exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 16 of 16

Files Date: 2018-08-16

Microsoft Security Advisory Updates For August 15, 2018

Posted Aug 16, 2018

Site microsoft.com

This Microsoft advisory notification includes advisories released or updated on August 15, 2018.

tags | advisory

SHA-256 | e1891489b4be96b57239849387f7e211ffa391cfb65751b826050c7496f89e11

Download | Favorite | View

Microsoft Security Bulletin CVE Revision Increment For August, 2018

Posted Aug 16, 2018

Site microsoft.com

This Microsoft bulletin summary holds CVE updates for CVE-2018-8202 and CVE-2018-8284.

tags | advisory

advisories | CVE-2018-8202, CVE-2018-8284

SHA-256 | be07de48f5737ecf4d07145dbf109296adb486ea3c1adb50f1a7aaaf02de9243

Download | Favorite | View

Red Hat Security Advisory 2018-2439-01

Posted Aug 16, 2018

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2018-2439-01 - MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Issues addressed include a silly amount of unspecified vulnerabilities.

tags | advisory, vulnerability

systems | linux, redhat

advisories | CVE-2017-10268, CVE-2017-10378, CVE-2017-10379, CVE-2017-10384, CVE-2017-3636, CVE-2017-3641, CVE-2017-3651, CVE-2017-3653, CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665, CVE-2018-2668, CVE-2018-2755, CVE-2018-2761, CVE-2018-2767, CVE-2018-2771, CVE-2018-2781, CVE-2018-2813, CVE-2018-2817, CVE-2018-2819

SHA-256 | 00a0671d1d65d2911e8f22b332fc5a477655aa5fcbe5f132cee38f207705b81e

Download | Favorite | View

Red Hat Security Advisory 2018-2462-01

Posted Aug 16, 2018

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2018-2462-01 - Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Issues addressed include a buffer overflow vulnerability.

tags | advisory, overflow, kernel

systems | linux, redhat

advisories | CVE-2018-11806, CVE-2018-7550

SHA-256 | d888f6c463bf4ebb8752fc93231cfe8f9188d40f7b96eb4a62e34c7bc02c8685

Download | Favorite | View

Red Hat Security Advisory 2018-2470-01

Posted Aug 16, 2018

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2018-2470-01 - Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector, JBoss HTTP Connector, Hibernate, and the Tomcat Native library. This release of Red Hat JBoss Web Server 3.1 Service Pack 4 serves as a replacement for Red Hat JBoss Web Server 3.1, and includes bug fixes. Issues addressed include insecure defaults.

tags | advisory, java, web

systems | linux, redhat

advisories | CVE-2018-8014, CVE-2018-8019, CVE-2018-8020

SHA-256 | 7c59532733c38f637d3997844cec73a4dbac335476a98bc66adf427a840b3d53

Download | Favorite | View

Central Management Software 1.4.13 Denial Of Service

Posted Aug 16, 2018

Authored by Gionathan Reale

Central Management Software version 1.4.13 suffers from a denial of service vulnerability.

tags | exploit, denial of service

SHA-256 | 51bd8b9a36bafc19f5dc04da553197a42e653a850c46f7795290ce38561afeb4

Download | Favorite | View

ObserverIP Scan Tool 1.4.0.1 Denial Of Service

Posted Aug 16, 2018

Authored by Gionathan Reale

ObserverIP Scan Tool version 1.4.0.1 denial of service proof of concept exploit.

tags | exploit, denial of service, proof of concept

SHA-256 | e92c93798e179fda9b6fa435c89feee7b28dae4654b13829a9fcf94e8c35ef79

Download | Favorite | View

Pimcore 5.2.3 CSRF / Cross Site Scripting / SQL Injection

Posted Aug 16, 2018

Authored by T. Silpavarangkura, N. Rai-Ngoen | Site sec-consult.com

Pimcore versions 5.2.3 and below suffer from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection, csrf

advisories | CVE-2018-14057, CVE-2018-14058, CVE-2018-14059

SHA-256 | aba5d313c5fdfdbdc045ef60b644c928c5b431384880c30e65d8e7dc0393c95b

Download | Favorite | View

Red Hat Security Advisory 2018-2402-01

Posted Aug 16, 2018

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2018-2402-01 - The RHV-M Virtual Appliance automates the process of installing and configuring the Red Hat Virtualization Manager. The appliance is available to download as an OVA file from the Customer Portal. Issues addressed include a denial of service vulnerability.

tags | advisory, denial of service

systems | linux, redhat

advisories | CVE-2018-3620, CVE-2018-3646, CVE-2018-5390

SHA-256 | 255c58742e78f56152ffc709f8738c8457c04a31f66a87e2cc5738d46dea2b1a

Download | Favorite | View

Red Hat Security Advisory 2018-2435-01

Posted Aug 16, 2018

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2018-2435-01 - The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update upgrades Flash Player to version 30.0.0.154. Issues addressed include bypass and information leakage vulnerabilities.

tags | advisory, web, vulnerability

systems | linux, redhat

advisories | CVE-2018-12824, CVE-2018-12825, CVE-2018-12826, CVE-2018-12827, CVE-2018-12828

SHA-256 | 5044b27ae451f9eae8e03ba312ca011d5ea7e5194a9ee06105a086f80ca1c509

Download | Favorite | View

Ubuntu Security Notice USN-3733-2

Posted Aug 16, 2018

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 3733-2 - USN-3733-1 fixed a vulnerability in GnuPG. This update provides the corresponding update for Ubuntu 12.04 ESM. Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal, and Yuval Yarom discovered that GnuPG is vulnerable to a cache side- channel attack. A local attacker could use this attack to recover RSA private keys. Various other issues were also addressed.

tags | advisory, local

systems | linux, ubuntu

advisories | CVE-2017-7526

SHA-256 | 817cfd19cf50cae7760c3417576d5726f44022f1b1c841a3e0a3e23a7fad11f8

Download | Favorite | View

WebkitGTK+ 2.20.3 ImageBufferCairo::getImageData() Buffer Overflow

Posted Aug 16, 2018

Authored by PeregrineX

WebkitGTK+ version 2.20.3 ImageBufferCairo::getImageData() buffer overflow proof of concept exploit.

tags | exploit, overflow, proof of concept

advisories | CVE-2018-12293

SHA-256 | c669f849911cb422bc27df76dde3df3109a5a561cedf811ec2f14604a0af2198

Download | Favorite | View

WordPress Export Users To CSV 1.1.1 CSV Injection

Posted Aug 16, 2018

Authored by Javier Olmedo

WordPress Export Users to CSV plugin version 1.1.1 suffers from a CSV injection vulnerability.

tags | exploit

SHA-256 | b300b31e2bd3c5ffcd8e03ac88eda85de9048362ed027cc29e08a93f254916ef

Download | Favorite | View

OpenEMR 5.0.1.3 File Read / Write / Delete

Posted Aug 16, 2018

Authored by Joshua Fam

OpenEMR version 5.0.1.3 suffers from arbitrary file read, write, and delete vulnerabilities.

tags | exploit, arbitrary, vulnerability

advisories | CVE-2018-15140, CVE-2018-15141, CVE-2018-15142

SHA-256 | e3013113e1a75a23ff07ff104eebc4f7e15d6667699b3fcf0f7297c2ed4ea905

Download | Favorite | View

OpenSSH 7.x Username Enumeration

Posted Aug 16, 2018

Authored by Matthew Daley

OpenSSH versions 2.3 up to 7.4 suffer from a username enumeration vulnerability.

tags | exploit

SHA-256 | 5b89ae3c3cfc697123f753a66e100e36a1f19ae7a11ab2e0b7081e0e195522af

Download | Favorite | View

Easy RM To MP3 Converter 2.6 Stack Buffer Overflow

Posted Aug 16, 2018

Authored by Mohammadali Mohammadi

Easy RM to MP3 Converter version 2.6 stack buffer overflow exploit for Windows 7.

tags | exploit, overflow

systems | windows

SHA-256 | 640e5c118d2687486902b39cdb4593aae91058ec637ac09ae2efb1cd2c648ddf

Download | Favorite | View