jetlib.sec » February 11, 2018

Feeds

230611 items (0 unread) in 27 feeds

• 0day.today (was: 1337day, Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

• February 11, 2018
• 20:44

  Ciesto Solutions ERP System SQL Injection

   » ‎ Packet Storm Security Exploits
  Ciesto Solutions ERP System suffers from a remote SQL injection vulnerability that allows for authentication bypass.

  Tags:   

• 20:44

  Ciesto Solutions ERP System SQL Injection

   » ‎ Packet Storm Security Recent Files
  Ciesto Solutions ERP System suffers from a remote SQL injection vulnerability that allows for authentication bypass.

  Tags:   

• 17:11

  Advantech WebAccess Node 8.3.0 DLL Hijacking

   » ‎ Packet Storm Security Exploits
  Advantech WebAccess Node version 8.3.0 suffers from an AspVBObj.dll code execution dll hijacking vulnerability.

  Tags:   

• 17:11

  Advantech WebAccess Node 8.3.0 DLL Hijacking

   » ‎ Packet Storm Security Recent Files
  Advantech WebAccess Node version 8.3.0 suffers from an AspVBObj.dll code execution dll hijacking vulnerability.

  Tags:   

• 16:00

  [webapps] LogicalDOC Enterprise 7.7.4 - User Enumeration

   » ‎ Exploit-DB
  LogicalDOC Enterprise 7.7.4 - User Enumeration

  Tags:   

• 16:00

  [webapps] LogicalDOC Enterprise 7.7.4 - Directory Traversal

   » ‎ Exploit-DB
  LogicalDOC Enterprise 7.7.4 - Directory Traversal

  Tags:   

• 16:00

  [webapps] LogicalDOC Enterprise 7.7.4 - Root Remote Code Execution

   » ‎ Exploit-DB
  LogicalDOC Enterprise 7.7.4 - Root Remote Code Execution

  Tags:   

• 16:00

  [local] glibc - LD_AUDIT Arbitrary DSO Load Privilege Escalation (Metasploit)

   » ‎ Exploit-DB
  glibc - 'LD_AUDIT' Arbitrary DSO Load Privilege Escalation (Metasploit)

  Tags:   

• 16:00

  [local] glibc - '$ORIGIN' Expansion Privilege Escalation (Metasploit)

   » ‎ Exploit-DB
  glibc - '$ORIGIN' Expansion Privilege Escalation (Metasploit)

  Tags:   

• 16:00

  [local] Juju-run Agent - Privilege Escalation (Metasploit)

   » ‎ Exploit-DB
  Juju-run Agent - Privilege Escalation (Metasploit)

  Tags:   

• 16:00

  [papers] TCP Starvation

   » ‎ Exploit-DB
  TCP Starvation

  Tags:   

• 15:25

  Debian Security Advisory 4111-1

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 4111-1 - Mikhail Klementev, Ronnie Goodrich and Andrew Krasichkov discovered that missing restrictions in the implementation of the WEBSERVICE function in LibreOffice could result in the disclosure of arbitrary files readable by the user who opens a malformed document.

  Tags:   

• 15:25

  Debian Security Advisory 4111-1

   » ‎ Packet Storm Security Recent Files
  Debian Linux Security Advisory 4111-1 - Mikhail Klementev, Ronnie Goodrich and Andrew Krasichkov discovered that missing restrictions in the implementation of the WEBSERVICE function in LibreOffice could result in the disclosure of arbitrary files readable by the user who opens a malformed document.

  Tags:   

• 15:24

  Debian Security Advisory 4110-1

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 4110-1 - Meh Chang discovered a buffer overflow flaw in a utility function used in the SMTP listener of Exim, a mail transport agent. A remote attacker can take advantage of this flaw to cause a denial of service, or potentially the execution of arbitrary code via a specially crafted message.

  Tags:   

• 15:24

  Debian Security Advisory 4110-1

   » ‎ Packet Storm Security Recent Files
  Debian Linux Security Advisory 4110-1 - Meh Chang discovered a buffer overflow flaw in a utility function used in the SMTP listener of Exim, a mail transport agent. A remote attacker can take advantage of this flaw to cause a denial of service, or potentially the execution of arbitrary code via a specially crafted message.

  Tags:   

• 15:23

  Debian Security Advisory 4109-1

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 4109-1 - Lalith Rallabhandi discovered that OmniAuth, a Ruby library for implementing multi-provider authentication in web applications, mishandled and leaked sensitive information. An attacker with access to the callback environment, such as in the case of a crafted web application, can request authentication services from this module and access to the CSRF token.

  Tags:   

• 15:23

  Debian Security Advisory 4109-1

   » ‎ Packet Storm Security Recent Files
  Debian Linux Security Advisory 4109-1 - Lalith Rallabhandi discovered that OmniAuth, a Ruby library for implementing multi-provider authentication in web applications, mishandled and leaked sensitive information. An attacker with access to the callback environment, such as in the case of a crafted web application, can request authentication services from this module and access to the CSRF token.

  Tags:   

• 14:30

  RootedCON Security Conference - 1-3 March, Madrid (Spain)

   » ‎ Penetration Testing

  Posted by omarbv on Feb 11

  On the occasion of the ninth edition of RootedCON, the most important
  computer security conference in the country, around 2,000 hackers will
  meet to discuss new questions and researchs about the cybersecurity
  world, with its risks and threats. National and international experts
  have included in their agendas this mandatory appointment to discuss new
  vulnerabilities, viruses, and other threats, they will also talk about
  countermeasures in order...
  

  Tags:   

• 14:22

  Paypal / Money Transfer Clone Script 1.0.9 SQL Injection

   » ‎ Packet Storm Security Exploits
  Paypal / Money Transfer Clone Script version 1.0.9 suffers from a remote SQL injection vulnerability.

  Tags:   

• 8:30

  Mandos Encrypted File System Unattended Reboot Utility 1.7.17

   » ‎ Packet Storm Security Recent Files
  The Mandos system allows computers to have encrypted root file systems and at the same time be capable of remote or unattended reboots. The computers run a small client program in the initial RAM disk environment which will communicate with a server over a network. All network communication is encrypted using TLS. The clients are identified by the server using an OpenPGP key that is unique to each client. The server sends the clients an encrypted password. The encrypted password is decrypted by the clients using the same OpenPGP key, and the password is then used to unlock the root file system.

  Tags:   

• 8:30

  Mandos Encrypted File System Unattended Reboot Utility 1.7.17

   » ‎ Packet Storm Security Tools
  The Mandos system allows computers to have encrypted root file systems and at the same time be capable of remote or unattended reboots. The computers run a small client program in the initial RAM disk environment which will communicate with a server over a network. All network communication is encrypted using TLS. The clients are identified by the server using an OpenPGP key that is unique to each client. The server sends the clients an encrypted password. The encrypted password is decrypted by the clients using the same OpenPGP key, and the password is then used to unlock the root file system.

  Tags:   

• 8:25

  Juju-run Agent Privilege Escalation

   » ‎ Packet Storm Security Exploits
  This Metasploit module attempts to gain root privileges on Juju agent systems running the juju-run agent utility. Juju agent systems running agent tools prior to version 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3, provide a UNIX domain socket to manage software ("units") without setting appropriate permissions, allowing unprivileged local users to execute arbitrary commands as root. This Metasploit module has been tested successfully with Juju agent tools versions 1.18.4, 1.25.5 and 1.25.9 on Ubuntu 14.04.1 LTS x86 deployed by Juju 1.18.1-trusty-amd64 and 1.25.6-trusty-amd64 on Ubuntu 14.04.1 LTS x86_64.

  Tags:   

• 8:25

  Juju-run Agent Privilege Escalation

   » ‎ Packet Storm Security Recent Files
  This Metasploit module attempts to gain root privileges on Juju agent systems running the juju-run agent utility. Juju agent systems running agent tools prior to version 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3, provide a UNIX domain socket to manage software ("units") without setting appropriate permissions, allowing unprivileged local users to execute arbitrary commands as root. This Metasploit module has been tested successfully with Juju agent tools versions 1.18.4, 1.25.5 and 1.25.9 on Ubuntu 14.04.1 LTS x86 deployed by Juju 1.18.1-trusty-amd64 and 1.25.6-trusty-amd64 on Ubuntu 14.04.1 LTS x86_64.

  Tags:   

• 8:25

  Hackers Accessed More Data From Equifax Than Disclosed

   » ‎ Packet Storm Security Headlines
  Hackers Accessed More Data From Equifax Than Disclosed

  Tags:   

• 8:25

  Idiots Think They Can Steal Source Code and It Won't Leak Further

   » ‎ Packet Storm Security Headlines
  Idiots Think They Can Steal Source Code and It Won't Leak Further

  Tags:   

• 8:25

  Hackers Hijack Nintendo Switch, Show Linux Loaded On Console

   » ‎ Packet Storm Security Headlines
  Hackers Hijack Nintendo Switch, Show Linux Loaded On Console

  Tags:   

• 8:00

  SoapUI 5.3.0 Code Execution

   » ‎ Packet Storm Security Exploits
  SoapUI suffers from an arbitrary code execution vulnerability via a maliciously imported project.

  Tags:   

• 8:00

  SoapUI 5.3.0 Code Execution

   » ‎ Packet Storm Security Recent Files
  SoapUI suffers from an arbitrary code execution vulnerability via a maliciously imported project.

  Tags:   

• 7:55

  Readymade Video Sharing Script 3.2 SQL Injection

   » ‎ Packet Storm Security Exploits
  Readymade Video Sharing Script version 3.2 suffers from a remote SQL injection vulnerability.

  Tags: