow (SEH) Exploit [remote #exploits #0day #Exploit]
Tags:
6:56
#0daytoday #XMPlay 3.8.3 - .m3u Denial of Service Exploit [dos #exploits #0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #XMPlay 3.8.3 - .m3u Denial of Service Exploit [dos #exploits #0day #Exploit]
Tags:

4:00
It Might Be Possible To Build A Stingray With A Raspberry Pi
» ‎ Hack a Day

If there’s one thing that’s making you insecure, it’s your smartphone. Your smartphone is constantly pinging the cell towers, giving out your location and potentially leaking your private information to anyone with a radio. This is the idea behind an IMSI catcher, or Stingray in common parlance, and now you too can build one with parts you can buy off of Amazon.

The key to this hack is a software defined radio dongle, or RTL-SDR, that has been repurposed to listen in on a GSM network. Literally the only hardware required is an RTL-SDR that can be bought online for …read more

Tags: raspberry
1:00
Flywire Circuits at the Next Level
» ‎ Hack a Day

The technique of assembling circuits without substrate goes by many names; you may know it as flywiring, deadbugging, point to point wiring, or freeform circuits. Sometimes this technique is used for practical purposes like fixing design errors post-production or escaping tiny BGA components (ok, that one might be more cool than practical). Perhaps our favorite use is to create art, and [Mohit Bhoite] is an absolute genius of the form. He’s so prolific that it’s difficult to point to a particular one of his projects as an exemplar, though he has a dusty blog we might recommend digging through [Mohit]’s …read more

Tags: art

0:00
Vuln: Oracle Java SE/Java SE Embedded CVE-2018-3169 Remote Security Vulnerability
» ‎ SecurityFocus Vulnerabilities

Oracle Java SE/Java SE Embedded CVE-2018-3169 Remote Security Vulnerability
Tags:
0:00
Vuln: Oracle Java SE/Java SE Embedded/JRockit CVE-2018-3183 Remote Security Vulnerability
» ‎ SecurityFocus Vulnerabilities

Oracle Java SE/Java SE Embedded/JRockit CVE-2018-3183 Remote Security Vulnerability
Tags:
0:00
Vuln: Oracle Java SE/Java SE Embedded CVE-2018-3139 Remote Security Vulnerability
» ‎ SecurityFocus Vulnerabilities

Oracle Java SE/Java SE Embedded CVE-2018-3139 Remote Security Vulnerability
Tags:
0:00
Vuln: Oracle Java SE/Java SE Embedded CVE-2018-3136 Remote Security Vulnerability
» ‎ SecurityFocus Vulnerabilities

Oracle Java SE/Java SE Embedded CVE-2018-3136 Remote Security Vulnerability
Tags:
0:00
Vuln: Oracle Java SE/Java SE Embedded CVE-2018-13785 Remote Security Vulnerability
» ‎ SecurityFocus Vulnerabilities

Oracle Java SE/Java SE Embedded CVE-2018-13785 Remote Security Vulnerability
Tags:
0:00
Vuln: Oracle Java SE/Java SE Embedded/JRockit CVE-2018-3214 Remote Security Vulnerability
» ‎ SecurityFocus Vulnerabilities

Oracle Java SE/Java SE Embedded/JRockit CVE-2018-3214 Remote Security Vulnerability
Tags:

November 18, 2018
22:00
Fail Of The Week: When the Epoxy-Coated Chip Is Conductive
» ‎ Hack a Day

Every once in a while, you’ll find some weirdness that will send your head spinning. Most of the time you’ll chalk it up to a bad solder joint, some bad code, or just your own failings. This time it’s different. This is a story of weirdness that’s due entirely to a pin that shouldn’t be there. This is a package for an integrated circuit that has a pin zero.

The story begins with [Erich] building a few development boards for the Freescale Kinetis K20 FPGA. This is a USB-enabled microcontroller, and by all accounts, a worthwhile effort. So far, so …read more

Tags: hackaday Columns
19:00
The Lost Art Of Steam Heating
» ‎ Hack a Day

We got pointed by [packrat] to a 2015 presentation by [Dan Holohan] on the history and art of steam heating systems. At the advent of central heating systems for entire buildings, steam was used instead of water or air for the transport medium. These systems were installed in landmark buildings including the Empire State Building, which still use them to this day.

A major advantage of steam-based heating system is that no pump is required: the steam will naturally rise up through the piping, condenses and returns to the origin. This can be implemented as a single pipe where condensation …read more

Tags: home hacks
16:00
Hackaday Links: November 18, 2018
» ‎ Hack a Day

The greatest bit of consumer electronics is shipping and the reviews are out: Amazon’s Alexa-enabled microwave is a capable microwave, but befuddling to the voice-controlled-everything neophyte. Voice controlled everything is the last hope we have for technological innovation; it’s the last gasp of the consumer electronics industry. This is Amazon’s first thing with a built-in voice assistant, and while this is a marginally capable microwave at only 700 Watts — fine for a college dorm, but it’s generally worth shelling out a bit more cash for a 1000 Watt unit — the controls are befuddling. The first iteration is always …read more

Tags: hackaday Columns

16:00
[dos] XMPlay 3.8.3 - '.m3u' Denial of Service (PoC)
» ‎ Exploit-DB

XMPlay 3.8.3 - '.m3u' Denial of Service (PoC)
Tags:
16:00
[local] HTML Video Player 1.2.5 - Buffer-Overflow (SEH)
» ‎ Exploit-DB

HTML Video Player 1.2.5 - Buffer-Overflow (SEH)
Tags:
16:00
[dos] Microsoft Edge Chakra - OP_Memset Type Confusion
» ‎ Exploit-DB

Microsoft Edge Chakra - OP_Memset Type Confusion
Tags:

13:00
Fail of the Week: Laser-based Persistence of Vision Gadget
» ‎ Hack a Day

[XTronical]’s idea for a laser-based persistence of vision gadget failed, but the basic idea seemed sound. A row of inexpensive red lasers shine into a spinning mirror and are reflected onto a distant surface, making 8 scan lines. A reflective object sensor detects mirror position, and by rapidly turning individual lasers on and off, a pattern can be drawn out.

That was the idea, anyway. A quick prototype consisting of some small and economical red laser diodes and a double-sided mirror hot glued to the shaft of a small DC motor formed the guts of the unit. [XTronical] worried that …read more

Tags: Hardware
10:00
The (UV) Writing’s On The Wall
» ‎ Hack a Day

[Michael Karliner]’s Belshazzar, named for the Biblical character upon whose wall the writing appeared, is a unique light painting machine, that tracks an array of UV LEDs across a glow-in-the-dark background to paint transient dot-matrix letters in light. It was one of many cyberpunk-themed art pieces in Null Sector at the 2018 Electromagnetic Field hacker camp this summer.

The row of LEDs hangs down from a carriage that traverses a tubular rail, and is edged forward by means of a stepper motor driving a roller. This arrangement delivers the benefit that it can be scaled for displays of any length. …read more

Tags: art
7:00
Self-Powered Sun Tracker Takes a Cue from NASA Solar Probe
» ‎ Hack a Day

Getting a solar array to track the sun has always been an interesting problem, and it has led to some complicated solutions. Controllers that use GPS and servos seem to be much in favor these days, but as this NASA-inspired sun tracker shows, the task needn’t be overly complex.

It’s pretty obvious from the video below that [NightHawkInLight]’s solar tracker is just a proof-of-concept for now, but it certainly shows promise. It’s based on NASA’s sun-skimming Parker Solar Probe, which uses sensors at the rear of the probe to maneuver the craft to keep sunlight from peeking around the sides …read more

Tags: solar hacks
4:00
Linux as a Library: Unikernels are Coming
» ‎ Hack a Day

If you think about it, an operating system kernel is really just a very powerful shared library that offers services to many programs. Of course, it is a very powerful library, but still — its main purpose is to provide services to programs. Your program probably doesn’t use all of the myriad services the kernel provides. Even a typical system might not fully use all the things that are in a typical kernel. Red Hat has a new initiative to bring a technology called unikernels to the forefront. A unikernel is a single application linked with just enough of the …read more

Tags: linux hacks
1:00
A 1940s Gangster-Mobile Gets an Electric Makeover
» ‎ Hack a Day

When referring to classic cars, there’s a good reason that “they don’t make ’em like that anymore.” Old cars represented the limits of what could be done in terms of materials and manufacturing methods coupled with the styles of the time and cheap fuel. The result was big, heavy cars that would cost a fortune in gas to keep on the road today.

Some people just don’t want to let those styles go, however, and send their beast off for some special modifications. This 1949 Mercury coupe with an electric drivetrain conversion is one way of keeping that retro look …read more

Tags: classic hacks
November 17, 2018
22:00
CNC Embroidery Machine Punches Out Designs a Stitch at a Time
» ‎ Hack a Day

It’s doubtful that the early pioneers of CNC would have been able to imagine the range of the applications the technology would be used for. Once limited to cutting metal, CNC machines can now lance through materials using lasers and high-pressure jets of water, squirt molten plastic to build up 3D objects, and apparently even use needle and thread to create embroidered designs.

It may not seem like a typical CNC application, but [James Kolme]’s CNC embroidery machine sure looks familiar. Sitting in front of one of the prettiest sewing machines we’ve ever seen is a fairly typical X-Y gantry …read more

Tags: cnc hacks
19:00
Restoring An Apollo Guidance Computer
» ‎ Hack a Day

The Apollo Guidance Computer is a remarkably important piece of computing history. It’s the computer that guided the Apollo lander to land on the moon. We’ve seen a few replica builds over the years, but [CuriousMarc] got a closer look at one of the real things. In this video, [Marc] gets a look inside as his colleagues take apart one of the original AGCs and get a closer look at the insides of this piece of computer history.

Thanks to collector [Jimmie Loocke], they got to take apart AGO#14, one of the original flight computers from a Lunar Excursion Module …read more

Tags: news
16:00
Generative Design Algorithms Prepare For Space
» ‎ Hack a Day

NASA is famously risk-averse, taking cautious approaches because billions of taxpayer dollars are at stake and each failure receives far more political attention than their many successes. So while moving the final frontier outward requires adopting new ideas, those ideas must first prove themselves through a lengthy process of risk-reduction. Autodesk’s research into generative design algorithms has just taken a significant step on this long journey with a planetary lander concept.

It was built jointly with a research division of NASA’s Jet Propulsion Laboratory, the birthplace of many successful interplanetary space probes. This project got a foot in the door …read more

Tags: printer hacks
13:00
Meat-Seeking Raspberry Pi Leads you to Flavortown
» ‎ Hack a Day

[Patrick McDavid] and his wife had a legitimate work-related reason for writing some Python code that would pull the exact latitude and longitude of the individual locations within a national retain chain from Google’s Geocoding API. But don’t worry about that part of the story. What’s important now is that this simple concept was then expanded into a pocket-sized device that will lead the holder to the nearest White Castle or Five Guys location.

The device, which [Patrick] lovingly referrers to as the “Cheeseburger Compass”, uses a Raspberry Pi 3, an Adafruit 16×2 LCD with keypad, a GPS module, and …read more

Tags: gps hacks
10:00
Vintage Rotary Phone Turned Virtual Assistant
» ‎ Hack a Day

Like many of us, [Zoltan Toth-Czifra] has completely embraced 21st century living. His home is awash in smart gadgets and dodads, from color changing light bulbs to Internet-connected cameras. But he’s also got a soft spot for the look and feel of vintage hardware, like the rotary phone he keeps kicking around to remind him of the old days. He recently decided to bridge these two worlds by turning the rotary phone into a modern voice controlled assistant.

The first piece of the puzzle was getting the old school phone connected to something a bit more modern, namely a Raspberry …read more

Tags: classic hacks
7:00
SNES Controller Has a Pi Zero in the Trunk
» ‎ Hack a Day

We’re no stranger to seeing people jam a Raspberry Pi into an old gaming console to turn it into a RetroPie system. Frankly, at this point it seems like we’ve got to be getting close to seeing all possible permutations of the concept. According to the bingo card we keep here at Hackaday HQ we’re just waiting for somebody to put one into an Apple Bandai Pippin, creating the PiPi and achieving singularity. Get it done, people.

That being said, we’re still occasionally surprised by what people come up with. The Super GamePad Zero by [Zach Levine] is a fairly …read more

Tags: classic hacks

6:33
Report: Charges Against Assange Relate To Russian Hacking
» ‎ Packet Storm Security Headlines

Report: Charges Against Assange Relate To Russian Hacking
Tags: headlinegovernmentusabritainrussiadata losscyberwar
6:33
Amarillo City Workers PII Compromised
» ‎ Packet Storm Security Headlines

Amarillo City Workers PII Compromised
Tags: headlinegovernmentusadata loss
6:33
Blackberry In $1.4 Billion Deal To Buy Cylance
» ‎ Packet Storm Security Headlines

Blackberry In $1.4 Billion Deal To Buy Cylance
Tags: headlineblackberry
6:33
Emoji Attack Can Kill Skype For Business Chat
» ‎ Packet Storm Security Headlines

Emoji Attack Can Kill Skype For Business Chat
Tags: headlinemicrosoftdenial serviceskype

4:00
High Voltage Measurement is Shockingly Safe
» ‎ Hack a Day

With the right equipment and training, it’s possible to safely work on energized power lines in the 500 kV range with bare hands. Most of us, though, don’t have the right equipment or training, and should take great care when working with any appreciable amount of voltage. If you want to safely measure even the voltages of the wiring in your house there’s still substantial danger, and you’ll want to take some precautions like using isolated amplifiers.

While there are other safe methods for measuring line voltage or protecting your oscilloscope, [Jason]’s isolated amplifier method uses high voltage capacitors to …read more

Tags: tool hacks
1:00
A Sneak Peek at Anechoic Chamber Testing
» ‎ Hack a Day

[Mathieu Stephan] has something new in the works, and while he isn’t ready to take the wraps off of it yet, he was kind enough to document his experience putting the mysterious new gadget through its paces inside an anechoic chamber. Considering the majority of us will never get inside of one of these rooms, much less have the opportunity to test our own hardware in one, he figured it was the least he could do.

If you’re not familiar with an anechoic chamber, don’t feel bad. It’s not exactly the sort of thing you’ll have at the local makerspace. …read more

Tags: Hardware

November 16, 2018
22:47
#0daytoday #Budabot 4.0 Denial Of Service Vulnerability CVE-2018-19290 [dos #exploits #Vulnerability #0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #Budabot 4.0 Denial Of Service Vulnerability CVE-2018-19290 [dos #exploits #Vulnerability #0day #Exploit]
Tags:

22:00
Etch Your Own Circuit Boards In Your Kitchen
» ‎ Hack a Day

Right now, you can design a PCB, send it off to a PCB fab, and get professional finished boards in a few days for less than a dollar per square inch. This is fantastic, and it’s the driving force behind ever-dropping costs of hardware development. That’s great and all, but you can make circuit boards at home, easily, and without involving too many toxic chemicals. That’s exactly what [videoschmideo] did, and the results are pretty good.

The process starts with a single-sided copper clad board that would be readily obtainable at Radio Shack if there were any of those around …read more

Tags: chemistry hacks
19:00
Analog Clock Goes Digital, or Vice Versa
» ‎ Hack a Day

Designing a good clock takes a lot of considerations. It’s not just hands, faces, and numbers anymore; there are also word clocks, electronic clocks, marble clocks, or water clocks, and just about anything else imaginable can be used to tell time. Of course, electronic clocks are great for their versatility, and this one shows off an analog-looking clock that is (of course) digital, leveraging all of the perks of analog with all of the upsides of digital electronics.

One of the key design considerations that [Sasa] had while building this piece was that it needed to be silent. LEDs certainly …read more

Tags: clock hacks
16:00
Expanding 3D Printer Bed Stays True Under Fire
» ‎ Hack a Day

It’s hard to pass up another lesson in good machine design brought to us by [Mark Rehorst]. This time, [Mark] combats the relentless forces of bed deformation due to thermal expansion.

Did you think your printer stayed the same size when it heated up? Well, think again! According to [Mark’s] calculations, when heated, the bed can expand by as much as half a millimeter in the x/y direction. While x/y deformation seems like something we can ignore, that’s not always true. If our bed is rigidly fixed in place, then that change in dimension will only result in a …read more

Tags: printer hacks

13:01
Intel Rapid Storage Technology User Interface And Driver 15.9.0.1015 DLL Hijacking
» ‎ Packet Storm Security Exploits

Intel Rapid Storage Technology User Interface and Driver version 15.9.0.1015 suffers from a dll hijacking vulnerability.
Tags:

13:01
Intel Rapid Storage Technology User Interface And Driver 15.9.0.1015 DLL Hijacking
» ‎ Packet Storm Security Recent Files

Intel Rapid Storage Technology User Interface and Driver version 15.9.0.1015 suffers from a dll hijacking vulnerability.
Tags:

13:01
Intel Rapid Storage Technology User Interface And Driver 15.9.0.1015 DLL Hijacking
» ‎ Packet Storm Security Misc. Files

Intel Rapid Storage Technology User Interface and Driver version 15.9.0.1015 suffers from a dll hijacking vulnerability.
Tags:

13:00
The Kilogramme Will Cease To Be A Physical Entity
» ‎ Hack a Day

One of the most illuminating high school courses no doubt for many readers as much as for your scribe, was the series of physics lessons during which the SI units were explained. That glorious sense of having the order of the universe unlocked into an interlocking series of units whose definitions could all be derived in terms of a series of base units was mind-blowing in those early teen years, and even though the explanations might have been at a for-the-children level that has been blown out of the water by later tiers of learning it’s still a bedrock that …read more

Tags: science

12:59
Budabot 4.0 Denial Of Service
» ‎ Packet Storm Security Exploits

Budabot versions 0.6 through 4.0 suffer from a denial of service vulnerability.
Tags:

12:59
Budabot 4.0 Denial Of Service
» ‎ Packet Storm Security Recent Files

Budabot versions 0.6 through 4.0 suffer from a denial of service vulnerability.
Tags:

12:59
Budabot 4.0 Denial Of Service
» ‎ Packet Storm Security Misc. Files

Budabot versions 0.6 through 4.0 suffer from a denial of service vulnerability.
Tags:

12:08
#0daytoday #DomainMOD 4.11.01 - Cross-Site Scripting Vulnerability CVE-2018-19136 [webapps #exploits #Vulnerability #0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #DomainMOD 4.11.01 - Cross-Site Scripting Vulnerability CVE-2018-19136 [webapps #exploits #Vulnerability #0day #Exploit]
Tags:
12:08
#0daytoday #Helpdezk 1.1.1 - Arbitrary File Upload Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #Helpdezk 1.1.1 - Arbitrary File Upload Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]
Tags:
12:08
#0daytoday #PHP Mass Mail 1.0 - Arbitrary File Upload Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #PHP Mass Mail 1.0 - Arbitrary File Upload Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]
Tags:
12:07
#0daytoday #2-Plan Team 1.0.4 - Arbitrary File Upload Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #2-Plan Team 1.0.4 - Arbitrary File Upload Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]
Tags:
12:05
#0daytoday #Simple E-Document 1.31 - username SQL Injection Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #Simple E-Document 1.31 - username SQL Injection Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]
Tags:
11:45
#0daytoday #Kordil EDMS 2.2.60rc3 - Arbitrary File Upload Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #Kordil EDMS 2.2.60rc3 - Arbitrary File Upload Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]
Tags:
11:45
#0daytoday #Meneame English Pligg 5.8 - search SQL Injection Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #Meneame English Pligg 5.8 - search SQL Injection Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]
Tags:
11:45
#0daytoday #EverSync 0.5 - Arbitrary File Download Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #EverSync 0.5 - Arbitrary File Download Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]
Tags:
11:45
#0daytoday #Galaxy Forces MMORPG 0.5.8 - type SQL Injection Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #Galaxy Forces MMORPG 0.5.8 - type SQL Injection Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]
Tags:
11:45
#0daytoday #Net-Billetterie 2.9 - login SQL Injection Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #Net-Billetterie 2.9 - login SQL Injection Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]
Tags:
11:45
#0daytoday #BitZoom 1.0 - rollno SQL Injection Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #BitZoom 1.0 - rollno SQL Injection Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]
Tags:
11:45
#0daytoday #PHP-Proxy 5.1.0 - Local File Inclusion Vulnerability CVE-2018-19246 [webapps #exploits #Vulnerability #0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #PHP-Proxy 5.1.0 - Local File Inclusion Vulnerability CVE-2018-19246 [webapps #exploits #Vulnerability #0day #Exploit]
Tags:
11:30
#0daytoday #Linux - Broken uid/gid Mapping for Nested User Namespaces Exploit [remote #exploits #0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #Linux - Broken uid/gid Mapping for Nested User Namespaces Exploit [remote #exploits #0day #Exploit]
Tags:

11:30
DIY Telepresence Robot Built From Off-The-Shelf Parts
» ‎ Hack a Day

Telepresence hasn’t taken off in a big way just yet; it may take some time for society to adjust to robotic simulacra standing in for humans in face-to-face communications. Regardless, it’s an area of continuous development, and [MakerMan] has weighed in with a tidy DIY build that does the job.

It’s a build that relies on an assemblage of off-the-shelf parts to quickly put together a telepresence robot. Real-time video and audio communications are easily handled by a Huawei smartphone running Skype, set up to automatically answer video calls at all times. The phone is placed onto the robotic chassis …read more

Tags: phone hacks

10:03
[CVE-2018-3635] Executable installers are vulnerable^WEVIL (case 59): arbitrary code execution WITH escalation of privilege via Intel Rapid Storage Technology User Interface and Driver
» ‎ Full Disclosure

Posted by Stefan Kanthak on Nov 16
Hi @ll,

the executable installer of the
Intel® Rapid Storage Technology (Intel® RST) User Interface and Driver,
version 15.9.0.1015 (LATEST for Windows 7), released 11/14/2017, available
from <https://downloadmirror.intel.com/27400/eng/SetupRST.exe> via
<https://downloadcenter.intel.com/download/27400/Intel-Rapid-Storage-Technology-Intel-RST-User-Interface-and-Driver>
is (SURPRISE!) vulnerable!

CVSS score: 7.5/HIGH...

Tags:
10:02
Budabot !calc Denial of Service
» ‎ Full Disclosure

Posted by Ryan Delaney on Nov 16
<!--
# Exploit Title: Budabot !calc Denial of Service
# Date: 15-10-2018
# Exploit Author: Ryan Delaney
# Author Contact: ryan.delaney () owasp org
# Author LinkedIn: https://www.linkedin.com/in/infosecrd/
# Vendor Homepage: http://budabot.com/
# Software Link: https://github.com/Budabot/Budabot/releases
# Version: 0.6 -> 4.0
# Tested on: 4.0
# CVE: CVE-2018-19290

1. Description

In modules/HELPBOT_MODULE in Budabot 0.6 through 4.0, lax...

Tags:

10:01
FPGA Testbenches Made Easier
» ‎ Hack a Day

You finally finish writing the Verilog for that amazing new DSP function that will revolutionize human society and make you rich. Does it work? Your first instinct, of course, is to blow it into your FPGA of choice and see if it works. If it does, that was a great idea. If it doesn’t, it was a terrible idea because — typically — it is hard to look inside the FPGA. That’s why you’ll typical simulate your logic on a desktop computer before you commit it to the FPGA. But that means you have to delay gratification long enough to …read more

Tags: fpga

10:00
Remote Code Execution Vulnerability in ELBA5 Electronic Banking
» ‎ Full Disclosure

Posted by Florian Bogner on Nov 16
Remote Code Execution Vulnerability in ELBA5 Electronic Banking

Metadata
===================================================
Affected product: ELBA5 Network Installation (https://www.elba.at)
CVSSv3 Score: 10.0 (https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Vulnerability Status: Fixed with version 5.8.1
Author: Florian Bogner @ Bee IT Security Consulting e.U.
Tested on: Windows 7 / Windows 10 / Windows...

Tags:

8:52
Easy Outlook Express Recovery 2.0 Denial Of Service
» ‎ Packet Storm Security Exploits

Easy Outlook Express Recovery version 2.0 suffers from a denial of service vulnerability.
Tags:

8:52
Easy Outlook Express Recovery 2.0 Denial Of Service
» ‎ Packet Storm Security Recent Files

Easy Outlook Express Recovery version 2.0 suffers from a denial of service vulnerability.
Tags:

8:52
Easy Outlook Express Recovery 2.0 Denial Of Service
» ‎ Packet Storm Security Misc. Files

Easy Outlook Express Recovery version 2.0 suffers from a denial of service vulnerability.
Tags:

8:52
Ubuntu Security Notice USN-3824-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 3824-1 - It was discovered that the Security component of OpenJDK did not properly ensure that manifest elements were signed before use. An attacker could possibly use this to specially construct an untrusted Java application or applet that could escape sandbox restrictions. Artem Smotrakov discovered that the HTTP client redirection handler implementation in OpenJDK did not clear potentially sensitive information in HTTP headers when following redirections to different hosts. An attacker could use this to expose sensitive information. Various other issues were also addressed.
Tags:

8:52
Ubuntu Security Notice USN-3824-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 3824-1 - It was discovered that the Security component of OpenJDK did not properly ensure that manifest elements were signed before use. An attacker could possibly use this to specially construct an untrusted Java application or applet that could escape sandbox restrictions. Artem Smotrakov discovered that the HTTP client redirection handler implementation in OpenJDK did not clear potentially sensitive information in HTTP headers when following redirections to different hosts. An attacker could use this to expose sensitive information. Various other issues were also addressed.
Tags:

8:52
Ubuntu Security Notice USN-3824-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 3824-1 - It was discovered that the Security component of OpenJDK did not properly ensure that manifest elements were signed before use. An attacker could possibly use this to specially construct an untrusted Java application or applet that could escape sandbox restrictions. Artem Smotrakov discovered that the HTTP client redirection handler implementation in OpenJDK did not clear potentially sensitive information in HTTP headers when following redirections to different hosts. An attacker could use this to expose sensitive information. Various other issues were also addressed.
Tags:

8:51
Mumsoft Easy Software 2.0 Denial Of Service
» ‎ Packet Storm Security Exploits

Mumsoft Easy Software version 2.0 suffers from a denial of service vulnerability.
Tags:

8:51
Mumsoft Easy Software 2.0 Denial Of Service
» ‎ Packet Storm Security Recent Files

Mumsoft Easy Software version 2.0 suffers from a denial of service vulnerability.
Tags:

8:51
Mumsoft Easy Software 2.0 Denial Of Service
» ‎ Packet Storm Security Misc. Files

Mumsoft Easy Software version 2.0 suffers from a denial of service vulnerability.
Tags:

8:50
DomainMOD 4.11.01 Cross Site Scripting
» ‎ Packet Storm Security Exploits

DomainMOD versions 4.09.03 through 4.11.01 suffer from a cross site scripting vulnerability.
Tags:

8:50
DomainMOD 4.11.01 Cross Site Scripting
» ‎ Packet Storm Security Recent Files

DomainMOD versions 4.09.03 through 4.11.01 suffer from a cross site scripting vulnerability.
Tags:

8:50
DomainMOD 4.11.01 Cross Site Scripting
» ‎ Packet Storm Security Misc. Files

DomainMOD versions 4.09.03 through 4.11.01 suffer from a cross site scripting vulnerability.
Tags:

8:49
Helpdezk 1.1.1 Shell Upload
» ‎ Packet Storm Security Exploits

Helpdezk version 1.1.1 suffers from a remote shell upload vulnerability.
Tags:

8:49
Helpdezk 1.1.1 Shell Upload
» ‎ Packet Storm Security Recent Files

Helpdezk version 1.1.1 suffers from a remote shell upload vulnerability.
Tags:

8:49
Helpdezk 1.1.1 Shell Upload
» ‎ Packet Storm Security Misc. Files

Helpdezk version 1.1.1 suffers from a remote shell upload vulnerability.
Tags:

8:47
Warranty Tracking System 11.06.3 SQL Injection
» ‎ Packet Storm Security Exploits

Warranty Tracking System version 11.06.3 suffers from a remote SQL injection vulnerability.
Tags:

8:47
Warranty Tracking System 11.06.3 SQL Injection
» ‎ Packet Storm Security Recent Files

Warranty Tracking System version 11.06.3 suffers from a remote SQL injection vulnerability.
Tags:

8:47
Warranty Tracking System 11.06.3 SQL Injection
» ‎ Packet Storm Security Misc. Files

Warranty Tracking System version 11.06.3 suffers from a remote SQL injection vulnerability.
Tags:

8:45
Kernel Live Patch Security Notice LSN-0045-1
» ‎ Packet Storm Security Advisories

It was discovered that the generic SCSI driver in the Linux kernel did not properly enforce permissions on kernel memory access. A local attacker could use this to expose sensitive information or possibly elevate privileges. Wen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly ensure that xattr information remained in inode bodies. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (system crash). Various other issues were also addressed.
Tags:

8:45
Kernel Live Patch Security Notice LSN-0045-1
» ‎ Packet Storm Security Recent Files

It was discovered that the generic SCSI driver in the Linux kernel did not properly enforce permissions on kernel memory access. A local attacker could use this to expose sensitive information or possibly elevate privileges. Wen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly ensure that xattr information remained in inode bodies. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (system crash). Various other issues were also addressed.
Tags:

8:45
Kernel Live Patch Security Notice LSN-0045-1
» ‎ Packet Storm Security Misc. Files

It was discovered that the generic SCSI driver in the Linux kernel did not properly enforce permissions on kernel memory access. A local attacker could use this to expose sensitive information or possibly elevate privileges. Wen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly ensure that xattr information remained in inode bodies. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (system crash). Various other issues were also addressed.
Tags:

8:41
Everus.org 1.0.9 Second Factor Redirection
» ‎ Packet Storm Security Exploits

The Everus.org Android application version 1.0.9 has a fundamental design flaw where the client can send a random phone number during the second factor flow with an arbitrary existing user id and the server send the attacker the one time password for the other user.
Tags:

8:41
Everus.org 1.0.9 Second Factor Redirection
» ‎ Packet Storm Security Recent Files

The Everus.org Android application version 1.0.9 has a fundamental design flaw where the client can send a random phone number during the second factor flow with an arbitrary existing user id and the server send the attacker the one time password for the other user.
Tags:

8:41
Everus.org 1.0.9 Second Factor Redirection
» ‎ Packet Storm Security Misc. Files

The Everus.org Android application version 1.0.9 has a fundamental design flaw where the client can send a random phone number during the second factor flow with an arbitrary existing user id and the server send the attacker the one time password for the other user.
Tags:

8:30
Turning A Rotary Tool Into A CNC
» ‎ Hack a Day

Now that 3D printers are everywhere, electronics are cheap, and open source software is extremely capable, just about anyone can build a CNC machine. That’s exactly what [Nikodem] did by turning a Dremel tool into an extremely capable CNC machine that’s able to cut MDF and acrylic and can engrave aluminum.

The electronics for the build are just an Arduino Uno, a motor driver sheld running GRBL, a relay for the Dremel, a few motor drivers, and a big ‘ol 30 A power supply. The build uses NEMA 17 motors, two on the Y-axis and one each on the X …read more

Tags: printer hacks

7:27
Justice Department Has Prepared Indictment Against Assange, Court Docs Reveal
» ‎ Packet Storm Security Headlines

Justice Department Has Prepared Indictment Against Assange, Court Docs Reveal
Tags: headlinegovernmentusabritainrussiadata losscyberwarspywaremilitary
7:27
John McAfee Found Liable For 2012 Death Of Belize Neighbor
» ‎ Packet Storm Security Headlines

John McAfee Found Liable For 2012 Death Of Belize Neighbor
Tags: headlinemcafee
7:27
How To Tell If Your Account Has Been Hacked
» ‎ Packet Storm Security Headlines

How To Tell If Your Account Has Been Hacked
Tags: headlinehackergoogleyahoofacebooktwitter
7:27
Russian Banks Hit By Major Phishing Attacks
» ‎ Packet Storm Security Headlines

Russian Banks Hit By Major Phishing Attacks
Tags: headlinehackerbankrussiacybercrimefraudpasswordphish

$Permalink for 'Supercon: Designing Your Own Diffractive Optics'$ 7:00
Supercon: Designing Your Own Diffractive Optics
» ‎ Hack a Day

Kelly Peng is an electrical and optical engineer, and founder of Kura AR. She’s built a fusion reactor, a Raman spectrometer, a DIY structured light camera, a linear particle accelerator, and emotional classifiers for likes and dislikes. In short, we have someone who can do anything, and she came in to talk about one of the dark arts (pun obviously intended): optics.

The entire idea of Kura AR is to build an immersive augmented reality experience, and when it comes to AR glasses, there are two ways of doing it. You could go the Google Glass route and use a …read more

Tags: cons
4:00
Delta Bot Plucks Out Tunes on a Mandolin
» ‎ Hack a Day

Is there no occupation safe from the scourge of robotic replacement? First it was the automobile assemblers, then fast food workers, and now it’s the — mandolin players?

Probably not, unless [Clayton Darwin]’s mandolin playing pluck-bot has anything to say about it. The pick-wielding delta-ish robot can be seen in action in the video below, plucking out the iconic opening measures of that 70s prom-theme favorite, “Colour My World.” The robot consists of two stepper motors connected to a hinged wooden arm by two pushrods. We had to slow the video down to catch the motion, but it looks like …read more

Tags: musical hacks

2:49
#0daytoday #PHP 5.2.3 imap (Debian Based) - imap_open Disable Functions Bypass Vulnerability [#0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #PHP 5.2.3 imap (Debian Based) - imap_open Disable Functions Bypass Vulnerability [#0day #Exploit]
Tags:
2:49
#0daytoday #Notepad3 1.0.2.350 - Denial of Service Exploit [dos #exploits #0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #Notepad3 1.0.2.350 - Denial of Service Exploit [dos #exploits #0day #Exploit]
Tags:
2:48
#0daytoday #Easy Outlook Express Recovery 2.0 - Denial of Service Exploit [dos #exploits #0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #Easy Outlook Express Recovery 2.0 - Denial of Service Exploit [dos #exploits #0day #Exploit]
Tags:
2:47
#0daytoday #Mumsoft Easy Software 2.0 - Denial of Service Exploit [dos #exploits #0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #Mumsoft Easy Software 2.0 - Denial of Service Exploit [dos #exploits #0day #Exploit]
Tags:

1:00
Smooth Moves from Cheap Motors
» ‎ Hack a Day

Building an electric motor isn’t hard or technically challenging, but these motors have very little in the way of control. A stepper motor is usually employed in applications that need precision, but adding this feature to a motor adds complexity and therefore cost. There is a small $3 stepper motor available, but the downside to this motor is that it’s not exactly the Cadillac of motors, nor was it intended to be. With some coaxing, though, [T-Kuhn] was able to get a lot out of this small, cheap motor.

To test out the motors, [T-Kuhn] built a small robotic arm. …read more

Tags: robots hacks

0:00
Vuln: Linux Kernel CVE-2018-18955 Local Privilege Escalation Vulnerability
» ‎ SecurityFocus Vulnerabilities

Linux Kernel CVE-2018-18955 Local Privilege Escalation Vulnerability
Tags:
0:00
Vuln: Asterisk Open Source Remote Buffer Overflow Vulnerability
» ‎ SecurityFocus Vulnerabilities

Asterisk Open Source Remote Buffer Overflow Vulnerability
Tags:

November 15, 2018
22:00
How’s a Gyro Work?
» ‎ Hack a Day

It wasn’t long ago that a gyro — or gyroscope — was an exotic piece of electronics gear. Most of us only saw them as children’s toys that would balance on your finger. That’s changed, though, thanks to microelectronics. Now your game controller, your phone, and your drone all probably use little ICs that are actually three-axis gyroscopes. Ever wonder how they work and what they do? [RCModelReviews] has a video that covers three kinds of gyros: old mechanical gyros, modern MEMS gyros, and even an exotic laser-based gyro. (YouTube, embedded below.)

Gyroscopes allow you to detect orientation by detecting …read more

Tags: science
19:00
Magnets and Printed Parts Make Quick-Disconnect Terminals
» ‎ Hack a Day

The Apple MagSafe power connector is long gone from their product line, but that doesn’t mean that magnetic connectors aren’t without their charms. It just takes the right application, and finding one might be easier with these homebrew magnetic connectors.

We’ll admit that the application that [Wesley Lee] found for his magnetic connectors is perhaps a little odd. He’s building something called Linobyte, a hybrid art and electronics project that pays homage to computing history with very high-style, interactive core memory modules. The connectors are for the sense wire that is weaved through the eight toroids on each module, to …read more

Tags: misc hacks

17:29
Linux Broken UID/GID Mapping
» ‎ Packet Storm Security Exploits

Linux has a broken uid/gid mapping for nested user namespaces with greater than 5 ranges.
Tags:

17:29
Linux Broken UID/GID Mapping
» ‎ Packet Storm Security Recent Files

Linux has a broken uid/gid mapping for nested user namespaces with greater than 5 ranges.
Tags:

17:29
Linux Broken UID/GID Mapping
» ‎ Packet Storm Security Misc. Files

Linux has a broken uid/gid mapping for nested user namespaces with greater than 5 ranges.
Tags:

16:00
Measuring The Cooling Effect Of Transformer Oil
» ‎ Hack a Day

Transformer oil has long served two purposes, cooling and insulating. The large, steel encased transformers we see connected to the electrical grid are filled with transformer oil which is circulated through radiator fins for dumping heat to the surrounding air. In the hacker world, we use transformer oil for cooling RF dummy loads and insulating high voltage components. [GreatScott] decided to do some tests of his own to see just how good it is for cooling circuits.

He started with testing canola oil but found that it breaks down from contact with air and becomes rancid. So he purchased some …read more

Tags: chemistry hacks

16:00
[webapps] Helpdezk 1.1.1 - Arbitrary File Upload
» ‎ Exploit-DB

Helpdezk 1.1.1 - Arbitrary File Upload
Tags:
16:00
[webapps] Warranty Tracking System 11.06.3 - 'txtCustomerCode' SQL Injection
» ‎ Exploit-DB

Warranty Tracking System 11.06.3 - 'txtCustomerCode' SQL Injection
Tags:
16:00
[webapps] DomainMOD 4.11.01 - Cross-Site Scripting
» ‎ Exploit-DB

DomainMOD 4.11.01 - Cross-Site Scripting
Tags:
16:00
[dos] Mumsoft Easy Software 2.0 - Denial of Service (PoC)
» ‎ Exploit-DB

Mumsoft Easy Software 2.0 - Denial of Service (PoC)
Tags:
16:00
[dos] Easy Outlook Express Recovery 2.0 - Denial of Service (PoC)
» ‎ Exploit-DB

Easy Outlook Express Recovery 2.0 - Denial of Service (PoC)
Tags:
16:00
[local] Linux - Broken uid/gid Mapping for Nested User Namespaces
» ‎ Exploit-DB

Linux - Broken uid/gid Mapping for Nested User Namespaces
Tags:

13:00
Foam Airboat is Cheap RC Fun
» ‎ Hack a Day

Archer fans and residents of Louisiana will already be familiar with the concept of the airboat. Put a powerful engine running an aircraft prop on a flat-bottomed hull, and you’ve got an excellent way to traverse the marshes of the American South. While a fully-fledged airboat might run you the best part of $100,000, this no-frills radio-controlled version is great fun at a much lower price.

The hull is built on a sheet of foam, which is cheap, readily available, and suitably buoyant for the task. It’s then kitted out with a brushless motor to run the prop and a …read more

Tags: classic hacks

11:35
#0daytoday #WordPress Custom Frontend Login Registration Form 1.01 Cross Site Scripting Vulnerabili [#0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #WordPress Custom Frontend Login Registration Form 1.01 Cross Site Scripting Vulnerabili [#0day #Exploit]
Tags:
11:32
#0daytoday #Wordpress Ninja Forms 3.3.17 Plugin - Cross-Site Scripting Vulnerability [#0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #Wordpress Ninja Forms 3.3.17 Plugin - Cross-Site Scripting Vulnerability [#0day #Exploit]
Tags:

11:30
Researchers Seek to Create the Digital Smell Interface
» ‎ Hack a Day

We hear digital audio, we see digital video, and we feel digital haptic feedback. However, we don’t have an analog for the sense of smell. [Kasun] and his team of researchers from the Imagineering Institute in Malaysia are in the midst of changing that reality. Their project aims to transmit fragrances via electronic stimulation. Though it’s really more of a step toward creating a multi-sensory internet.

The team’s “electric smell machine” consists of a variable power supply connected to silver electrodes wrapped around an endoscopic camera. The camera is necessary to ensure contact with the user’s olfactory bulb as electric …read more

Tags: news

10:20
Asterisk Project Security Advisory - AST-2018-010
» ‎ Packet Storm Security Advisories

Asterisk Project Security Advisory - There is a buffer overflow vulnerability in dns_srv and dns_naptr functions of Asterisk that allows an attacker to crash Asterisk via a specially crafted DNS SRV or NAPTR response. The attacker's request causes Asterisk to segfault and crash.
Tags:

10:20
Asterisk Project Security Advisory - AST-2018-010
» ‎ Packet Storm Security Recent Files

Asterisk Project Security Advisory - There is a buffer overflow vulnerability in dns_srv and dns_naptr functions of Asterisk that allows an attacker to crash Asterisk via a specially crafted DNS SRV or NAPTR response. The attacker's request causes Asterisk to segfault and crash.
Tags:

10:20
Asterisk Project Security Advisory - AST-2018-010
» ‎ Packet Storm Security Misc. Files

Asterisk Project Security Advisory - There is a buffer overflow vulnerability in dns_srv and dns_naptr functions of Asterisk that allows an attacker to crash Asterisk via a specially crafted DNS SRV or NAPTR response. The attacker's request causes Asterisk to segfault and crash.
Tags:

10:19
PHP-Proxy 5.1.0 Local File Inclusion
» ‎ Packet Storm Security Exploits

PHP-Proxy version 5.1.0 suffers from a local file inclusion vulnerability.
Tags:

10:19
PHP-Proxy 5.1.0 Local File Inclusion
» ‎ Packet Storm Security Recent Files

PHP-Proxy version 5.1.0 suffers from a local file inclusion vulnerability.
Tags:

10:19
PHP-Proxy 5.1.0 Local File Inclusion
» ‎ Packet Storm Security Misc. Files

PHP-Proxy version 5.1.0 suffers from a local file inclusion vulnerability.
Tags:

10:15
Ubuntu Security Notice USN-3823-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 3823-1 - It was discovered that memory present in the L1 data cache of an Intel CPU core may be exposed to a malicious process that is executing on the CPU core. This vulnerability is also known as L1 Terminal Fault. A local attacker in a guest virtual machine could use this to expose sensitive information. It was discovered that memory present in the L1 data cache of an Intel CPU core may be exposed to a malicious process that is executing on the CPU core. This vulnerability is also known as L1 Terminal Fault. A local attacker could use this to expose sensitive information. Various other issues were also addressed.
Tags:

10:15
Ubuntu Security Notice USN-3823-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 3823-1 - It was discovered that memory present in the L1 data cache of an Intel CPU core may be exposed to a malicious process that is executing on the CPU core. This vulnerability is also known as L1 Terminal Fault. A local attacker in a guest virtual machine could use this to expose sensitive information. It was discovered that memory present in the L1 data cache of an Intel CPU core may be exposed to a malicious process that is executing on the CPU core. This vulnerability is also known as L1 Terminal Fault. A local attacker could use this to expose sensitive information. Various other issues were also addressed.
Tags:

10:15
Ubuntu Security Notice USN-3823-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 3823-1 - It was discovered that memory present in the L1 data cache of an Intel CPU core may be exposed to a malicious process that is executing on the CPU core. This vulnerability is also known as L1 Terminal Fault. A local attacker in a guest virtual machine could use this to expose sensitive information. It was discovered that memory present in the L1 data cache of an Intel CPU core may be exposed to a malicious process that is executing on the CPU core. This vulnerability is also known as L1 Terminal Fault. A local attacker could use this to expose sensitive information. Various other issues were also addressed.
Tags:

10:14
WordPress Ninja Forms 3.3.17 Cross Site Scripting
» ‎ Packet Storm Security Exploits

WordPress Ninja Forms version 3.3.17 suffers from a cross site scripting vulnerability.
Tags:

10:14
WordPress Ninja Forms 3.3.17 Cross Site Scripting
» ‎ Packet Storm Security Recent Files

WordPress Ninja Forms version 3.3.17 suffers from a cross site scripting vulnerability.
Tags:

10:14
WordPress Ninja Forms 3.3.17 Cross Site Scripting
» ‎ Packet Storm Security Misc. Files

WordPress Ninja Forms version 3.3.17 suffers from a cross site scripting vulnerability.
Tags:

10:12
WordPress Custom Frontend Login Registration Form 1.01 Cross Site Scripting
» ‎ Packet Storm Security Exploits

WordPress Custom Frontend Login Registration Form plugin version 1.01 suffers from multiple cross site scripting vulnerabilities.
Tags:

10:12
WordPress Custom Frontend Login Registration Form 1.01 Cross Site Scripting
» ‎ Packet Storm Security Recent Files

WordPress Custom Frontend Login Registration Form plugin version 1.01 suffers from multiple cross site scripting vulnerabilities.
Tags:

10:12
WordPress Custom Frontend Login Registration Form 1.01 Cross Site Scripting
» ‎ Packet Storm Security Misc. Files

WordPress Custom Frontend Login Registration Form plugin version 1.01 suffers from multiple cross site scripting vulnerabilities.
Tags:

10:11
PHP Mass Mail 1.0 Shell Upload
» ‎ Packet Storm Security Exploits

PHP Mass Mail version 1.0 suffers from a remote shell upload vulnerability.
Tags:

10:11
PHP Mass Mail 1.0 Shell Upload
» ‎ Packet Storm Security Recent Files

PHP Mass Mail version 1.0 suffers from a remote shell upload vulnerability.
Tags:

10:11
PHP Mass Mail 1.0 Shell Upload
» ‎ Packet Storm Security Misc. Files

PHP Mass Mail version 1.0 suffers from a remote shell upload vulnerability.
Tags:

10:11
Red Hat Security Advisory 2018-3618-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2018-3618-01 - The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update upgrades Flash Player to version 31.0.0.148. Issues addressed include an information leakage vulnerability.
Tags:

10:11
Red Hat Security Advisory 2018-3618-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2018-3618-01 - The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update upgrades Flash Player to version 31.0.0.148. Issues addressed include an information leakage vulnerability.
Tags:

10:11
Red Hat Security Advisory 2018-3618-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2018-3618-01 - The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update upgrades Flash Player to version 31.0.0.148. Issues addressed include an information leakage vulnerability.
Tags:

10:10
Ubuntu Security Notice USN-3822-2
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 3822-2 - USN-3822-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 ESM. Jim Mattson discovered that the KVM implementation in the Linux kernel mismanages the #BP and #OF exceptions. A local attacker in a guest virtual machine could use this to cause a denial of service. Various other issues were also addressed.
Tags:

10:10
Ubuntu Security Notice USN-3822-2
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 3822-2 - USN-3822-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 ESM. Jim Mattson discovered that the KVM implementation in the Linux kernel mismanages the #BP and #OF exceptions. A local attacker in a guest virtual machine could use this to cause a denial of service. Various other issues were also addressed.
Tags:

10:10
Ubuntu Security Notice USN-3822-2
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 3822-2 - USN-3822-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 ESM. Jim Mattson discovered that the KVM implementation in the Linux kernel mismanages the #BP and #OF exceptions. A local attacker in a guest virtual machine could use this to cause a denial of service. Various other issues were also addressed.
Tags:

10:10
2-Plan Team 1.0.4 Shell Upload
» ‎ Packet Storm Security Exploits

2-Plan Team version 1.0.4 suffers from a remote shell upload vulnerability.
Tags:

10:10
2-Plan Team 1.0.4 Shell Upload
» ‎ Packet Storm Security Recent Files

2-Plan Team version 1.0.4 suffers from a remote shell upload vulnerability.
Tags:

10:10
2-Plan Team 1.0.4 Shell Upload
» ‎ Packet Storm Security Misc. Files

2-Plan Team version 1.0.4 suffers from a remote shell upload vulnerability.
Tags:

10:09
Simple E-Document 1.31 SQL Injection
» ‎ Packet Storm Security Exploits

Simple E-Document version 1.31 suffers from a remote SQL injection vulnerability.
Tags:

10:09
Simple E-Document 1.31 SQL Injection
» ‎ Packet Storm Security Recent Files

Simple E-Document version 1.31 suffers from a remote SQL injection vulnerability.
Tags:

10:09
Simple E-Document 1.31 SQL Injection
» ‎ Packet Storm Security Misc. Files

Simple E-Document version 1.31 suffers from a remote SQL injection vulnerability.
Tags:

10:09
Ubuntu Security Notice USN-3822-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 3822-1 - Jim Mattson discovered that the KVM implementation in the Linux kernel mismanages the #BP and #OF exceptions. A local attacker in a guest virtual machine could use this to cause a denial of service. It was discovered that the generic SCSI driver in the Linux kernel did not properly enforce permissions on kernel memory access. A local attacker could use this to expose sensitive information or possibly elevate privileges. Various other issues were also addressed.
Tags:

10:09
Ubuntu Security Notice USN-3822-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 3822-1 - Jim Mattson discovered that the KVM implementation in the Linux kernel mismanages the #BP and #OF exceptions. A local attacker in a guest virtual machine could use this to cause a denial of service. It was discovered that the generic SCSI driver in the Linux kernel did not properly enforce permissions on kernel memory access. A local attacker could use this to expose sensitive information or possibly elevate privileges. Various other issues were also addressed.
Tags:

10:09
Ubuntu Security Notice USN-3822-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 3822-1 - Jim Mattson discovered that the KVM implementation in the Linux kernel mismanages the #BP and #OF exceptions. A local attacker in a guest virtual machine could use this to cause a denial of service. It was discovered that the generic SCSI driver in the Linux kernel did not properly enforce permissions on kernel memory access. A local attacker could use this to expose sensitive information or possibly elevate privileges. Various other issues were also addressed.
Tags:

10:09
Ubuntu Security Notice USN-3821-2
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 3821-2 - USN-3821-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. Wen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly ensure that xattr information remained in inode bodies. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service. Various other issues were also addressed.
Tags:

10:09
Ubuntu Security Notice USN-3821-2
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 3821-2 - USN-3821-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. Wen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly ensure that xattr information remained in inode bodies. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service. Various other issues were also addressed.
Tags:

10:09
Ubuntu Security Notice USN-3821-2
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 3821-2 - USN-3821-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. Wen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly ensure that xattr information remained in inode bodies. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service. Various other issues were also addressed.
Tags:

10:08
Kordil EDMS 2.2.60rc3 Shell Upload
» ‎ Packet Storm Security Exploits

Kordil EDMS version 2.2.60rc3 suffers from a remote shell upload vulnerability.
Tags:

10:08
Kordil EDMS 2.2.60rc3 Shell Upload
» ‎ Packet Storm Security Recent Files

Kordil EDMS version 2.2.60rc3 suffers from a remote shell upload vulnerability.
Tags:

10:08
Kordil EDMS 2.2.60rc3 Shell Upload
» ‎ Packet Storm Security Misc. Files

Kordil EDMS version 2.2.60rc3 suffers from a remote shell upload vulnerability.
Tags:

10:07
Meneame English Pligg 5.8 SQL Injection
» ‎ Packet Storm Security Exploits

Meneame English Pligg version 5.8 suffers from a remote SQL injection vulnerability.
Tags:

10:07
Meneame English Pligg 5.8 SQL Injection
» ‎ Packet Storm Security Recent Files

Meneame English Pligg version 5.8 suffers from a remote SQL injection vulnerability.
Tags:

10:07
Meneame English Pligg 5.8 SQL Injection
» ‎ Packet Storm Security Misc. Files

Meneame English Pligg version 5.8 suffers from a remote SQL injection vulnerability.
Tags:

10:06
EverSync 0.5 Arbitrary File Download
» ‎ Packet Storm Security Exploits

EverSync version 0.5 suffers from an arbitrary file download vulnerability.
Tags:

10:06
EverSync 0.5 Arbitrary File Download
» ‎ Packet Storm Security Recent Files

EverSync version 0.5 suffers from an arbitrary file download vulnerability.
Tags:

10:06
EverSync 0.5 Arbitrary File Download
» ‎ Packet Storm Security Misc. Files

EverSync version 0.5 suffers from an arbitrary file download vulnerability.
Tags:

10:05
Ubuntu Security Notice USN-3817-2
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 3817-2 - USN-3817-1 fixed a vulnerability in Python. This update provides the corresponding update for Ubuntu 12.04 ESM. It was discovered that Python incorrectly handled large amounts of data. A remote attacker could use this issue to cause Python to crash, resulting in a denial of service, or possibly execute arbitrary code. Various other issues were also addressed.
Tags:

10:05
Ubuntu Security Notice USN-3817-2
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 3817-2 - USN-3817-1 fixed a vulnerability in Python. This update provides the corresponding update for Ubuntu 12.04 ESM. It was discovered that Python incorrectly handled large amounts of data. A remote attacker could use this issue to cause Python to crash, resulting in a denial of service, or possibly execute arbitrary code. Various other issues were also addressed.
Tags:

10:05
Ubuntu Security Notice USN-3817-2
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 3817-2 - USN-3817-1 fixed a vulnerability in Python. This update provides the corresponding update for Ubuntu 12.04 ESM. It was discovered that Python incorrectly handled large amounts of data. A remote attacker could use this issue to cause Python to crash, resulting in a denial of service, or possibly execute arbitrary code. Various other issues were also addressed.
Tags:

10:05
Ubuntu Security Notice USN-3821-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 3821-1 - Wen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly ensure that xattr information remained in inode bodies. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service. It was discovered that the alarmtimer implementation in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service. Various other issues were also addressed.
Tags:

10:05
Ubuntu Security Notice USN-3821-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 3821-1 - Wen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly ensure that xattr information remained in inode bodies. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service. It was discovered that the alarmtimer implementation in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service. Various other issues were also addressed.
Tags:

10:05
Ubuntu Security Notice USN-3821-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 3821-1 - Wen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly ensure that xattr information remained in inode bodies. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service. It was discovered that the alarmtimer implementation in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service. Various other issues were also addressed.
Tags:

10:04
Ubuntu Security Notice USN-3820-3
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 3820-3 - Felix Wilhelm discovered that the Xen netback driver in the Linux kernel did not properly perform input validation in some situations. An attacker could use this to cause a denial of service or possibly execute arbitrary code. It was discovered that the generic SCSI driver in the Linux kernel did not properly enforce permissions on kernel memory access. A local attacker could use this to expose sensitive information or possibly elevate privileges. Various other issues were also addressed.
Tags:

10:04
Ubuntu Security Notice USN-3820-3
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 3820-3 - Felix Wilhelm discovered that the Xen netback driver in the Linux kernel did not properly perform input validation in some situations. An attacker could use this to cause a denial of service or possibly execute arbitrary code. It was discovered that the generic SCSI driver in the Linux kernel did not properly enforce permissions on kernel memory access. A local attacker could use this to expose sensitive information or possibly elevate privileges. Various other issues were also addressed.
Tags:

10:04
Ubuntu Security Notice USN-3820-3
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 3820-3 - Felix Wilhelm discovered that the Xen netback driver in the Linux kernel did not properly perform input validation in some situations. An attacker could use this to cause a denial of service or possibly execute arbitrary code. It was discovered that the generic SCSI driver in the Linux kernel did not properly enforce permissions on kernel memory access. A local attacker could use this to expose sensitive information or possibly elevate privileges. Various other issues were also addressed.
Tags:

10:04
Galaxy Forces MMORPG 0.5.8 SQL Injection
» ‎ Packet Storm Security Exploits

Galaxy Forces MMORPG version 0.5.8 suffers from a remote SQL injection vulnerability.
Tags:

10:04
Galaxy Forces MMORPG 0.5.8 SQL Injection
» ‎ Packet Storm Security Recent Files

Galaxy Forces MMORPG version 0.5.8 suffers from a remote SQL injection vulnerability.
Tags:

10:04
Galaxy Forces MMORPG 0.5.8 SQL Injection
» ‎ Packet Storm Security Misc. Files

Galaxy Forces MMORPG version 0.5.8 suffers from a remote SQL injection vulnerability.
Tags:

10:04
Net-Billetterie 2.9 SQL Injection
» ‎ Packet Storm Security Exploits

Net-Billetterie version 2.9 suffers from a remote SQL injection vulnerability.
Tags:

10:04
Net-Billetterie 2.9 SQL Injection
» ‎ Packet Storm Security Recent Files

Net-Billetterie version 2.9 suffers from a remote SQL injection vulnerability.
Tags:

10:04
Net-Billetterie 2.9 SQL Injection
» ‎ Packet Storm Security Misc. Files

Net-Billetterie version 2.9 suffers from a remote SQL injection vulnerability.
Tags:

10:03
BiP Messenger Denial Of Service
» ‎ Packet Storm Security Exploits

BiP Messenger suffers from a denial of service vulnerability.
Tags:

10:03
BiP Messenger Denial Of Service
» ‎ Packet Storm Security Recent Files

BiP Messenger suffers from a denial of service vulnerability.
Tags:

10:03
BiP Messenger Denial Of Service
» ‎ Packet Storm Security Misc. Files

BiP Messenger suffers from a denial of service vulnerability.
Tags:

10:02
Malicious Git HTTP Server
» ‎ Packet Storm Security Exploits

This Metasploit module exploits CVE-2018-17456, which affects Git versions 2.14.5, 2.15.3, 2.16.5, 2.17.2, 2.18.1, and 2.19.1 and lower. When a submodule url which starts with a dash e.g "-u./payload" is passed as an argument to git clone, the file "payload" inside the repository is executed. This Metasploit module creates a fake git repository which contains a submodule containing the vulnerability. The vulnerability is triggered when the submodules are initialized.
Tags:

10:02
Malicious Git HTTP Server
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits CVE-2018-17456, which affects Git versions 2.14.5, 2.15.3, 2.16.5, 2.17.2, 2.18.1, and 2.19.1 and lower. When a submodule url which starts with a dash e.g "-u./payload" is passed as an argument to git clone, the file "payload" inside the repository is executed. This Metasploit module creates a fake git repository which contains a submodule containing the vulnerability. The vulnerability is triggered when the submodules are initialized.
Tags:
10:02
Apkatshu 1.0
» ‎ Packet Storm Security Recent Files

Apkatshu is a tool for for extracting urls, emails, ip addresses, and interesting data from APK files. The user can choose either JADX or APKTOOL for de-compilation.
Tags:

10:02
Apkatshu 1.0
» ‎ Packet Storm Security Tools

Apkatshu is a tool for for extracting urls, emails, ip addresses, and interesting data from APK files. The user can choose either JADX or APKTOOL for de-compilation.
Tags:

10:02
Malicious Git HTTP Server
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits CVE-2018-17456, which affects Git versions 2.14.5, 2.15.3, 2.16.5, 2.17.2, 2.18.1, and 2.19.1 and lower. When a submodule url which starts with a dash e.g "-u./payload" is passed as an argument to git clone, the file "payload" inside the repository is executed. This Metasploit module creates a fake git repository which contains a submodule containing the vulnerability. The vulnerability is triggered when the submodules are initialized.
Tags:
10:02
Apkatshu 1.0
» ‎ Packet Storm Security Misc. Files

Apkatshu is a tool for for extracting urls, emails, ip addresses, and interesting data from APK files. The user can choose either JADX or APKTOOL for de-compilation.
Tags:

10:01
Ubuntu Security Notice USN-3820-2
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 3820-2 - USN-3820-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement kernel from Ubuntu 18.04 LTS for Ubuntu 16.04 LTS. Felix Wilhelm discovered that the Xen netback driver in the Linux kernel did not properly perform input validation in some situations. An attacker could use this to cause a denial of service or possibly execute arbitrary code. Various other issues were also addressed.
Tags:

10:01
Ubuntu Security Notice USN-3820-2
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 3820-2 - USN-3820-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement kernel from Ubuntu 18.04 LTS for Ubuntu 16.04 LTS. Felix Wilhelm discovered that the Xen netback driver in the Linux kernel did not properly perform input validation in some situations. An attacker could use this to cause a denial of service or possibly execute arbitrary code. Various other issues were also addressed.
Tags:

10:01
Ubuntu Security Notice USN-3820-2
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 3820-2 - USN-3820-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement kernel from Ubuntu 18.04 LTS for Ubuntu 16.04 LTS. Felix Wilhelm discovered that the Xen netback driver in the Linux kernel did not properly perform input validation in some situations. An attacker could use this to cause a denial of service or possibly execute arbitrary code. Various other issues were also addressed.
Tags:

10:01
BitZoom 1.0 SQL Injection
» ‎ Packet Storm Security Exploits

BitZoom version 1.0 suffers from a remote SQL injection vulnerability.
Tags:

10:01
BitZoom 1.0 SQL Injection
» ‎ Packet Storm Security Recent Files

BitZoom version 1.0 suffers from a remote SQL injection vulnerability.
Tags:

10:01
BitZoom 1.0 SQL Injection
» ‎ Packet Storm Security Misc. Files

BitZoom version 1.0 suffers from a remote SQL injection vulnerability.
Tags:

10:01
An In-Depth Look at Dexter, the Robotic Arm
» ‎ Hack a Day

Dexter, a really great robot arm project, just won top honors in the 2018 Hackaday Prize, and walked away with $50,000 toward continuing their project. As a hat tip to Hackaday and the community, Haddington Dynamics, the company behind Dexter, agreed to open-source their newest version of Dexter as well. As James Newton said when accepting the trophy during the award ceremony, “because of your faith in us, because of this award, we have been moved to open-source the next generation of Dexter.” Some very clever work went into producing Dexter, and we can’t wait to see what further refinements …read more

Tags: cons

10:00
Ubuntu Security Notice USN-3818-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 3818-1 - It was discovered that PostgreSQL incorrectly handled certain trigger definitions when running pg_upgrade or pg_dump. A remote attacker could possibly use this issue to execute arbitrary SQL statements with superuser privileges.
Tags:

9:59
Precurio Intranet Portal 2.0 Cross Site Request Forgery
» ‎ Packet Storm Security Exploits

Precurio Intranet Portal version 2.0 suffers from a cross site request forgery vulnerability.
Tags:
9:59
DoceboLMS 1.2 Shell Upload / SQL Injection
» ‎ Packet Storm Security Exploits

DoceboLMS version 1.2 suffers from remote shell upload and remote SQL injection vulnerabilities.
Tags:

9:58
Ubuntu Security Notice USN-3820-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 3820-1 - Felix Wilhelm discovered that the Xen netback driver in the Linux kernel did not properly perform input validation in some situations. An attacker could use this to cause a denial of service or possibly execute arbitrary code. It was discovered that the generic SCSI driver in the Linux kernel did not properly enforce permissions on kernel memory access. A local attacker could use this to expose sensitive information or possibly elevate privileges. Various other issues were also addressed.
Tags:
9:58
Ubuntu Security Notice USN-3819-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 3819-1 - Felix Wilhelm discovered that the Xen netback driver in the Linux kernel did not properly perform input validation in some situations. An attacker could use this to cause a denial of service or possibly execute arbitrary code.
Tags:

9:55
Electricks eCommerce 1.0 Cross Site Scripting
» ‎ Packet Storm Security Exploits

Electricks eCommerce version 1.0 suffers from a persistent cross site scripting vulnerability.
Tags:
9:54
Pedidos 1.0 SQL Injection
» ‎ Packet Storm Security Exploits

Pedidos version 1.0 suffers from a remote SQL injection vulnerability.
Tags:
9:54
Rmedia SMS 1.0 SQL Injection
» ‎ Packet Storm Security Exploits

Rmedia SMS version 1.0 suffers from a remote SQL injection vulnerability.
Tags:

9:53
Debian Security Advisory 4339-1
» ‎ Packet Storm Security Advisories

Debian Linux Security Advisory 4339-1 - Multiple vulnerabilities were discovered in Ceph, a distributed storage replay attacks and calculated signatures incorrectly, "ceph mon" did not validate capabilities for pool operations (resulting in potential corruption or deletion of snapshot images) and a format string vulnerability in libradosstriper could result in denial of service.
Tags:
9:52
VMware Security Advisory 2018-0028
» ‎ Packet Storm Security Advisories

VMware Security Advisory 2018-0028 - VMware vRealize Log Insight updates address an authorization bypass vulnerability.
Tags:

9:50
Notepad3 1.0.2.350 Denial Of Service
» ‎ Packet Storm Security Exploits

Notepad3 version 1.0.2.350 suffers from a denial of service vulnerability.
Tags:
9:49
Bosch Video Management System 8.0 Denial Of Service
» ‎ Packet Storm Security Exploits

Bosch Video Management System version 8.0 suffers from a denial of service vulnerability.
Tags:
9:49
AMPPS 2.7 Denial Of Service
» ‎ Packet Storm Security Exploits

AMPPS version 2.7 suffers from a denial of service vulnerability.
Tags:
9:48
ntpd 4.2.8p10 Out-Of-Bounds Read
» ‎ Packet Storm Security Exploits

ntpd version 4.2.8p10 out-of-bounds read proof of concept exploit.
Tags:
9:45
PHP 5.2.3 imap_open Bypass
» ‎ Packet Storm Security Exploits

PHP version 5.2.3 (Debian) suffers from an imap imap_open disable functions bypass vulnerability.
Tags:
9:44
EdTv 2 SQL Injection
» ‎ Packet Storm Security Exploits

EdTv version 2 suffers from a remote SQL injection vulnerability.
Tags:

8:40
One In Five Magecart Infected Stores Gets Reinfected Within Days
» ‎ Packet Storm Security Headlines

One In Five Magecart Infected Stores Gets Reinfected Within Days
Tags: headlinemalwarebankcybercrimefraud
8:40
Hi-Tech Watches Let Children Be Spied On
» ‎ Packet Storm Security Headlines

Hi-Tech Watches Let Children Be Spied On
Tags: headlineprivacyflawspyware
8:40
Firefox Will Start Alerting You To Recently Breached Sites
» ‎ Packet Storm Security Headlines

Firefox Will Start Alerting You To Recently Breached Sites
Tags: headlinehackerprivacydata lossmozillafirefox
8:40
Data Leaking Holes Riddle Intel, AMD, Arm Chips
» ‎ Packet Storm Security Headlines

Data Leaking Holes Riddle Intel, AMD, Arm Chips
Tags: headlinedata lossflawintel

8:30
Adding Linux To A PDP-11
» ‎ Hack a Day

The UNIBUS architecture for DEC’s PDPs and Vaxxen was a stroke of genius. If you wanted more memory in your minicomputer, just add another card. Need a drive? Plug it into the backplane. Of course, with all those weird cards, these old UNIBUS PDPs are hard to keep running. The UniBone is the solution to this problem. It puts Linux on a UNIBUS bridge, allowing this card to serve as a memory emulator, a test console, a disk emulator, or any other hardware you can think of.

The key to this build is the BeagleBone, everyone’s second-favorite single board computer …read more

Tags: classic hacks
7:01
Choosing Cell Modems: The Drama Queen of Hardware Design
» ‎ Hack a Day

So you went to a tradeshow and heard about this cool new idea called the Internet Of Things; now it’s time to build an IoT product of your own. You know that to be IoT, your Widget D’lux® has to have a network connection but which to choose?

You could use WiFi or Bluetooth but that would be gauche. Maybe LoRaWAN? All the cool kids are using LoRa for medium or long range wireless these days, but that still requires a base station and Widget D’lux® will be a worldwide phenomenon. Or at least a phenomenon past your bedroom walls. …read more

Tags: cellphone hacks
4:00
Cyborg Mushrooms
» ‎ Hack a Day

Of all the fictional cyborgs who turn against humanity to conquer the planet, this is as far from that possibility as you can get. These harmless mushrooms seem more interested in showing off their excellent fashion sense with a daring juxtaposition of hard grid lines with playful spirals. But the purpose of this bacteria-fungus-technology hybrid is to generate electricity. The mushrooms are there to play nurse to a layer of cyanobacteria, the green gel in the photo, while the straight black lines harvest electricity.

Cyanobacteria do not live very long under these kinds of conditions, so long-term use is out …read more

Tags: chemistry hacks

1:01
#0daytoday #Precurio Intranet Portal 2.0 - Cross-Site Request Forgery (Add Admin) Vulnerability [#0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #Precurio Intranet Portal 2.0 - Cross-Site Request Forgery (Add Admin) Vulnerability [#0day #Exploit]
Tags:

1:01
The Smaller, More Powerful Raspberry Pi 3 Model A+
» ‎ Hack a Day

It’s that time of year again, and the Raspberry Pi Foundation has some new hardware for you. This time, it’s an improved version of the Raspberry Pi Model A, bringing it the speed and power of its bigger brother, the Raspberry Pi Model 3 B+.

The Raspberry Pi Model A is the weird middle child of the Raspberry Pi lineup, or maybe it’s the Goldilocks choice. It’s not as powerful and doesn’t have the USB ports or Ethernet jack found in the latest revision of the family, the Raspberry Pi Model 3 B+, and it’s not as small or as …read more

Tags: news

0:17
AST-2018-010: Remote crash vulnerability DNS SRV and NAPTR lookups
» ‎ Bugtraq

Posted by Asterisk Security Team on Nov 15
Asterisk Project Security Advisory - AST-2018-010

Product Asterisk
Summary Remote crash vulnerability DNS SRV and NAPTR lookups
Nature of Advisory Denial Of Service
Susceptibility Remote Unauthenticated Sessions
Severity Moderate...

Tags:
0:14
AST-2018-010:
» ‎ Bugtraq

Posted by Asterisk Security Team on Nov 15
Asterisk Project Security Advisory - AST-2018-010

Product Asterisk
Remote crash vulnerability DNS SRV and NAPTR lookups
Nature of Advisory Denial Of Service
Susceptibility Remote Unauthenticated Sessions
Severity Moderate...

Tags:

0:00
Vuln: Siemens Multiple Products CVE-2018-4858 Access Bypass Vulnerability
» ‎ SecurityFocus Vulnerabilities

Siemens Multiple Products CVE-2018-4858 Access Bypass Vulnerability
Tags:

November 14, 2018
22:00
Re-enacting TRON on the Apple IIgs
» ‎ Hack a Day

TRON is a science fiction classic, hitting cinemas in the midst of the burgeoning home computer era. It’s the film that created the famous light cycle, which spawned many video game recreations in the following years. Many years ago now, [Daniel] decided to flex his programming muscles by coding a version of the game for the Apple IIgs, with accidentally excellent results.

In the film, the characters find an escape from the light cycle game by forcing another player to crash into the walls of the play area. The resulting explosion left a hole, allowing the players to exit the …read more

Tags: Retrocomputing
19:00
Centurion Bridge Layer, Now In RC
» ‎ Hack a Day

Radio controlled models are great fun. Most of us have had a few RC cars as children and maybe dabbled with the occasional helicopter or drone. It’s a rare breed of modeler, however, that gets to drive a radio-controlled bridge laying tank.

The model is a replica of the British Centurion Bridgelayer – a modified tank designed to allow mechanized units to readily cross rivers and similar obstacles in European battlefields. While the genuine article relied on hydraulics, the RC version takes a different tack. [hawkeye3guns] built custom linear actuators out of motors, gears, and brass to deploy the bridge. …read more

Tags: toy hacks
16:00
Rock Out to the Written Word with BookSound
» ‎ Hack a Day

With his latest project, [Roni Bandini] has simultaneously given the world a new type of audiobook and music. Traditional audiobooks are basically the adult equivalent of having somebody read you a bedtime story, but BookSound actually turns the written word into electronic music. You won’t be able to boast to your friends that as a matter of fact, you have read that popular new novel, but at least you might be able to dance to it.

[Roni] says he’s still working on perfecting the word to music mapping, so the results shown in the video after the break are still …read more

Tags: musical hacks

16:00
[webapps] Precurio Intranet Portal 2.0 - Cross-Site Request Forgery (Add Admin)
» ‎ Exploit-DB

Precurio Intranet Portal 2.0 - Cross-Site Request Forgery (Add Admin)
Tags:
16:00
[webapps] BitZoom 1.0 - 'rollno' SQL Injection
» ‎ Exploit-DB

BitZoom 1.0 - 'rollno' SQL Injection
Tags:
16:00
[webapps] PHP-Proxy 5.1.0 - Local File Inclusion
» ‎ Exploit-DB

PHP-Proxy 5.1.0 - Local File Inclusion
Tags:
16:00
[webapps] Net-Billetterie 2.9 - 'login' SQL Injection
» ‎ Exploit-DB

Net-Billetterie 2.9 - 'login' SQL Injection
Tags:
16:00
[webapps] Galaxy Forces MMORPG 0.5.8 - 'type' SQL Injection
» ‎ Exploit-DB

Galaxy Forces MMORPG 0.5.8 - 'type' SQL Injection
Tags:
16:00
[webapps] EverSync 0.5 - Arbitrary File Download
» ‎ Exploit-DB

EverSync 0.5 - Arbitrary File Download
Tags:
16:00
[webapps] Kordil EDMS 2.2.60rc3 - Arbitrary File Upload
» ‎ Exploit-DB

Kordil EDMS 2.2.60rc3 - Arbitrary File Upload
Tags:
16:00
[webapps] Meneame English Pligg 5.8 - 'search' SQL Injection
» ‎ Exploit-DB

Meneame English Pligg 5.8 - 'search' SQL Injection
Tags:
16:00
[dos] Notepad3 1.0.2.350 - Denial of Service (PoC)
» ‎ Exploit-DB

Notepad3 1.0.2.350 - Denial of Service (PoC)
Tags:
16:00
[webapps] Simple E-Document 1.31 - 'username' SQL Injection
» ‎ Exploit-DB

Simple E-Document 1.31 - 'username' SQL Injection
Tags:
16:00
[webapps] 2-Plan Team 1.0.4 - Arbitrary File Upload
» ‎ Exploit-DB

2-Plan Team 1.0.4 - Arbitrary File Upload
Tags:
16:00
[webapps] PHP Mass Mail 1.0 - Arbitrary File Upload
» ‎ Exploit-DB

PHP Mass Mail 1.0 - Arbitrary File Upload
Tags:
16:00
[webapps] Wordpress Plugin Ninja Forms 3.3.17 - Cross-Site Scripting
» ‎ Exploit-DB

WordPress Plugin Ninja Forms 3.3.17 - Cross-Site Scripting
Tags:

13:00
3D Print Springs With Hacked GCode
» ‎ Hack a Day

If you’ve used a desktop 3D printer in the past, you’re almost certainly done battle with “strings”. These are the wispy bits of filament that harden in the air, usually as the printer’s nozzle moves quickly between points in open air. Depending on the severity and the material you’re printing with, these stringy interlopers can range from being an unsightly annoyance to triggering a heartbreaking failed print. But where most see an annoying reality of pushing melted plastic around, [Adam Kumpf] of Makefast Workshop sees inspiration.

Noticing that the nozzle of their printer left strings behind, [Adam] wondered if it …read more

Tags: printer hacks
11:30
Mastering OpenSCAD Workflow
» ‎ Hack a Day

As you may have noticed in our coverage, we’re big fans of OpenSCAD around these parts. The fact that several of the Hackaday writers organically found and started using the parametric CAD package on their own is not only a testament to our carefully cultivated hive mind but also to the type of people it appeals to. Hackers love it because it allows you to model physical objects as if you were writing software: models are expressed in code, and its plain text source files can be managed with tools like git and make. If you’re a real Pinball …read more

Tags: printer hacks

11:30
#0daytoday #Pedidos 1.0 - SQL Injection Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #Pedidos 1.0 - SQL Injection Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]
Tags:
11:30
#0daytoday #Rmedia SMS 1.0 - SQL Injection Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #Rmedia SMS 1.0 - SQL Injection Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]
Tags:
11:30
#0daytoday #DoceboLMS 1.2 - SQL Injection / Arbitrary File Upload Vulnerabilities [#0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #DoceboLMS 1.2 - SQL Injection / Arbitrary File Upload Vulnerabilities [#0day #Exploit]
Tags:
11:30
#0daytoday #Bosch Video Management System 8.0 - Configuration Client Denial of Service Exploit [#0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #Bosch Video Management System 8.0 - Configuration Client Denial of Service Exploit [#0day #Exploit]
Tags:
11:30
#0daytoday #Electricks eCommerce 1.0 - Persistent Cross-Site Scripting Vulnerability [#0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #Electricks eCommerce 1.0 - Persistent Cross-Site Scripting Vulnerability [#0day #Exploit]
Tags:

10:00
3D Printering: Blender Tips For Printable Objects
» ‎ Hack a Day

3D models drawn in Blender work great in a computer animated virtual world but don’t always when brought into a slicer for 3D printing. Slicers require something which makes sense in the real world. And the real world is far less forgiving, as I’ve found out with my own projects which use 3D printed parts.

Our [Brian Benchoff] already talked about making parts in Blender with his two-part series (here and here) so consider this the next step. These are the techniques I’ve come up with for preparing parts for 3D printing before handing them off to a slicer program. …read more

Tags: printer hacks

9:27
AST-2018-010: Remote crash vulnerability DNS SRV and NAPTR lookups
» ‎ Full Disclosure

Posted by Asterisk Security Team on Nov 14
Asterisk Project Security Advisory - AST-2018-010

Product Asterisk
Summary Remote crash vulnerability DNS SRV and NAPTR lookups
Nature of Advisory Denial Of Service
Susceptibility Remote Unauthenticated Sessions
Severity Moderate...

Tags:
9:13
AST-2018-010:
» ‎ Full Disclosure

Posted by Asterisk Security Team on Nov 14
Asterisk Project Security Advisory - AST-2018-010

Product Asterisk
Remote crash vulnerability DNS SRV and NAPTR lookups
Nature of Advisory Denial Of Service
Susceptibility Remote Unauthenticated Sessions
Severity Moderate...

Tags:

8:30
Friday Hack Chat: All About Crypto
» ‎ Hack a Day

What is crypto? Crypto means ‘hidden’, and it’s meant ‘hidden’ since before the Greek alphabet was written, but don’t let that stop you from arguing. For this week’s Hack Chat, we’re going to be talking all about cryptography, a medium of exchange for secrets. If you need confidentiality, integrity, or authenticity, you need cryptography.

Our guest for this week’s Hack Chat will be none other than Nick Sayer. Nick is a frequent attendee of the Hackaday meetups and he’s been building gadgets and gizmos and selling them on Tindie for years now. He’s given talks on design for manufacturing. This …read more

Tags: hackaday Columns

8:26
#0daytoday #Dell OpenManage Network Manager 6.2.0.51 SP3 - Multiple Vulnerabilities [#0day #Exploit]
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

#0daytoday #Dell OpenManage Network Manager 6.2.0.51 SP3 - Multiple Vulnerabilities [#0day #Exploit]
Tags:

Skip to page: 1 2 3 ... 848

Feeds

Recent items

Tags: nintendo hacks

Enclosure: [download]

Tags: featured

Tags:

Tags:

Tags: raspberry

Tags: art

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags: hackaday Columns

Tags: home hacks

Tags: hackaday Columns

Tags:

Tags:

Tags:

Tags: Hardware

Tags: art

Tags: solar hacks

Tags: linux hacks

Tags: classic hacks

Tags: cnc hacks

Tags: news

Tags: printer hacks

Tags: gps hacks

Tags: classic hacks

Tags: classic hacks

Tags: headlinegovernmentusabritainrussiadata losscyberwar

Tags: headlinegovernmentusadata loss

Tags: headlineblackberry

Tags: headlinemicrosoftdenial serviceskype

Tags: tool hacks

Tags: Hardware

Tags:

Tags: chemistry hacks

Tags: clock hacks

Tags: printer hacks

Tags:

Tags:

Tags:

Tags: science

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags: phone hacks

Tags:

Tags:

Tags: fpga

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags: