jetlib.sec

Feeds

230655 items (0 unread) in 27 feeds

• 0day.today (was: 1337day, Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Recent items

• March 09, 2018
• 9:35

  Panda Global Security 17.0.1 - Unquoted service path

   » ‎ Full Disclosure

  Posted by filipe on Mar 09

  =====[ Tempest Security Intelligence - ADV-18/2018 ]===
  
  Panda Global Security 17.0.1 - Unquoted service path
  -------------------------------------------------------
  Author:
  - Filipe Xavier Oliveira: < filipe.xavier () tempest.com.br
  
  =====[ Table of Contents
  ]=====================================================
  
  * Overview
  * Detailed description
  * Timeline of disclosure
  * Thanks & Acknowledgements
  * References
  
  =====[ Overview...
  

  Tags:   

• 9:35

  BitDefender Total Security 2018 - Insecure Pipe Permissions

   » ‎ Full Disclosure

  Posted by filipe on Mar 09

  =====[ Tempest Security Intelligence - ADV-19/2018 ]===
  
  BitDefender Total Security 2018 - Insecure Pipe Permissions
  -------------------------------------------------------
  Author:
  - Filipe Xavier Oliveira: <filipe.xavier () tempest.com.br
  
  =====[ Table of Contents
  ]=====================================================
  
  * Overview
  * Detailed description
  * Timeline of disclosure
  * Thanks & Acknowledgements
  * References
  
  =====[ Overview...
  

  Tags:   

• 9:35

  10-Strike Network Monitor 5.4 - Unquoted Service Path

   » ‎ Full Disclosure

  Posted by filipe on Mar 09

  =====[ Tempest Security Intelligence - ADV-20/2018 ]===
  
  10-Strike Network Monitor 5.4 - Unquoted Service Path
  -------------------------------------------------------
  Author:
  - Filipe Xavier Oliveira: < filipe.xavier () tempest.com.br
  
  =====[ Table of Contents
  ]=====================================================
  
  * Overview
  * Detailed description
  * Timeline of disclosure
  * Thanks & Acknowledgements
  * References
  
  =====[ Overview...
  

  Tags:   

• 9:33

  Tuleap SQL Injection

   » ‎ Full Disclosure

  Posted by Cristiano Maruti on Mar 09

  ===============================================================================
  title: Tuleap SQL Injection
  case id: CM-2018-01
  product: Tuleap version 9.17.99.189
  vulnerability type: Blind SQL injection - time based
  severity: High
  found: 2018-02-24
  by: Cristiano Maruti (@cmaruti)...
  

  Tags:   

• 9:31

  WebLog Expert Web Server Enterprise v9.4 / Remote Denial Of Service CVE-2018-7582

   » ‎ Full Disclosure

  Posted by hyp3rlinx on Mar 09

  [+] Credits: John Page (aka hyp3rlinx)
  [+] Website: hyp3rlinx.altervista.org
  [+] Source:
  http://hyp3rlinx.altervista.org/advisories/WEBLOG-EXPERT-WEB-SERVER-ENTERPRISE-v9.4-DENIAL-OF-SERVICE.txt
  [+] ISR: Apparition Security
  
  Vendor:
  =======
  www.weblogexpert.com
  
  Product:
  =========
  WebLog Expert Web Server Enterprise v9.4
  
  WebLog Expert is a fast and powerful access log analyzer. It will give you
  information about your site's visitors:...
  

  Tags:   

• 9:30

  WebLog Expert Web Server Enterprise v9.4 / Authentication Bypass CVE-2018-7581

   » ‎ Full Disclosure

  Posted by hyp3rlinx on Mar 09

  [+] Credits: John Page (aka hyp3rlinx)
  [+] Website: hyp3rlinx.altervista.org
  [+] Source:
  http://hyp3rlinx.altervista.org/advisories/WEBLOG-EXPERT-WEB-SERVER-ENTERPRISE-v9.4-AUTHENTICATION-BYPASS.txt
  [+] ISR: Apparition Security
  
  Vendor:
  ========
  www.weblogexpert.com
  
  Product:
  ========
  WebLog Expert Web Server Enterprise v9.4
  
  WebLog Expert is a fast and powerful access log analyzer. It will give you
  information about your site's visitors:...
  

  Tags:   

• 4:51

  #0daytoday #Tor Browser ( Firefox 41 &lt; 50 ) - Code Execution 0day Exploit [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Tor Browser ( Firefox 41 &lt; 50 ) - Code Execution 0day Exploit [#0day #Exploit]

  Tags:   

• 4:51

  #0daytoday #Microsoft Office - Composite Moniker Remote Code Execution Exploit [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Microsoft Office - Composite Moniker Remote Code Execution Exploit [remote #exploits #0day #Exploit]

  Tags:   

• 4:11

  #0daytoday #Chrome 35.0.1916.153 - Sandbox Escape / Command Execution Exploit [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Chrome 35.0.1916.153 - Sandbox Escape / Command Execution Exploit [remote #exploits #0day #Exploit]

  Tags:   

• 4:01

  #0daytoday #Mozilla Firefox - Address Bar Spoofing Exploit CVE-2017-5415 [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Mozilla Firefox - Address Bar Spoofing Exploit CVE-2017-5415 [remote #exploits #0day #Exploit]

  Tags:   

• 4:01

  #0daytoday #Bacula-Web &lt; 8.0.0-rc2 - SQL Injection Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Bacula-Web &lt; 8.0.0-rc2 - SQL Injection Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 4:01

  #0daytoday #Broadcom BCM43xx Wi-Fi - BroadPWN Denial of Service Exploit [dos #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Broadcom BCM43xx Wi-Fi - BroadPWN Denial of Service Exploit [dos #exploits #0day #Exploit]

  Tags:   

• 4:01

  #0daytoday #Memcached 1.5.5 - Memcrashed Insufficient Control of Network Message Volume Denial of S [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Memcached 1.5.5 - Memcrashed Insufficient Control of Network Message Volume Denial of S [#0day #Exploit]

  Tags:   

• 0:00

  Vuln: Zsh 'exec.c:hashcmd()' Function Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Zsh 'exec.c:hashcmd()' Function Local Denial of Service Vulnerability

  Tags:   

• 0:00

  Vuln: Linux Kernel 'arch/x86/kernel/cpu/mcheck/mce.c' Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel 'arch/x86/kernel/cpu/mcheck/mce.c' Local Denial of Service Vulnerability

  Tags:   

• March 08, 2018
• 16:53

  UK Data Watchdog Raids Companies Suspected Of 11 Million Nuisance Texts

   » ‎ Packet Storm Security Headlines
  UK Data Watchdog Raids Companies Suspected Of 11 Million Nuisance Texts

  Tags:  headlinegovernmentphonebritainfraud  

• 16:53

  Dutch Police Became The Admins For Hansa Dark Web Market

   » ‎ Packet Storm Security Headlines
  Dutch Police Became The Admins For Hansa Dark Web Market

  Tags:  headlinegovernmentnetherlands  

• 16:53

  Federal Judge Tells Trump To Just Mute People On Twitter

   » ‎ Packet Storm Security Headlines
  Federal Judge Tells Trump To Just Mute People On Twitter

  Tags:  headlinegovernmentusatwitter  

• 16:53

  Analysis Suggests North Korea Not Behind Olympic Destroyer

   » ‎ Packet Storm Security Headlines
  Analysis Suggests North Korea Not Behind Olympic Destroyer

  Tags:  headlinehackergovernmentmalwarefraudcyberwarkorea  

• 16:00

  [webapps] Bacula-Web < 8.0.0-rc2 - SQL Injection

   » ‎ Exploit-DB
  Bacula-Web

  Tags:   

• 16:00

  [dos] WebLog Expert Enterprise 9.4 - Denial of Service

   » ‎ Exploit-DB
  WebLog Expert Enterprise 9.4 - Denial of Service

  Tags:   

• 16:00

  [local] WebLog Expert Enterprise 9.4 - Authentication Bypass

   » ‎ Exploit-DB
  WebLog Expert Enterprise 9.4 - Authentication Bypass

  Tags:   

• 15:55

  Dell EMC Data Protection Advisor Hardcoded Password

   » ‎ Packet Storm Security Advisories
  Dell EMC Data Protection Advisor contains a database account with a hardcoded password that could potentially be exploited by malicious users to compromise the affected system. Versions prior to 6.3 Patch 159 and versions prior to 6.4 Patch 110 are affected.

  Tags:   

• 15:55

  Dell EMC Data Protection Advisor Hardcoded Password

   » ‎ Packet Storm Security Recent Files
  Dell EMC Data Protection Advisor contains a database account with a hardcoded password that could potentially be exploited by malicious users to compromise the affected system. Versions prior to 6.3 Patch 159 and versions prior to 6.4 Patch 110 are affected.

  Tags:   

• 15:55

  Dell EMC Data Protection Advisor Hardcoded Password

   » ‎ Packet Storm Security Misc. Files
  Dell EMC Data Protection Advisor contains a database account with a hardcoded password that could potentially be exploited by malicious users to compromise the affected system. Versions prior to 6.3 Patch 159 and versions prior to 6.4 Patch 110 are affected.

  Tags:   

• 15:44

  Bacula-Web SQL Injection

   » ‎ Packet Storm Security Exploits
  Bacula-Web versions prior to 8.0.0-RC2 suffer from multiple remote SQL injection vulnerabilities.

  Tags:   

• 15:44

  Bacula-Web SQL Injection

   » ‎ Packet Storm Security Recent Files
  Bacula-Web versions prior to 8.0.0-RC2 suffer from multiple remote SQL injection vulnerabilities.

  Tags:   

• 15:44

  Bacula-Web SQL Injection

   » ‎ Packet Storm Security Misc. Files
  Bacula-Web versions prior to 8.0.0-RC2 suffer from multiple remote SQL injection vulnerabilities.

  Tags:   

• 14:22

  Tuleap 9.17.99.189 SQL Injection

   » ‎ Packet Storm Security Exploits
  Tuleap version 9.17.99.189 suffers from a remote SQL injection vulnerability.

  Tags:   

• 14:22

  Tuleap 9.17.99.189 SQL Injection

   » ‎ Packet Storm Security Recent Files
  Tuleap version 9.17.99.189 suffers from a remote SQL injection vulnerability.

  Tags:   

• 14:22

  Tuleap 9.17.99.189 SQL Injection

   » ‎ Packet Storm Security Misc. Files
  Tuleap version 9.17.99.189 suffers from a remote SQL injection vulnerability.

  Tags:   

• 13:21

  Panda Global Security 17.0.1 NULL DACL Grants Full Access

   » ‎ Packet Storm Security Exploits
  Panda Global Security version 17.0.1 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through the use of an insecurely created named pipe.

  Tags:   

• 12:32

  WPS Free Office 10.2.0.5978 NULL DACL Grants Full Access

   » ‎ Packet Storm Security Exploits
  WPS Free Office version 10.2.0.5978 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through the use of an insecurely created named pipe.

  Tags:   

• 12:22

  Panda Global Security 17.0.1 Unquoted Service Path

   » ‎ Packet Storm Security Exploits
  Panda Global Security version 17.0.1 suffers from an unquoted service path vulnerability.

  Tags:   

• 11:32

  BitDefender Total Security 2018 Insecure Pipe Permissions

   » ‎ Packet Storm Security Advisories
  BitDefender Total Security 2018 suffers from an insecure pipe permissions vulnerability.

  Tags:   

• 10:18

  10-Strike Network Monitor 5.4 Unquoted Service Path

   » ‎ Packet Storm Security Exploits
  10-Strike Network Monitor version 5.4 suffers from an unquoted service path vulnerability.

  Tags:   

• 9:33

  Hola VPN 1.79.859 Insecure Service Permissions

   » ‎ Packet Storm Security Exploits
  Hola VPN version 1.79.859 suffers from an insecure service permission vulnerability.

  Tags:   

• 8:39

  Ubuntu Security Notice USN-3592-2

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 3592-2 - USN-3592-1 fixed several vulnerabilities in ClamAV. This update provides the corresponding update for Ubuntu 12.04 ESM. It was discovered that ClamAV incorrectly handled parsing certain PDF files. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. Various other issues were also addressed.

  Tags:   

• 8:38

  Ubuntu Security Notice USN-3593-1

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 3593-1 - It was discovered that Zsh incorrectly handled certain environment variables. An attacker could possibly use this issue to gain privileged access to the system. This issue only affected Ubuntu 14.04 LTS. It was discovered that Zsh incorrectly handled certain inputs. An attacker could possibly use this to execute arbitrary code. This issue only affected Ubuntu 14.04 LTS. Various other issues were also addressed.

  Tags:   

• 6:08

  Tuleap Open Redirect

   » ‎ Packet Storm Security Exploits
  RedTeam Pentesting discovered an arbitrary redirect vulnerability in the redirect mechanism of the application lifecycle management platform Tuleap. Versions prior to 9.17.99.93 are affected.

  Tags:   

• 6:07

  Ubuntu Security Notice USN-3592-1

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 3592-1 - It was discovered that ClamAV incorrectly handled parsing certain PDF files. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. Hanno BAPck discovered that ClamAV incorrectly handled parsing certain XAR files. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service. Various other issues were also addressed.

  Tags:   

• 6:04

  FreeBSD Security Advisory - FreeBSD-SA-18:01.ipsec Revised

   » ‎ Packet Storm Security Advisories
  FreeBSD Security Advisory - Due to a lack of strict checking, an attacker from a trusted host can send a specially constructed IP packet that may lead to a system crash. Additionally, a use-after-free vulnerability in the AH handling code could cause unpredictable results. Access to out of bounds or freed mbuf data can lead to a kernel panic or other unpredictable results.

  Tags:   

• 6:04

  Debian Security Advisory 4133-1

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 4133-1 - Several vulnerabilities have been discovered in the ISC DHCP client, relay and server.

  Tags:   

• 6:03

  Fresno State Suffers Data Breach, 15,000 Affected

   » ‎ Packet Storm Security Headlines
  Fresno State Suffers Data Breach, 15,000 Affected

  Tags:  headlineprivacydata lossidentity theft  

• 6:03

  The FBI Still Can't Comprehend Cryptography

   » ‎ Packet Storm Security Headlines
  The FBI Still Can't Comprehend Cryptography

  Tags:  headlinegovernmentusaphonefbibackdoorcryptography  

• 6:03

  Your Entire ID Is Worth About £820 To Crooks On Dark Web Black Market

   » ‎ Packet Storm Security Headlines
  Your Entire ID Is Worth About £820 To Crooks On Dark Web Black Market

  Tags:  headlineprivacybritaindata lossidentity theft  

• 6:03

  Cisco Security Kit Has Java Deserialization Bug And A Default Password Snafu

   » ‎ Packet Storm Security Headlines
  Cisco Security Kit Has Java Deserialization Bug And A Default Password Snafu

  Tags:  headlineflawpasswordciscojava  

• 3:17

  #0daytoday #WebLog Expert Web Server Enterprise 9.4 Denial Of Service Exploit [dos #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #WebLog Expert Web Server Enterprise 9.4 Denial Of Service Exploit [dos #exploits #0day #Exploit]

  Tags:   

• 3:16

  #0daytoday #WebLog Expert Web Server Enterprise 9.4 Weak Permissions Vulnerability [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #WebLog Expert Web Server Enterprise 9.4 Weak Permissions Vulnerability [#0day #Exploit]

  Tags:   

• 1:08

  [RT-SA-2018-001] Arbitrary Redirect in Tuleap

   » ‎ Bugtraq

  Posted by RedTeam Pentesting GmbH on Mar 08

  Advisory: Arbitrary Redirect in Tuleap
  
  RedTeam Pentesting discovered an arbitrary redirect vulnerability in the
  redirect mechanism of the application lifecycle management platform
  Tuleap.
  
  Details
  =======
  
  Product: Tuleap
  Affected Versions: > 9.17.99.93
  Fixed Versions: >= 9.17.99.93
  Vulnerability Type: Arbitrary Redirect
  Security Risk: low
  Vendor URL: https://www.tuleap.org/
  Vendor Status: fixed version released
  Vendor Issue URL:...
  

  Tags:   

• 0:24

  [RT-SA-2018-001] Arbitrary Redirect in Tuleap

   » ‎ Full Disclosure

  Posted by RedTeam Pentesting GmbH on Mar 08

  Advisory: Arbitrary Redirect in Tuleap
  
  RedTeam Pentesting discovered an arbitrary redirect vulnerability in the
  redirect mechanism of the application lifecycle management platform
  Tuleap.
  
  Details
  =======
  
  Product: Tuleap
  Affected Versions: > 9.17.99.93
  Fixed Versions: >= 9.17.99.93
  Vulnerability Type: Arbitrary Redirect
  Security Risk: low
  Vendor URL: https://www.tuleap.org/
  Vendor Status: fixed version released
  Vendor Issue URL:...
  

  Tags:   

• March 07, 2018
• 23:30

  FreeBSD Security Advisory FreeBSD-SA-18:01.ipsec [REVISED]

   » ‎ Bugtraq

  Posted by FreeBSD Security Advisories on Mar 07

  =============================================================================
  FreeBSD-SA-18:01.ipsec [REVISED] Security Advisory
  The FreeBSD Project
  
  Topic: ipsec validation and use-after-free
  
  Category: core
  Module: ipsec
  Announced: 2018-03-07
  Credits: Maxime Villard
  Affects: All supported versions of FreeBSD.
  Corrected:...
  

  Tags:   

• 23:24

  [SECURITY] [DSA 4133-1] isc-dhcp security update

   » ‎ Bugtraq

  Posted by Salvatore Bonaccorso on Mar 07

  -------------------------------------------------------------------------
  Debian Security Advisory DSA-4133-1 security () debian org
  https://www.debian.org/security/ Salvatore Bonaccorso
  March 07, 2018 https://www.debian.org/security/faq
  -------------------------------------------------------------------------
  
  Package : isc-dhcp
  CVE ID : CVE-2017-3144 CVE-2018-5732...
  

  Tags:   

• 16:00

  [dos] Memcached 1.5.5 - 'Memcrashed ' Insufficient Control of Network Message Volume Denial of Service With Shodan API

   » ‎ Exploit-DB
  Memcached 1.5.5 - 'Memcrashed ' Insufficient Control of Network Message Volume Denial of Service With Shodan API

  Tags:   

• 15:55

  WebLog Expert Web Server Enterprise 9.4 Weak Permissions

   » ‎ Packet Storm Security Exploits
  WebLog Expert Web Server Enterprise version 9.4 has a weak permission vulnerability that allows for authentication bypass.

  Tags:   

• 15:55

  WebLog Expert Web Server Enterprise 9.4 Denial Of Service

   » ‎ Packet Storm Security Exploits
  WebLog Expert Web Server Enterprise version 9.4 suffers from a denial of service vulnerability.

  Tags:   

• 15:23

  AIEngine 1.8.3

   » ‎ Packet Storm Security Tools
  AIEngine is a packet inspection engine with capabilities of learning without any human intervention. It helps network/security professionals to identify traffic and develop signatures for use them on NIDS, Firewalls, Traffic classifiers and so on.

  Tags:   

• 15:04

  Gentoo Linux Security Advisory 201803-03

   » ‎ Packet Storm Security Advisories
  Gentoo Linux Security Advisory 201803-3 - A vulnerability in Go might allow remote attackers to execute arbitrary commands during source code build. Versions less than 1.9.4 are affected.

  Tags:   

• 15:03

  Gentoo Linux Security Advisory 201803-02

   » ‎ Packet Storm Security Advisories
  Gentoo Linux Security Advisory 201803-2 - A vulnerability was discovered in util-linux, which could potentially lead to the execution of arbitrary code. Versions less than 2.30.2-r1 are affected.

  Tags:   

• 12:28

  #0daytoday #Eclipse Equinoxe OSGi Console Command Execution Exploit [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Eclipse Equinoxe OSGi Console Command Execution Exploit [remote #exploits #0day #Exploit]

  Tags:   

• 12:28

  #0daytoday #antMan 0.9.0c - Authentication Bypass Vulnerability CVE-2018-7739 [webapps #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #antMan 0.9.0c - Authentication Bypass Vulnerability CVE-2018-7739 [webapps #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 12:28

  #0daytoday #Redaxo CMS Addon MyEvents 2.2.1 - SQL Injection Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Redaxo CMS Addon MyEvents 2.2.1 - SQL Injection Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 10:33

  Memcached DDoS Attacks Will Be BIG In 2018

   » ‎ Darknet
  

  So after the massive DDoS attack trend in 2016 it seems like 2018 is going to the year of the Memcached DDoS amplification attack with so many insecure Memcached servers available on the public Internet.

  Unfortunately, it looks like a problem that won’t easily go away as there are so many publically exposed, poorly configured Memcached servers online (estimated to be over 100,000).

  Honestly, Github handled the 1.3Tbps attack like a champ with only 10 minutes downtime although they did deflect it by moving traffic to Akamai.

  Read the rest of Memcached DDoS Attacks Will Be BIG In 2018 now! Only available at Darknet.

  Tags:  hacking news  

• 10:30

  Eclipse Equinoxe OSGi Console Command Execution

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits the Eclipse Equinoxe OSGi (Open Service Gateway initiative) console fork command to execute arbitrary commands on the remote system..

  Tags:   

• 10:30

  Lynis Auditing Tool 2.6.3

   » ‎ Packet Storm Security Tools
  Lynis is an auditing tool for Unix (specialists). It scans the system and available software to detect security issues. Beside security related information it will also scan for general system information, installed packages and configuration mistakes. This software aims in assisting automated auditing, software patch management, vulnerability and malware scanning of Unix based systems.

  Tags:   

• 10:29

  antMan 0.9.0c Authentication Bypass

   » ‎ Packet Storm Security Exploits
  antMan version 0.9.0c suffers from an authentication bypass vulnerability.

  Tags:   

• 10:27

  Redaxo CMS Addon MyEvents 2.2.1 SQL Injection

   » ‎ Packet Storm Security Exploits
  Redaxo CMS Addon MyEvents version 2.2.1 suffers from a remote SQL injection vulnerability.

  Tags:   

• 10:12

  Red Hat Security Advisory 2018-0465-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2018-0465-01 - Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector, JBoss HTTP Connector, Hibernate, and the Tomcat Native library. This release of Red Hat JBoss Web Server 3.1 Service Pack 2 serves as a replacement for Red Hat JBoss Web Server 3.1, and includes bug fixes, which are documented in the Release Notes document linked to in the References. Multiple security issues have been addressed.

  Tags:   

• 10:10

  Red Hat Security Advisory 2018-0458-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2018-0458-01 - IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE 7 to version 7R1 SR4-FP20. Security Fix: OpenJDK: insufficient validation of the invokeinterface instruction OpenJDK: LDAPCertStore insecure handling of LDAP referrals.

  Tags:   

• 7:13

  Miner Vs Miner: Attack Script Seeks Out And Destroys Competing Currency Crafters

   » ‎ Packet Storm Security Headlines
  Miner Vs Miner: Attack Script Seeks Out And Destroys Competing Currency Crafters

  Tags:  headlinemalwarefraudbackdoor  

• 7:13

  400,000 Exim Servers Still Vulnerable To Remote Code Execution

   » ‎ Packet Storm Security Headlines
  400,000 Exim Servers Still Vulnerable To Remote Code Execution

  Tags:  headlineemailflawpatch  

• 7:13

  Net Neutrality Preserved By Washington State Law

   » ‎ Packet Storm Security Headlines
  Net Neutrality Preserved By Washington State Law

  Tags:  headlinegovernmentusafraud  

• 7:13

  UK Company Linked To Laundered Bitcoin Millions

   » ‎ Packet Storm Security Headlines
  UK Company Linked To Laundered Bitcoin Millions

  Tags:  headlinehackerbankbritaindata lossfraudcryptography  

• 2:08

  FreeBSD Security Advisory FreeBSD-SA-18:01.ipsec

   » ‎ Bugtraq

  Posted by FreeBSD Security Advisories on Mar 07

  =============================================================================
  FreeBSD-SA-18:01.ipsec Security Advisory
  The FreeBSD Project
  
  Topic: ipsec validation and use-after-free
  
  Category: core
  Module: ipsec
  Announced: 2018-03-07
  Credits: Maxime Villard
  Affects: All supported versions of FreeBSD.
  Corrected:...
  

  Tags:   

• 1:34

  #0daytoday #Magento Product Attributes Cross Site Scripting Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Magento Product Attributes Cross Site Scripting Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 1:34

  #0daytoday #Magento Downloadable Products Cross Site Scripting Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Magento Downloadable Products Cross Site Scripting Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 1:34

  #0daytoday #Magento Backups Cross Site Request Forgery Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Magento Backups Cross Site Request Forgery Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

  Tags:   

• March 06, 2018
• 19:31

  [SECURITY] [DSA 4128-1] trafficserver security update

   » ‎ Bugtraq

  Posted by Sebastien Delafond on Mar 06

  -
  -------------------------------------------------------------------------
  Debian Security Advisory DSA-4128-1 security () debian org
  https://www.debian.org/security/ Sebastien Delafond
  March 02, 2018 https://www.debian.org/security/faq
  -
  -------------------------------------------------------------------------
  
  Package : trafficserver
  CVE ID : CVE-2017-5660...
  

  Tags:   

• 19:28

  KL-001-2018-007 : Sophos UTM 9 loginuser Privilege Escalation via confd Service

   » ‎ Bugtraq

  Posted by KoreLogic Disclosures on Mar 06

  KL-001-2018-007 : Sophos UTM 9 loginuser Privilege Escalation via confd Service
  
  Title: Sophos UTM 9 loginuser Privilege Escalation via confd Service
  Advisory ID: KL-001-2018-007
  Publication Date: 2018.03.02
  Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2018-007.txt
  
  1. Vulnerability Details
  
  Affected Vendor: Sophos
  Affected Product: UTM 9
  Affected Version: 9.410
  Platform: Embedded Linux
  CWE...
  

  Tags:   

• 19:25

  DefenseCode Security Advisory: Magento Backups Cross-Site Request Forgery

   » ‎ Bugtraq

  Posted by Defense Code on Mar 06

  DefenseCode Security Advisory
  Magento Backups Cross-Site Request Forgery
  
  Advisory ID: DC-2018-03-001
  Advisory Title: Magento Backups Cross-Site Request Forgery
  Advisory URL: http://www.defensecode.com/advisories.php
  Software: Magento
  Version: Magento Open Source prior to 1.9.3.8,
  Magento Commerce prior to 1.14.3.8,
  Magento 2.0 prior to 2.0.18, Magento 2.1 prior
  to 2.1.12, Magento...
  

  Tags:   

• 19:22

  [SECURITY] [DSA 4131-1] xen security update

   » ‎ Bugtraq

  Posted by Moritz Muehlenhoff on Mar 06

  -
  -------------------------------------------------------------------------
  Debian Security Advisory DSA-4131-1 security () debian org
  https://www.debian.org/security/ Moritz Muehlenhoff
  March 04, 2018 https://www.debian.org/security/faq
  -
  -------------------------------------------------------------------------
  
  Package : xen
  CVE ID : CVE-2018-7540 CVE-2018-7541...
  

  Tags:   

• 19:17

  [SECURITY] [DSA 4129-1] freexl security update

   » ‎ Bugtraq

  Posted by Moritz Muehlenhoff on Mar 06

  -
  -------------------------------------------------------------------------
  Debian Security Advisory DSA-4129-1 security () debian org
  https://www.debian.org/security/ Moritz Muehlenhoff
  March 02, 2018 https://www.debian.org/security/faq
  -
  -------------------------------------------------------------------------
  
  Package : freexl
  CVE ID : CVE-2018-7435 CVE-2018-7436...
  

  Tags:   

• 16:00

  [webapps] antMan 0.9.0c - Authentication Bypass

   » ‎ Exploit-DB
  antMan 0.9.0c - Authentication Bypass

  Tags:   

• 16:00

  [webapps] Redaxo CMS Addon MyEvents 2.2.1 - SQL Injection

   » ‎ Exploit-DB
  Redaxo CMS Addon MyEvents 2.2.1 - SQL Injection

  Tags:   

• 15:40

  FBI Paid Geek Squad Repair Staff As Informants

   » ‎ Packet Storm Security Headlines
  FBI Paid Geek Squad Repair Staff As Informants

  Tags:  headlinegovernmentusaspywarefbi  

• 15:40

  Nike Website Flaw Exposed Sensitive Server Data

   » ‎ Packet Storm Security Headlines
  Nike Website Flaw Exposed Sensitive Server Data

  Tags:  headlinehackerprivacydata lossflaw  

• 15:39

  Researchers Bypassed Windows Password Locks With Cortana Voice Commands

   » ‎ Packet Storm Security Headlines
  Researchers Bypassed Windows Password Locks With Cortana Voice Commands

  Tags:  headlinehackermicrosoftflaw  

• 15:39

  Elon Musk Fans Targeted In Crypto Cash Scam

   » ‎ Packet Storm Security Headlines
  Elon Musk Fans Targeted In Crypto Cash Scam

  Tags:  headlinefraudscamcryptography  

• 15:39

  #0daytoday #Magento User Info Cross Site Scripting Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Magento User Info Cross Site Scripting Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 15:39

  #0daytoday #Rapid Scada 5.5.0 Insecure Permissions Vulnerability CVE-2018-5313 [remote #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Rapid Scada 5.5.0 Insecure Permissions Vulnerability CVE-2018-5313 [remote #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 15:20

  Magento Product Attributes Cross Site Scripting

   » ‎ Packet Storm Security Exploits
  Magento suffers from product attribute information related cross site scripting vulnerabilities. Versions affected include Magento 2.0 prior to 2.0.18, Magento 2.1 prior to 2.1.12, and Magento 2.2 prior to 2.2.3.

  Tags:   

• 15:19

  Magento Downloadable Products Cross Site Scripting

   » ‎ Packet Storm Security Exploits
  Magento suffers from downloadable product information related cross site scripting vulnerabilities. Versions affected include Magento 2.0 prior to 2.0.18, Magento 2.1 prior to 2.1.12, and Magento 2.2 prior to 2.2.3.

  Tags:   

• 15:04

  Magento Backups Cross Site Request Forgery

   » ‎ Packet Storm Security Exploits
  Magento Backups suffer from a cross site request forgery vulnerability. Versions affected include Magento Open Source prior to 1.9.3.8, Magento Commerce prior to 1.14.3.8, Magento 2.0 prior to 2.0.18, Magento 2.1 prior to 2.1.12, and Magento 2.2 prior to 2.2.3.

  Tags:   

• 14:02

  Magento User Info Cross Site Scripting

   » ‎ Packet Storm Security Exploits
  Magento suffers from user information related cross site scripting vulnerabilities. Versions affected include Magento 2.0 prior to 2.0.18, Magento 2.1 prior to 2.1.12, and Magento 2.2 prior to 2.2.3.

  Tags:   

• 10:08

  CVE-2017-12544 XSS on HPE System Management Homepage v7.6.0.11 and minor

   » ‎ Full Disclosure

  Posted by spinfoo via Fulldisclosure on Mar 06

  Product: HPE System Management Homepage
  Versions: 7.6.0.11 and minor versions
  Vulnerability: JavaScript Injection in file gsearch.php, parameter prod
  OWASP TOP 10: A1 Injection
  Type: Javascript Injection
  Impact: Allows an attacker to perform an XSS (Cross-Site Scripting) attack,
  execute arbitrary JavaScript client-side, steal admin credentials, etc
  
  Access Vector: Adjacent Networks
  Access Complexity: Low
  Authentication: None
  
  CVE-2017-12544...
  

  Tags:   

• 10:07

  DSA-2018-011: RSA Identity Governance and Lifecycle Privilege Escalation Vulnerability

   » ‎ Full Disclosure

  Posted by EMC Product Security Response Center on Mar 06

  DSA-2018-011: RSA Identity Governance and Lifecycle Privilege Escalation Vulnerability
  
  Dell EMC Identifier: DSA-2018-011
  
  CVE Identifier: CVE-2018-1182
  
  Severity: High
  
  Severity Rating: CVSSv3 Base Score: 7.8 /AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  
  Affected Products:
  
  RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels (hardware appliance and software bundle
  deployments only).
  
  RSA Via Lifecycle and Governance...
  

  Tags:   

• 7:55

  #0daytoday #Bravo Tejari Web Portal - Cross-Site Request Forgery Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Bravo Tejari Web Portal - Cross-Site Request Forgery Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 6:46

  Porn Check Critics Fear Data Breach

   » ‎ Packet Storm Security Headlines
  Porn Check Critics Fear Data Breach

  Tags:  headlineprivacydata loss  

• 5:10

  DefenseCode Security Advisory: Magento Stored Cross-Site Scripting – Downloadable Products

   » ‎ Bugtraq

  Posted by Defense Code on Mar 06

  DefenseCode Security Advisory
  Magento Stored Cross-Site Scripting – Downloadable Products
  
  Advisory ID: DC-2018-03-003
  Advisory Title: Magento Stored Cross-Site Scripting – Downloadable Products
  Advisory URL: http://www.defensecode.com/advisories.php
  Software: Magento
  Version: Magento 2.0 prior to 2.0.18, Magento 2.1 prior to
  2.1.12, Magento 2.2 prior to 2.2.3
  Vendor Status: Vendor contacted, vulnerability...
  

  Tags:   

• 5:10

  DefenseCode Security Advisory: Magento Stored Cross-Site Scripting – Product Attributes

   » ‎ Bugtraq

  Posted by Defense Code on Mar 06

  DefenseCode Security Advisory
  Magento Stored Cross-Site Scripting – Product Attributes
  
  Advisory ID: DC-2018-03-004
  Advisory Title: Magento Stored Cross-Site Scripting – Product Attributes
  Advisory URL: http://www.defensecode.com/advisories.php
  Software: Magento
  Version: Magento 2.0 prior to 2.0.18, Magento 2.1 prior to
  2.1.12, Magento 2.2 prior to 2.2.3
  Vendor Status: Vendor contacted, vulnerability fixed...
  

  Tags:   

• 5:06

  DefenseCode Security Advisory: Magento Multiple Stored Cross-Site Scripting Vulnerabilities

   » ‎ Bugtraq

  Posted by Defense Code on Mar 06

  DefenseCode Security Advisory
  Magento Multiple Stored Cross-Site Scripting Vulnerabilities
  
  Advisory ID: DC-2018-03-002
  Advisory Title: Magento Multiple Stored Cross-Site Scripting Vulnerabilities
  Advisory URL: http://www.defensecode.com/advisories.php
  Software: Magento
  Version: Magento 2.0 prior to 2.0.18
  Vendor Status: Vendor contacted, vulnerability fixed
  Release Date: 06/03/2018
  Risk: MEDIUM
  
  1. General Overview...
  

  Tags:   

• 5:01

  DefenseCode Security Advisory: Magento Backups Cross-Site Request Forgery

   » ‎ Bugtraq

  Posted by Defense Code on Mar 06

  DefenseCode Security Advisory
  Magento Backups Cross-Site Request Forgery
  
  Advisory ID: DC-2018-03-001
  Advisory Title: Magento Backups Cross-Site Request Forgery
  Advisory URL: http://www.defensecode.com/advisories.php
  Software: Magento
  Version: Magento Open Source prior to 1.9.3.8,
  Magento Commerce prior to 1.14.3.8,
  Magento 2.0 prior to 2.0.18, Magento 2.1 prior
  to 2.1.12, Magento...
  

  Tags:   

• 3:32

  #0daytoday #Tenda AC15 Router - Pe-authenticated Remote Code Execution Exploit [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Tenda AC15 Router - Pe-authenticated Remote Code Execution Exploit [remote #exploits #0day #Exploit]

  Tags:   

• 3:32

  #0daytoday #Chrome V8 Out-Of-Bounds Read Exploit [dos #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Chrome V8 Out-Of-Bounds Read Exploit [dos #exploits #0day #Exploit]

  Tags:   

• 3:32

  #0daytoday #Chrome V8 JIT Optmization Bug Exploit [dos #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Chrome V8 JIT Optmization Bug Exploit [dos #exploits #0day #Exploit]

  Tags:   

• 3:32

  #0daytoday #Chrome V8 JIT JSBuiltinReducer::ReduceObjectCreate NULL Check Fail Exploit [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Chrome V8 JIT JSBuiltinReducer::ReduceObjectCreate NULL Check Fail Exploit [#0day #Exploit]

  Tags:   

• 3:32

  #0daytoday #Chrome V8 JIT GetSpecializationContext Type Confusion Exploit [dos #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Chrome V8 JIT GetSpecializationContext Type Confusion Exploit [dos #exploits #0day #Exploit]

  Tags:   

• 3:14

  #0daytoday #CloudMe Sync 1.9.2 Remote Buffer Overflow Exploit CVE-2018-6892 [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #CloudMe Sync 1.9.2 Remote Buffer Overflow Exploit CVE-2018-6892 [remote #exploits #0day #Exploit]

  Tags:   

• 3:14

  #0daytoday #Softros Network Time System Server 2.3.4 - Denial of Service Exploit [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Softros Network Time System Server 2.3.4 - Denial of Service Exploit [#0day #Exploit]

  Tags:   

• 3:14

  #0daytoday #Memcached - memcrashed Denial of Service Exploit [dos #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Memcached - memcrashed Denial of Service Exploit [dos #exploits #0day #Exploit]

  Tags:   

• 1:32

  Dup Scout Enterprise 10.5.12 Share Username Buffer Overflow

   » ‎ Packet Storm Security Exploits
  Dup Scout Enterprise version 10.5.12 suffers from a share username local buffer overflow vulnerability.

  Tags:   

• March 05, 2018
• 19:55

  CVE-2017-12544 XSS on HPE System Management Homepage v7.6.0.11 and minor

   » ‎ Bugtraq

  Posted by spinfoo on Mar 05

  Product: HPE System Management Homepage
  Versions: 7.6.0.11 and minor versions
  Vulnerability: JavaScript Injection in file gsearch.php, parameter prod
  OWASP TOP 10: A1 Injection
  Type: Javascript Injection
  Impact: Allows an attacker to perform an XSS (Cross-Site Scripting) attack,
  execute arbitrary JavaScript client-side, steal admin credentials, etc
  
  Access Vector: Adjacent Networks
  Access Complexity: Low
  Authentication: None
  
  CVE-2017-12544...
  

  Tags:   

• 16:43

  Service Provider Survives The Largest Recorded DDoS In History

   » ‎ Packet Storm Security Headlines
  Service Provider Survives The Largest Recorded DDoS In History

  Tags:  headlinedenial serviceflaw  

• 16:43

  LTE Flaws Could Be Used For Spying, Spreading Chaos

   » ‎ Packet Storm Security Headlines
  LTE Flaws Could Be Used For Spying, Spreading Chaos

  Tags:  headlinehackerphoneflawcyberwarspyware  

• 16:43

  Pennsylvania Sues Uber Over Delayed Breach Notification

   » ‎ Packet Storm Security Headlines
  Pennsylvania Sues Uber Over Delayed Breach Notification

  Tags:  headlinehackerdata lossfraud  

• 16:00

  [dos] Chrome V8 JIT - Empty BytecodeJumpTable Out-of-Bounds Read

   » ‎ Exploit-DB
  Chrome V8 JIT - Empty BytecodeJumpTable Out-of-Bounds Read

  Tags:   

• 16:00

  [dos] Chrome V8 JIT - 'GetSpecializationContext' Type Confusion

   » ‎ Exploit-DB
  Chrome V8 JIT - 'GetSpecializationContext' Type Confusion

  Tags:   

• 16:00

  [dos] Chrome V8 JIT - JSBuiltinReducer::ReduceObjectCreate Fails to Ensure that the Prototype is "null"

   » ‎ Exploit-DB
  Chrome V8 JIT - JSBuiltinReducer::ReduceObjectCreate Fails to Ensure that the Prototype is "null"

  Tags:   

• 16:00

  [dos] Chrome V8 JIT - Simplified-lowererer IrOpcode::kStoreField, IrOpcode::kStoreElement Optimization Bug

   » ‎ Exploit-DB
  Chrome V8 JIT - Simplified-lowererer IrOpcode::kStoreField, IrOpcode::kStoreElement Optimization Bug

  Tags:   

• 16:00

  [webapps] Bravo Tejari Web Portal - Cross-Site Request Forgery

   » ‎ Exploit-DB
  Bravo Tejari Web Portal - Cross-Site Request Forgery

  Tags:   

• 15:33

  JoomScan 0.0.1

   » ‎ Packet Storm Security Tools
  OWASP JoomScan is an opensource project for detecting Joomla CMS vulnerabilities. Written in Perl.

  Tags:   

• 11:50

  #0daytoday #Joomla Joomanager 2.0.0 Component - com_Joomanager Arbitrary File Download Exploit [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Joomla Joomanager 2.0.0 Component - com_Joomanager Arbitrary File Download Exploit [#0day #Exploit]

  Tags:   

• 9:54

  libsodium – Easy-to-use Software Library For Encryption

   » ‎ Darknet
  

  Sodium is a new, easy-to-use software library for encryption, decryption, signatures, password hashing and more. It is a portable, cross-compilable, installable, packageable fork of NaCl, with a compatible API, and an extended API to improve usability even further.

  Its goal is to provide all of the core operations needed to build higher-level cryptographic tools. Sodium supports a variety of compilers and operating systems, including Windows (with MingW or Visual Studio, x86 and x64), iOS, Android, as well as Javascript and Webassembly.

  Read the rest of libsodium – Easy-to-use Software Library For Encryption now! Only available at Darknet.

  Tags:  cryptography  

• 9:08

  #0daytoday #Sophos UTM 9.410 - (loginuser) (confd) Service Privilege Escalation Vulnerability [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Sophos UTM 9.410 - (loginuser) (confd) Service Privilege Escalation Vulnerability [#0day #Exploit]

  Tags:   

• 8:57

  #0daytoday #Xion 1.0.125 - .m3u Local SEH-Based Unicode Venetian Exploit [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Xion 1.0.125 - .m3u Local SEH-Based Unicode Venetian Exploit [remote #exploits #0day #Exploit]

  Tags:   

• 8:57

  #0daytoday #Dup Scout Enterprise 10.5.12 - Share Username Local Buffer Overflow Exploit [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Dup Scout Enterprise 10.5.12 - Share Username Local Buffer Overflow Exploit [#0day #Exploit]

  Tags:   

• 8:57

  #0daytoday #ClipBucket &lt; 4.0.0 - Release 4902 - Command Injection / File Upload / SQL In [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #ClipBucket &lt; 4.0.0 - Release 4902 - Command Injection / File Upload / SQL In [#0day #Exploit]

  Tags:   

• 8:57

  #0daytoday #Suricata &lt; 4.0.4 - IDS Detection Bypass Vulnerability [dos #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Suricata &lt; 4.0.4 - IDS Detection Bypass Vulnerability [dos #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 3:47

  #0daytoday #Papenmeier WiFi Baby Monitor Free &amp; Lite &lt; 2.02.2 - Remote Audio [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Papenmeier WiFi Baby Monitor Free &amp; Lite &lt; 2.02.2 - Remote Audio [#0day #Exploit]

  Tags:   

• March 04, 2018
• 16:00

  [dos] Memcached 1.5.5 - 'Memcrashed' Insufficient Control Network Message Volume Denial of Service (1)

   » ‎ Exploit-DB
  Memcached 1.5.5 - 'Memcrashed' Insufficient Control Network Message Volume Denial of Service (1)

  Tags:   

• 14:27

  #0daytoday #NETGEAR Magic telnetd Enabler Exploit [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #NETGEAR Magic telnetd Enabler Exploit [remote #exploits #0day #Exploit]

  Tags:   

• 14:27

  #0daytoday #Samsung Display Solutions Application For Android Content Injection Vulnerability [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Samsung Display Solutions Application For Android Content Injection Vulnerability [#0day #Exploit]

  Tags:   

• 14:27

  #0daytoday #VideoLAN VLC Media Player 2.2.5 EphemeralCockroach Heap Overflow Exploit [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #VideoLAN VLC Media Player 2.2.5 EphemeralCockroach Heap Overflow Exploit [#0day #Exploit]

  Tags:   

• 14:27

  #0daytoday #Parallels Remote Application Server 15.5 Path Traversal Vulnerability [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Parallels Remote Application Server 15.5 Path Traversal Vulnerability [#0day #Exploit]

  Tags:   

• 9:19

  TOR Virtual Network Tunneling Tool 0.3.2.10

   » ‎ Packet Storm Security Tools
  Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with built-in privacy features. It provides the foundation for a range of applications that allow organizations and individuals to share information over public networks without compromising their privacy. Individuals can use it to keep remote Websites from tracking them and their family members. They can also use it to connect to resources such as news sites or instant messaging services that are blocked by their local Internet service providers (ISPs).

  Tags:   

• March 03, 2018
• 14:24

  #0daytoday #OTRS Authenticated Command Injection Exploit CVE-2018-7567 [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #OTRS Authenticated Command Injection Exploit CVE-2018-7567 [remote #exploits #0day #Exploit]

  Tags:   

• 11:55

  #0daytoday #Apple OS X 10.10.5 - rootsh Local Privilege Escalation Exploit [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Apple OS X 10.10.5 - rootsh Local Privilege Escalation Exploit [remote #exploits #0day #Exploit]

  Tags:   

• 11:54

  #0daytoday #Apple macOS HighSierra 10.13 - ctl_ctloutput-leak Information Leak Exploit [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Apple macOS HighSierra 10.13 - ctl_ctloutput-leak Information Leak Exploit [#0day #Exploit]

  Tags:   

• 11:54

  #0daytoday #Apple macOS Sierra 10.12.1 - physmem Local Privilege Escalation Exploit [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Apple macOS Sierra 10.12.1 - physmem Local Privilege Escalation Exploit [#0day #Exploit]

  Tags:   

• 11:39

  #0daytoday #Apple macOS Sierra 10.12.1 - IOFireWireFamily FireWire Port Denial of Service Exploit [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Apple macOS Sierra 10.12.1 - IOFireWireFamily FireWire Port Denial of Service Exploit [#0day #Exploit]

  Tags:   

• 11:39

  #0daytoday #Apple macOS Sierra 10.12.3 - IOFireWireFamily-null-deref FireWire Port Denial of Servic [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Apple macOS Sierra 10.12.3 - IOFireWireFamily-null-deref FireWire Port Denial of Servic [#0day #Exploit]

  Tags:   

• 11:39

  #0daytoday #Apple OS X Yosemite - flow_divert-heap-overflow Kernel Panic Exploit [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Apple OS X Yosemite - flow_divert-heap-overflow Kernel Panic Exploit [#0day #Exploit]

  Tags:   

• 11:10

  #0daytoday #Sony Playstation 4 (PS4) - WebKit setAttributeNodeNS User After Free Vulnerability [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Sony Playstation 4 (PS4) - WebKit setAttributeNodeNS User After Free Vulnerability [#0day #Exploit]

  Tags:   

• 11:10

  #0daytoday #Sony Playstation 4 (PS4) - NamedObj Kernel Exploit Overview Vulnerability [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Sony Playstation 4 (PS4) - NamedObj Kernel Exploit Overview Vulnerability [#0day #Exploit]

  Tags:   

• 11:10

  #0daytoday #Sony Playstation 4 (PS4) - 4.0x WebKit Exploit Writeup Vulnerability [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Sony Playstation 4 (PS4) - 4.0x WebKit Exploit Writeup Vulnerability [#0day #Exploit]

  Tags:   

• 11:10

  #0daytoday #Sony Playstation 4 (PS4) - NamedObj 4.05 Kernel Exploit Writeup Vulnerability [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Sony Playstation 4 (PS4) - NamedObj 4.05 Kernel Exploit Writeup Vulnerability [#0day #Exploit]

  Tags:   

• 7:49

  XSStrike – Advanced XSS Fuzzer & Exploitation Suite

   » ‎ Darknet
  

  XSStrike is an advanced XSS detection suite, which contains a powerful XSS fuzzer and provides zero false positive results using fuzzy matching. XSStrike is the first XSS scanner to generate its own payloads.

  It is also built in an intelligent enough manner to detect and break out of various contexts.

  Features of XSStrike XSS Fuzzer & Hacking Tool

  XSStrike has:

  • Powerful fuzzing engine
  • Context breaking technology
  • Intelligent payload generation
  • GET & POST method support
  • Cookie Support
  • WAF Fingerprinting
  • Handcrafted payloads for filter and WAF evasion
  • Hidden parameter discovery
  • Accurate results via levenshtein distance algorithm

  There are various other XSS security related tools you can check out like:

  – XSSYA v2.0 Released – XSS Vulnerability Confirmation Tool
  – xssless – An Automated XSS Payload Generator Written In Python
  – XSSer v1.0 – Cross Site Scripter Framework

  You can download XSStrike here:

  XSStrike-master.zip

  Or read more here.

  Read the rest of XSStrike – Advanced XSS Fuzzer & Exploitation Suite now! Only available at Darknet.

  Tags:  hacking Tools  

• March 02, 2018
• 12:24

  #0daytoday #WordPress Polls 1.2.4 Plugin - SQL Injection (PoC) Exploit [webapps #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #WordPress Polls 1.2.4 Plugin - SQL Injection (PoC) Exploit [webapps #exploits #0day #Exploit]

  Tags:   

• 12:24

  #0daytoday #Posnic Stock Management System - SQL Injection Exploit [webapps #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Posnic Stock Management System - SQL Injection Exploit [webapps #exploits #0day #Exploit]

  Tags:   

• 12:24

  #0daytoday #Joomla 3.7 - SQL Injection Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Joomla 3.7 - SQL Injection Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 12:04

  #0daytoday #TestLink Open Source Test Management &lt; 1.9.16 - Remote Code Execution Vulner [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #TestLink Open Source Test Management &lt; 1.9.16 - Remote Code Execution Vulner [#0day #Exploit]

  Tags:   

• 12:04

  #0daytoday #uWSGI &lt; 2.0.17 - Directory Traversal Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #uWSGI &lt; 2.0.17 - Directory Traversal Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 12:04

  #0daytoday #DualDesk 20 - Proxy.exe Denial of Service Vulnerability CVE-2018-7583 [dos #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #DualDesk 20 - Proxy.exe Denial of Service Vulnerability CVE-2018-7583 [dos #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 5:14

  #0daytoday #Linux Kernel _sctp_make_chunk() Denial Of Service Vulnerability [dos #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Linux Kernel _sctp_make_chunk() Denial Of Service Vulnerability [dos #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 5:01

  #0daytoday #IrfanView 4.44 Email Plugin - Buffer Overflow (SEH) Exploit [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #IrfanView 4.44 Email Plugin - Buffer Overflow (SEH) Exploit [remote #exploits #0day #Exploit]

  Tags:   

• 5:01

  #0daytoday #IrfanView 4.50 Email Plugin - Buffer Overflow (SEH Unicode) Exploit [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #IrfanView 4.50 Email Plugin - Buffer Overflow (SEH Unicode) Exploit [remote #exploits #0day #Exploit]

  Tags:   

• 5:01

  #0daytoday #SEGGER embOS/IP FTP Server 3.22 - Denial of Service Vulnerability [dos #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #SEGGER embOS/IP FTP Server 3.22 - Denial of Service Vulnerability [dos #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 5:01

  #0daytoday #D-Link DIR-600M Wireless - Cross-Site Scripting Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #D-Link DIR-600M Wireless - Cross-Site Scripting Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

  Tags:   

• March 01, 2018
• 15:44

  Clam AntiVirus Toolkit 0.99.4

   » ‎ Packet Storm Security Tools
  Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a commandline scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use in your own software.

  Tags:   

• 3:48

  #0daytoday #Linux Kernel - BadIRET Local Privilege Escalation Exploit [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Linux Kernel - BadIRET Local Privilege Escalation Exploit [remote #exploits #0day #Exploit]

  Tags:   

• 3:48

  #0daytoday #FreeBSD Kernel (FreeBSD 10.2 &lt; 10.3 x64) - SETFKEY (PoC) Exploit [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #FreeBSD Kernel (FreeBSD 10.2 &lt; 10.3 x64) - SETFKEY (PoC) Exploit [#0day #Exploit]

  Tags:   

• 3:48

  #0daytoday #FreeBSD Kernel (FreeBSD 10.2 x64) - sendmsg Kernel Heap Overflow (PoC) Exploit [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #FreeBSD Kernel (FreeBSD 10.2 x64) - sendmsg Kernel Heap Overflow (PoC) Exploit [#0day #Exploit]

  Tags:   

• 3:36

  #0daytoday #Sony Playstation 4 (PS4) 1.76 - dlclose Linux Loader Exploit [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Sony Playstation 4 (PS4) 1.76 - dlclose Linux Loader Exploit [remote #exploits #0day #Exploit]

  Tags:   

• 3:36

  #0daytoday #WebKitGTK 2.1.2 (Ubuntu 14.04) - Heap based Buffer Overflow Exploit [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #WebKitGTK 2.1.2 (Ubuntu 14.04) - Heap based Buffer Overflow Exploit [remote #exploits #0day #Exploit]

  Tags:   

• 3:36

  #0daytoday #Nintendo Switch - WebKit Code Execution (PoC) Exploit CVE-2016-4657 [dos #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Nintendo Switch - WebKit Code Execution (PoC) Exploit CVE-2016-4657 [dos #exploits #0day #Exploit]

  Tags:   

• February 28, 2018
• 17:04

  Stegano 0.8.4

   » ‎ Packet Storm Security Tools
  Stegano is a basic Python Steganography module. Stegano implements two methods of hiding: using the red portion of a pixel to hide ASCII messages, and using the Least Significant Bit (LSB) technique. It is possible to use a more advanced LSB method based on integers sets. The sets (Sieve of Eratosthenes, Fermat, Carmichael numbers, etc.) are used to select the pixels used to hide the information.

  Tags:   

• 16:00

  [local] Microsoft Windows Kernel (Windows 7 x86) - Local Privilege Escalation (MS16-039)

   » ‎ Exploit-DB
  Microsoft Windows Kernel (Windows 7 x86) - Local Privilege Escalation (MS16-039)

  Tags:   

• 11:29

  #0daytoday #ActivePDF Toolkit &lt; 8.1.0.19023 - Multiple Memory Corruptions Exploit [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #ActivePDF Toolkit &lt; 8.1.0.19023 - Multiple Memory Corruptions Exploit [#0day #Exploit]

  Tags:   

• 11:29

  #0daytoday #Apple iOS 11.2.5 / watchOS 4.2.2 / tvOS 11.2.5 - bluetoothd Memory Corruption Exploit [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Apple iOS 11.2.5 / watchOS 4.2.2 / tvOS 11.2.5 - bluetoothd Memory Corruption Exploit [#0day #Exploit]

  Tags:   

• 11:29

  #0daytoday #AxxonSoft Axxon Next Directory Traversal Vulnerability CVE-2018-7467 [remote #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #AxxonSoft Axxon Next Directory Traversal Vulnerability CVE-2018-7467 [remote #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 11:29

  #0daytoday #ClipBucket SQL Injection / Command Injection / File Upload Vulnerabilities [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #ClipBucket SQL Injection / Command Injection / File Upload Vulnerabilities [#0day #Exploit]

  Tags:   

• 11:28

  #0daytoday #TestLink Open Source Test Management Insecure Direct Object Reference Vulnerability [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #TestLink Open Source Test Management Insecure Direct Object Reference Vulnerability [#0day #Exploit]

  Tags:   

• 11:20

  #0daytoday #Routers2 2.24 - Cross-Site Scripting Vulnerability CVE-2018-6193 [webapps #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Routers2 2.24 - Cross-Site Scripting Vulnerability CVE-2018-6193 [webapps #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 8:46

  Bitdefender Releases FREE GandCrab Ransomware Decryption Tool

   » ‎ Darknet
  

  The latest ransomware kicking everyone’s ass is Gandcrab which has infected an estimated 50,000 computers, fortunately for the victims, Bitdefender has released a free Gandcrab ransomware decryption tool as a part of the No More Ransom Project.

  There’s nothing particularly notable about the ransomware itself other than it combines two existing exploit kits to compromise people and it takes payment in Dash, which is a privacy coin, rather than Bitcoin (which is a first as far as I know).

  Read the rest of Bitdefender Releases FREE GandCrab Ransomware Decryption Tool now! Only available at Darknet.

  Tags:  Countermeasures  

• 6:38

  44CON 2018 - 12th-14th September, London (UK)

   » ‎ Penetration Testing

  Posted by Steve on Feb 28

  44CON 2018 is the UK's best annual Security Conference and Training event. The conference spans 2.5 days with training
  on the 10th and 11th of September, a free evening event on the 12th of September, and a full two-day conference on the
  13th and 14th of September. The event takes place at the ILEC Conference Centre near Earls Court, London. 44CON 2018
  includes catering, private bus bar and Gin O'Clock breaks. Early Bird discounted...
  

  Tags:   

• 2:03

  #0daytoday #Sony Playstation 4 (PS4) 4.55 - Jailbreak (WebKit 5.01 / bpf Kernel Loader 4.55) Exploi [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Sony Playstation 4 (PS4) 4.55 - Jailbreak (WebKit 5.01 / bpf Kernel Loader 4.55) Exploi [#0day #Exploit]

  Tags:   

• 2:03

  #0daytoday #Sony Playstation 4 (PS4) 5.01 - WebKit (PoC) Exploit [dos #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Sony Playstation 4 (PS4) 5.01 - WebKit (PoC) Exploit [dos #exploits #0day #Exploit]

  Tags:   

• 2:03

  #0daytoday #Concrete5 &lt; 8.3.0 - Username / Comments Enumeration Exploit [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Concrete5 &lt; 8.3.0 - Username / Comments Enumeration Exploit [#0day #Exploit]

  Tags:   

• 2:03

  #0daytoday #School Management Script 3.0.4 - Authentication Bypass Vulnerability [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #School Management Script 3.0.4 - Authentication Bypass Vulnerability [#0day #Exploit]

  Tags:   

• February 27, 2018
• 12:05

  #0daytoday #Microsoft Windows 8.1/2012 R2 - SMB Denial of Service Exploit [dos #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Microsoft Windows 8.1/2012 R2 - SMB Denial of Service Exploit [dos #exploits #0day #Exploit]

  Tags:   

• 12:05

  #0daytoday #Joomla K2 2.8.0 Component - Arbitrary File Download Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Joomla K2 2.8.0 Component - Arbitrary File Download Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 12:05

  #0daytoday #Schools Alert Management Script 2.0.2 - Authentication Bypass Vulnerability [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Schools Alert Management Script 2.0.2 - Authentication Bypass Vulnerability [#0day #Exploit]

  Tags:   

• 12:05

  #0daytoday #MyBB My Arcade Plugin 1.3 - Cross-Site Scripting Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #MyBB My Arcade Plugin 1.3 - Cross-Site Scripting Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 11:58

  #0daytoday #GetGo Download Manager 5.3.0.2712 - Buffer Overflow (SEH) Exploit [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #GetGo Download Manager 5.3.0.2712 - Buffer Overflow (SEH) Exploit [remote #exploits #0day #Exploit]

  Tags:   

• 9:53

  #0daytoday #Sony Playstation 4 (PS4) 4.55 - bpf Local Kernel (PoC) Exploit [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Sony Playstation 4 (PS4) 4.55 - bpf Local Kernel (PoC) Exploit [remote #exploits #0day #Exploit]

  Tags:   

• 2:48

  #0daytoday #Chrome V8 TranslatedState::MaterializeCapturedObjectAt Caching Bug Exploit [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Chrome V8 TranslatedState::MaterializeCapturedObjectAt Caching Bug Exploit [#0day #Exploit]

  Tags:   

• 2:48

  #0daytoday #Chrome V8 PropertyArray Integer Overflow Exploit [dos #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Chrome V8 PropertyArray Integer Overflow Exploit [dos #exploits #0day #Exploit]

  Tags:   

• 2:37

  #0daytoday #Asterisk 15.2.0 chan_pjsip SUBSCRIBE Stack Corruption Exploit [dos #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Asterisk 15.2.0 chan_pjsip SUBSCRIBE Stack Corruption Exploit [dos #exploits #0day #Exploit]

  Tags:   

• February 26, 2018
• 12:53

  Quickjack – Advanced Clickjacking & Frame Slicing Attack Tool

   » ‎ Darknet
  

  Quickjack is an intuitive, point-and-click tool for performing advanced and covert clickjacking and frame slicing attacks. It also allows you to easily perform clickjacking, or steal “clicks” from users on many websites, forcing the user to unknowingly click buttons or links (for example the Facebook Like button) using their own cookies.

  Quickjack By placing the auto-generated code on any site, you can obtain thousands of clicks quickly from different users, or perform targeted attacks by luring a victim to a specific URL.

  Read the rest of Quickjack – Advanced Clickjacking & Frame Slicing Attack Tool now! Only available at Darknet.

  Tags:  hacking Tools  

• 8:45

  Stegano 0.8.3

   » ‎ Packet Storm Security Tools
  Stegano is a basic Python Steganography module. Stegano implements two methods of hiding: using the red portion of a pixel to hide ASCII messages, and using the Least Significant Bit (LSB) technique. It is possible to use a more advanced LSB method based on integers sets. The sets (Sieve of Eratosthenes, Fermat, Carmichael numbers, etc.) are used to select the pixels used to hide the information.

  Tags:   

• 8:42

  Wireshark Analyzer 2.4.5

   » ‎ Packet Storm Security Tools
  Wireshark is a GTK+-based network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and Win32 and to give Wireshark features that are missing from closed-source sniffers.

  Tags:   

• February 25, 2018
• 9:40

  Search engine of leaks

   » ‎ Full Disclosure

  Posted by Gustavo Sánchez on Feb 25

  I started working with a leaks search engine and although it has some other
  bug, it is very complete.
  
  This search engine works with such sources that it analyzes from:
  1) - Github
  2) - Pastebin
  3) -Robtex
  4) - Shodan
  5) - Censys
  6) - Email Sherlock
  7) - Threatcrowd
  8) Alienvault
  9) - Netcraft
  10) -Shodan
  11) - Threatminer.
  12) - public ftps repos search engine: filemare
  13) - Archive.is: A search engine like waybackmachine but graphic xD....
  

  Tags:   

• 9:39

  Re: [CVE-2018-1000088] Stored XSS vulnerability in Doorkeeper gem v2.1.0 - v4.2.5

   » ‎ Full Disclosure

  Posted by Justin Bull on Feb 25

  Apologies. This fails to account for a non-trivial scenario.
  
  Any software using Doorkeeper that has generated its own custom views[0]
  requires manual work to verify there's no explicit HTML in the
  `client_name` and `native_redirect_uri` field values.
  
  This has been updated in the bulletin's Fix section[1].
  
  [0]: https://github.com/doorkeeper-gem/doorkeeper/wiki/Customizing-views
  [1]:...
  

  Tags:   

• 9:39

  [CVE-2018-1000088] Stored XSS vulnerability in Doorkeeper gem v2.1.0 - v4.2.5

   » ‎ Full Disclosure

  Posted by Justin Bull on Feb 25

  Hey everyone,
  
  A security bulletin for you.
  
  Software:
  ---------
  Doorkeeper (https://github.com/doorkeeper-gem/doorkeeper)
  
  Description:
  ------------
  Doorkeeper is an OAuth 2 provider for Rails written in Ruby.
  
  Affected Versions:
  ------------------
  2.1.0 - 4.2.5
  
  Fixed Versions:
  ---------------
  4.2.6 or later
  
  Problem:
  --------
  Stored XSS on the OAuth Client's name will cause users being prompted
  for consent via the "implicit"...
  

  Tags:   

• 9:38

  Re: Defense in depth -- the Microsoft way (part 51): Skype's home-grown updater allows escalation of privilege to SYSTEM

   » ‎ Full Disclosure

  Posted by Kevin Beaumont on Feb 25

  I did a fresh install of Win7 Home yesterday and can confirm impacted Skype
  version was offered by Windows Update for install.
  
  Kev
  

  Tags:   

• 9:37

  BSides Denver 2018 CFP is open

   » ‎ Full Disclosure

  Posted by Jeff Pettorino on Feb 25

  Greetings!
  
  Security BSides in the mile high city, Denver CO, is accepting
  submissions for speakers and presentations for our 2018 event. Our CFP
  submission form is online at:
  https://goo.gl/forms/ZEIlX9qkZDUAYGuw1
  
  We look forward to your submissions and hope you can participate in
  our community event!
  
  www.BSidesDen.org
  
  - Jeff Pettorino
  

  Tags:   

• 9:02

  DefenseCode Security Advisory: PureVPN Windows Privilege Escalation Vulnerability

   » ‎ Full Disclosure

  Posted by Defense Code on Feb 25

  DefenseCode Security Advisory
  PureVPN Windows Privilege Escalation Vulnerability
  
  Advisory ID: DC-2018-02-001
  Advisory Title: PureVPN Windows Privilege Escalation Vulnerability
  Advisory URL: http://www.defensecode.com/advisories.php
  Software: PureVPN
  Version: 5.19.4.0 and below (Windows Build Version: 6)
  Vendor Status: Vendor contacted, vulnerability fixed
  Release Date: 21/02/2018
  Risk: MEDIUM
  
  1. General Overview...
  

  Tags:   

• February 24, 2018
• 19:02

  TestSSL 2.9.5-2

   » ‎ Packet Storm Security Tools
  testssl.sh is a free command line tool which checks a server's service on any port for the support of TLS/SSL ciphers, protocols as well as recent cryptographic flaws, and much more. It is written in (pure) bash, makes only use of standard Unix utilities, openssl and last but not least bash sockets.

  Tags:   

• February 23, 2018
• 16:00

  [papers] From APK to Golden Ticket

   » ‎ Exploit-DB
  From APK to Golden Ticket

  Tags:   

• 12:46

  #0daytoday #AsusWRT LAN Unauthenticated Remote Code Execution Exploit [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #AsusWRT LAN Unauthenticated Remote Code Execution Exploit [remote #exploits #0day #Exploit]

  Tags:   

• 12:45

  #0daytoday #Disk Savvy Enterprise 10.4.18 Buffer Ovreflow Exploit [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Disk Savvy Enterprise 10.4.18 Buffer Ovreflow Exploit [remote #exploits #0day #Exploit]

  Tags:   

• 9:54

  Disk Savvy Enterprise 10.4.18 Buffer Ovreflow

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a stack-based buffer overflow vulnerability in Disk Savvy Enterprise version 10.4.18, caused by improper bounds checking of the request sent to the built-in server. This Metasploit module has been tested successfully on Windows 7 SP1 x86.

  Tags:   

• 9:52

  CloudMe Sync 1.10.9 Buffer Overflow

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a stack-based buffer overflow vulnerability in the CloudMe Sync version 1.10.9 client application. This Metasploit module has been tested successfully on Windows 7 SP1 x86.

  Tags:   

• 9:52

  AsusWRT LAN Unauthenticated Remote Code Execution

   » ‎ Packet Storm Security Exploits
  The HTTP server in AsusWRT has a flaw where it allows an unauthenticated client to perform a POST in certain cases. This can be combined with another vulnerability in the VPN configuration upload routine that sets NVRAM configuration variables directly from the POST request to enable a special command mode. This command mode can then be abused by sending a UDP packet to infosvr, which is running on port UDP 9999 to directly execute commands as root. This exploit leverages that to start telnetd in a random port, and then connects to it. It has been tested with the RT-AC68U running AsusWRT Version 3.0.0.4.380.7743.

  Tags:   

• 9:50

  GNU Privacy Guard 2.2.5

   » ‎ Packet Storm Security Tools
  GnuPG (the GNU Privacy Guard or GPG) is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440. As such, it is meant to be compatible with PGP from NAI, Inc. Because it does not use any patented algorithms, it can be used without any restrictions.

  Tags:   

• 9:48

  Mandos Encrypted File System Unattended Reboot Utility 1.7.19

   » ‎ Packet Storm Security Tools
  The Mandos system allows computers to have encrypted root file systems and at the same time be capable of remote or unattended reboots. The computers run a small client program in the initial RAM disk environment which will communicate with a server over a network. All network communication is encrypted using TLS. The clients are identified by the server using an OpenPGP key that is unique to each client. The server sends the clients an encrypted password. The encrypted password is decrypted by the clients using the same OpenPGP key, and the password is then used to unlock the root file system.

  Tags:   

• 9:44

  Asterisk Project Security Advisory - AST-2018-006

   » ‎ Packet Storm Security Advisories
  Asterisk Project Security Advisory - When reading a websocket, the length was not being checked. If a payload of length 0 was read, it would result in a busy loop that waited for the underlying connection to close.

  Tags:   

• 9:43

  Kernel Live Patch Security Notice LSN-0035-1

   » ‎ Packet Storm Security Advisories
  On February 22, fixes for CVE-2017-5715 were released into the Ubuntu Xenial kernel version 4.4.0-116.140. This CVE, also known as "Spectre," is caused by flaws in the design of speculative execution hardware in the computer's CPU, and could be used to access sensitive information in kernel memory.

  Tags:   

• 9:41

  Groupon Clone Script 3.0.2 Cross Site Scripting

   » ‎ Packet Storm Security Exploits
  Groupon Clone Script version 3.0.2 suffers from a persistent cross site scripting vulnerability.

  Tags:   

• 9:40

  Alibaba Clone Script 1.0.2 Cross Site Scripting

   » ‎ Packet Storm Security Exploits
  Alibaba Clone Script version 1.0.2 suffers from a persistent cross site scripting vulnerability.

  Tags:   

• 9:39

  Learning And Examination Management System Script 2.3.1 XSS

   » ‎ Packet Storm Security Exploits
  Learning and Examination Management System Script version 2.3.1 suffers from a persistent cross site scripting vulnerability.

  Tags:   

• 9:38

  Joomla! OS Property Real Estate 3.12.7 SQL Injection

   » ‎ Packet Storm Security Exploits
  Joomla! OS Property Real Estate component version 3.12.7 suffers from a remote SQL injection vulnerability.

  Tags:   

• 9:37

  Joomla! Proclaim 9.1.1 Shell Upload

   » ‎ Packet Storm Security Exploits
  Joomla! Proclaim component version 9.1.1 suffers from a remote shell upload vulnerability.

  Tags:   

• 9:37

  Joomla! CheckList 1.1.1 SQL Injection

   » ‎ Packet Storm Security Exploits
  Joomla! CheckList component version 1.1.1 suffers from a remote SQL injection vulnerability.

  Tags:   

• 9:36

  Joomla! Alexandria Book Library 3.1.2 SQL Injection

   » ‎ Packet Storm Security Exploits
  Joomla! Alexandria Book Library component version 3.1.2 suffers from a remote SQL injection vulnerability.

  Tags:   

• 9:32

  Joomla! Ek Rishta 2.9 SQL Injection

   » ‎ Packet Storm Security Exploits
  Joomla! Ek Rishta component version 2.9 suffers from a remote SQL injection vulnerability.

  Tags:   

• 9:32

  Joomla! PrayerCenter 3.0.2 SQL Injection

   » ‎ Packet Storm Security Exploits
  Joomla! PrayerCenter component version 3.0.2 suffers from a remote SQL injection vulnerability.

  Tags:   

• 9:31

  Joomla! Proclaim 9.1.1 Backup Disclosure

   » ‎ Packet Storm Security Exploits
  Joomla! Proclaim component version 9.1.1 suffers from a backup disclosure vulnerability.

  Tags:   

• 9:30

  Joomla! CW Tags 2.0.6 SQL Injection

   » ‎ Packet Storm Security Exploits
  Joomla! CW Tags component version 2.0.6 suffers from a remote SQL injection vulnerability.

  Tags:   

• 9:20

  NoMachine nxfuse Privilege Escalation

   » ‎ Packet Storm Security Exploits
  NoMachine versions prior to 6.0.80 (x64) suffer from an nxfuse privilege escalation vulnerability.

  Tags:   

• 9:19

  Armadito Antivirus 0.12.7.2 Detection Bypass

   » ‎ Packet Storm Security Exploits
  Armadito Antivirus version 0.12.7.2 suffers from a detection bypass vulnerability.

  Tags:   

• 9:18

  Disk Pulse Enterprise 10.4.18 Buffer Overflow

   » ‎ Packet Storm Security Exploits
  Disk Pulse Enterprise version 10.4.18 suffers from an import command buffer overflow vulnerability.

  Tags:   

• 9:17

  Disk Savvy Enterprise 10.4.18 Buffer Overflow

   » ‎ Packet Storm Security Exploits
  Disk Savvy Enterprise version 10.4.18 suffers from a buffer overflow vulnerability.

  Tags:   

• 9:16

  Wavpack 5.1.0 Denial Of Service

   » ‎ Packet Storm Security Exploits
  Wavpack version 5.1.0 suffers from a denial of service vulnerability.

  Tags:   

• 8:31

  Asterisk Project Security Advisory - AST-2018-005

   » ‎ Packet Storm Security Advisories
  Asterisk Project Security Advisory - A crash occurs when a number of authenticated INVITE messages are sent over TCP or TLS and then the connection is suddenly closed. This issue leads to a segmentation fault.

  Tags:   

• 8:30

  Asterisk Project Security Advisory - AST-2018-004

   » ‎ Packet Storm Security Advisories
  Asterisk Project Security Advisory - When processing a SUBSCRIBE request the res_pjsip_pubsub module stores the accepted formats present in the Accept headers of the request. This code did not limit the number of headers it processed despite having a fixed limit of 32. If more than 32 Accept headers were present the code would write outside of its memory and cause a crash.

  Tags:   

• 8:29

  Asterisk Project Security Advisory - AST-2018-003

   » ‎ Packet Storm Security Advisories
  Asterisk Project Security Advisory - By crafting an SDP message body with an invalid fmtp attribute Asterisk crashes when using the pjsip channel driver because pjproject's fmtp retrieval function fails to check if fmtp value is empty (set empty if previously parsed as invalid). The severity of this vulnerability is lessened since an endpoint must be authenticated prior to reaching the crash point, or it's configured with no authentication.

  Tags:   

• 8:10

  Ubuntu Security Notice USN-3583-2

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 3583-2 - USN-3583-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 ESM. It was discovered that an out-of-bounds write vulnerability existed in the Flash-Friendly File System in the Linux kernel. An attacker could construct a malicious file system that, when mounted, could cause a denial of service or possibly execute arbitrary code. Various other issues were also addressed.

  Tags:   

• 8:10

  Ubuntu Security Notice USN-3583-1

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 3583-1 - It was discovered that an out-of-bounds write vulnerability existed in the Flash-Friendly File System in the Linux kernel. An attacker could construct a malicious file system that, when mounted, could cause a denial of service or possibly execute arbitrary code. It was discovered that a race condition leading to a use-after-free vulnerability existed in the ALSA PCM subsystem of the Linux kernel. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. Various other issues were also addressed.

  Tags:   

• 8:09

  Ubuntu Security Notice USN-3581-3

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 3581-3 - Mohamed Ghannam discovered that the IPv4 raw socket implementation in the Linux kernel contained a race condition leading to uninitialized pointer usage. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. ChunYu Wang discovered that a use-after-free vulnerability existed in the SCTP protocol implementation in the Linux kernel. A local attacker could use this to cause a denial of service or possibly execute arbitrary code, Various other issues were also addressed.

  Tags:   

• 8:09

  Debian Security Advisory 4122-1

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 4122-1 - Several vulnerabilities have been discovered in Squid3, a fully featured web proxy cache.

  Tags:   

• 7:16

  Military, FBI, And ICE Are Customers Of Controversial Stalkerware

   » ‎ Packet Storm Security Headlines
  Military, FBI, And ICE Are Customers Of Controversial Stalkerware

  Tags:   

• 7:16

  Drupal Patches Critical CMS Vulnerabilities

   » ‎ Packet Storm Security Headlines
  Drupal Patches Critical CMS Vulnerabilities

  Tags:   

• 7:16

  OpenBSD Releases Meltdown Patch

   » ‎ Packet Storm Security Headlines
  OpenBSD Releases Meltdown Patch

  Tags:   

• 7:16

  uTorrent Users Urged To Upgrade To Mitigate Hijacking Flaw

   » ‎ Packet Storm Security Headlines
  uTorrent Users Urged To Upgrade To Mitigate Hijacking Flaw

  Tags:   

• 7:16

  Mr. Robot Remains Only Show Delivering Cantennas And Card Readers

   » ‎ Packet Storm Security Headlines
  Mr. Robot Remains Only Show Delivering Cantennas And Card Readers

  Tags:   

• 0:00

  Vuln: IBM Rational DOORS Web Access CVE-2017-1540 Cross Site Scripting Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  IBM Rational DOORS Web Access CVE-2017-1540 Cross Site Scripting Vulnerability

  Tags:   

• 0:00

  Vuln: Apple iOS/tvOS/macOS CVE-2017-7154 Local Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apple iOS/tvOS/macOS CVE-2017-7154 Local Security Bypass Vulnerability

  Tags:   

• February 22, 2018
• 21:57

  [SECURITY] [DSA 4122-1] squid3 security update

   » ‎ Bugtraq

  Posted by Salvatore Bonaccorso on Feb 22

  -------------------------------------------------------------------------
  Debian Security Advisory DSA-4122-1 security () debian org
  https://www.debian.org/security/ Salvatore Bonaccorso
  February 23, 2018 https://www.debian.org/security/faq
  -------------------------------------------------------------------------
  
  Package : squid3
  CVE ID : CVE-2018-1000024 CVE-2018-1000027...
  

  Tags:   

• 21:55

  Re: [CVE-2018-1000088] Stored XSS vulnerability in Doorkeeper gem v2.1.0 - v4.2.5

   » ‎ Bugtraq

  Posted by Justin Bull on Feb 22

  Apologies. This fails to account for a non-trivial scenario.
  
  Any software using Doorkeeper that has generated its own custom
  views[0] requires manual work to verify there's no explicit HTML in
  the `client_name` and `native_redirect_uri` field values.
  
  This has been updated in the bulletin's Fix section[1].
  
  [0]: https://github.com/doorkeeper-gem/doorkeeper/wiki/Customizing-views
  [1]:...
  

  Tags:   

• 21:54

  [security bulletin] MFSBGN03798 rev.1 - Micro Focus Universal CMDB, Apache Struts Instance

   » ‎ Bugtraq

  Posted by cyber-psrt on Feb 22

  Note: the current version of the following document is available here:
  https://softwaresupport.hpe.com/document/-/facetsearch/document/KM03086019
  
  SUPPORT COMMUNICATION - SECURITY BULLETIN
  
  Document ID: KM03086019
  Version: 1
  
  MFSBGN03798 rev.1 - Micro Focus Universal CMDB, Apache Struts Instance
  
  NOTICE: The information in this Security Bulletin should be acted upon as
  soon as possible.
  
  Release Date: 2018-02-22
  Last Updated: 2018-02-22...
  

  Tags:   

• 21:45

  [SECURITY] [DSA 4120-1] linux security update

   » ‎ Bugtraq

  Posted by Yves-Alexis Perez on Feb 22

  -------------------------------------------------------------------------
  Debian Security Advisory DSA-4120-1 security () debian org
  https://www.debian.org/security/ Yves-Alexis Perez
  February 22, 2018 https://www.debian.org/security/faq
  -------------------------------------------------------------------------
  
  Package : linux
  CVE ID : CVE-2017-5715 CVE-2017-5754...
  

  Tags:   

• 7:08

  [SECURITY] [DSA 4121-1] gcc-6 security update

   » ‎ Bugtraq

  Posted by Moritz Muehlenhoff on Feb 22

  -------------------------------------------------------------------------
  Debian Security Advisory DSA-4121-1 security () debian org
  https://www.debian.org/security/ Moritz Muehlenhoff
  February 22, 2018 https://www.debian.org/security/faq
  -------------------------------------------------------------------------
  
  Package : gcc-6
  CVE ID : not applicable
  
  This update...
  

  Tags:   

• 4:24

  HP Security Bulletin MFSBGN03798 1

   » ‎ Packet Storm Security Advisories
  HP Security Bulletin MFSBGN03798 1 - A potential security vulnerability has been identified in Micro Focus Universal CMDB. The vulnerability could be remotely exploited to allow Arbitrary Code Execution. Revision 1 of this advisory.

  Tags:   

• 4:22

  Debian Security Advisory 4120-1

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 4120-1 - Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.

  Tags:   

• 2:22

  Ubuntu Security Notice USN-3578-1

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 3578-1 - It was discovered that WavPack incorrectly handled certain DSDIFF files. An attacker could possibly use this to execute arbitrary code or cause a denial of service. It was discovered that WavPack incorrectly handled certain CAF files. An attacker could possibly use this to cause a denial of service.

  Tags:   

• 2:19

  Debian Security Advisory 4121-1

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 4121-1 - This update doesn't fix a vulnerability in GCC itself, but instead provides support for building retpoline-enabled Linux kernel updates.

  Tags:   

• 2:18

  Ubuntu Security Notice USN-3582-2

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 3582-2 - USN-3582-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. Mohamed Ghannam discovered that the IPv4 raw socket implementation in the Linux kernel contained a race condition leading to uninitialized pointer usage. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. Various other issues were also addressed.

  Tags:   

• 2:13

  Ubuntu Security Notice USN-3582-1

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 3582-1 - Mohamed Ghannam discovered that the IPv4 raw socket implementation in the Linux kernel contained a race condition leading to uninitialized pointer usage. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. Laurent Guerby discovered that the mbcache feature in the ext2 and ext4 filesystems in the Linux kernel improperly handled xattr block caching. A local attacker could use this to cause a denial of service. Various other issues were also addressed.

  Tags:   

• 2:11

  Ubuntu Security Notice USN-3581-2

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 3581-2 - USN-3581-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.10. This update provides the corresponding updates for the Linux Hardware Enablement kernel from Ubuntu 17.10 for Ubuntu 16.04 LTS. Mohamed Ghannam discovered that the IPv4 raw socket implementation in the Linux kernel contained a race condition leading to uninitialized pointer usage. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. Various other issues were also addressed.

  Tags: