Packet Storm

about 500~20000

564

Everything goes well. Rich and Noble Ji

2

198.84.60.198

PacketStormexploitthepossibilitiesRegister|LoginFilesNewsUsersAuthorsHomeFilesNews&[SERVICES_TAB]AboutContactAddNewThousandsOfFortinetInstancesVulnerableToActivelyExploitedFlawLynxRansomwareAnalysesRevealSimilaritiesToINCRansomHackedRobotVacuumsAcrossTheU.S.StartedYellingSlursOpenAISaysIranianHackersUsedChatGPTToPlanICSAttacksRecentFilesAllExploitsAdvisoriesToolsWhitepapersOtherUbuntuSecurityNoticeUSN-7015-4PostedOct14,2024AuthoredbyUbuntu|Sitesecurity.ubuntu.comUbuntuSecurityNotice7015-4-USN-7015-1fixedseveralvulnerabilitiesinPython.ThisupdateprovidesthecorrespondingupdateforCVE-forpython2.7andpython3.5inUbuntu14.04LTS.ItwasdiscoveredthatthePythonemailmoduleincorrectlyparsedemailaddressesthatcontainspecialcharacters.Aremoteattackercouldpossiblyusethisissuetobypasscertainprotectionmechanisms.ItwasdiscoveredthatPythonallowedexcessivebacktrackingwhileparsingcertaintarfileheaders.AremoteattackercouldpossiblyusethisissuetocausePythontoconsumeresources,leadingtoadenialofservice.ItwasdiscoveredthatthePythonemailmoduleincorrectlyquotednewlinesforemailheaders.Aremoteattackercouldpossiblyusethisissuetoperformheaderinjection.ItwasdiscoveredthatthePythonmoduleincorrectlyhandledparsingcookiesthatcontainedbackslashesforquotedcharacters.AremoteattackercouldpossiblyusethisissuetocausePythontoconsumeresources,leadingtoadenialofservice.ItwasdiscoveredthatthePythonzipfilemoduleincorrectlyhandledcertainmalformedzipfiles.AremoteattackercouldpossiblyusethisissuetocausePythontostopresponding,resultinginadenialofservice.ts|advisory,remote,web,denialofservice,vulnerability,pythonsystems|linux,ubuntuDownload|Forite|ViewDebianSecurityAdvisory5791-1PostedOct14,2024AuthoredbyDebian|Sitedebian.orgDebianLinuxSecurityAdvisory5791-1-ElyasDamejdiscoveredthatasandboxmechanisminReportLab,aPythonlibrarytocreatePDFdocuments,couldbebypassedwhichmayresultintheexecutionofarbitrarycodewhenconvertingmalformedHTMLtoaPDFdocument.ts|advisory,arbitrary,pythonsystems|linux,debianDownload|Forite|ViewABBCylonAspect3.08.00yumSettings.phpCommandInjectionPostedOct14,2024AuthoredbyLiquidWorm|Sitezeroscience.mkABBCylonAspectversion3.08.00suffersfromanauthenticatedOScommandinjectionvulnerability.ThiscanbeexploitedtoinjectandexecutearbitraryshellcommandsthroughthePROXYHTTPPOSTparametercalledbytheyumSettings.phpscript.ts|exploit,web,arbitrary,shell,phpDownload|Forite|ViewUbuntuSecurityNoticeUSN-7066-1PostedOct14,2024AuthoredbyUbuntu|Sitesecurity.ubuntu.comUbuntuSecurityNotice7066-1-DamienSchaefferdiscoveredthatThunderbirddidnotproperlymanecertainmemoryoperationswhenprocessingcontentintheAnimationtimelines.Anattackercouldpotentiallyexploitthisissuetoachievearbitrarycodeexecution.ts|advisory,arbitrary,codeexecutionsystems|linux,ubuntuDownload|Forite|ViewDebianSecurityAdvisory5790-1PostedOct14,2024AuthoredbyDebian|Sitedebian.orgDebianLinuxSecurityAdvisory5790-1-ItwasdiscoveredthatDOMPurify,asanitizerforHTML,MathMLandSVGwassusceptibletonesting-basedmXSS.ts|advisorysystems|linux,debianDownload|Forite|ViewDebianSecurityAdvisory5789-1PostedOct14,202Packet Storm4AuthoredbyDebian|Sitedebian.orgDebianLinuxSecurityAdvisory5789-1-MultiplesecurityissueswerediscoveredinThunderbird,whichcouldresultintheexecutionofarbitrarycode.ts|advisory,arbitrarysystems|linux,debianDownload|Forite|ViewUbuntuSecurityNoticeUSN-7063-1PostedOct14,2024AuthoredbyUbuntu|Sitesecurity.ubuntu.comUbuntuSecurityNotice7063-1-MarcoTrevisandiscoveredthattheUbuntuAdvanteDesktopDaemonleakedtheProtokentounprivilegedusersbypassingthetokenasanargumentinplaintext.AnattackercouldusethisissuetogainunauthorizedaccesstoanUbuntuProsubscription.ts|advisorysystems|linux,ubuntuDownload|Forite|ViewVivoFibraAskeyRTF8225VWCommandExecutionPostedOct14,2024AuthoredbytakashiTheVivoFibraAskeyRTF8225VWmodemsuffersfromaninputvalidationvulnerabilitythatallowsforfullescalationtoafunctioningshellonceloggedinandusingtherestrictedaspshshell.ts|exploit,shellDownload|Forite|ViewUbuntuSecurityNoticeUSN-7065-1PostedOct14,2024AuthoredbyUbuntu|Sitesecurity.ubuntu.comUbuntuSecurityNotice7065-1-DamienSchaefferdiscoveredthatFirefoxdidnotproperlymanememoryinthecontentprocesswhenhandlingAnimationtimelines,leadingtoauseafterfreevulnerability.Anattackercouldpossiblyusethisissuetoachieveremotecodeexecution.ts|advisory,remote,codeexecutionsystems|linux,ubuntuDownload|Forite|ViewWordPressFileManerAdvancedShortcode2.3.2CodeInjectin/ShellUploadPostedOct14,2024AuthoredbyindoushkaWordPressFileManerAdvancedShortcodepluginversion2.3.2suffersfromacodeinjectionvulnerabilitythatallowsforremoteshellupload.ts|exploit,remote,shellDownload|Forite|ViewTOTOLINK9.xCommandInjectionPostedOct14,2024AuthoredbyindoushkaTOTOLINKversion9.xsuffersfromaremotecommandinjectionvulnerability.ts|exploit,remoteDownload|Forite|ViewMnusBilling7.xCommandInjectionPostedOct14,2024AuthoredbyindoushkaMnusBillingversion7.xsuffersfromaremotecommandinjectionvulnerability.ts|exploit,remoteDownload|Forite|ViewBookstoreManementSystem1.0SQLInjectionPostedOct14,2024AuthoredbyindoushkaBookstoreManementSystemversion1.0suffersfromaremoteSQLinjectionvulnerabilitythatallowsforauthenticationbypass.ts|exploit,remote,sqlinjection,bypassDownload|Forite|ViewPeelShopping2.xCrossSiteScripting/SQLInjectionPostedOct14,2024AuthoredbyEmilianoFebbiPeelShoppingversions2.xandbelow3.1sufferfromcrosssitescriptingandremoteSQLinjectionvulnerabilities.Thiswasalreadynoteddiscoveryin2012byCyber-Crystalbutthisdataprovidesmoredetails.ts|exploit,remote,vulnerability,xss,sqlinjectionDownload|Forite|ViewABBCylonAspect3.07.02user.propertiesDefaultCredentialsPostedOct11,2024AuthoredbyLiquidWorm|Sitezeroscience.mkABBCylonAspectversion3.07.02usesaweaksetofdefaultadministrativecredentialsthatcanbeguessedinremotepasswordattacksandusedtogainfullcontrolofthesystem.ts|exploit,remoteDownload|Forite|ViewABBCylonAspect3.08.00dialupSwitch.phpRemoteCodeExecutionPostedOct11,2024AuthoredbyLiquidWorm|Sitezeroscience.mkABBCylonAspectversion3.08.00suffersfromanauthenticatedOScommandinjectionvulnerability.ThiscanbeexploitedtoinjectandexecutearbitraryshellcommandsthroughtheMODEMHTTPPOSTparametercalledbythedialupSwitch.phpscript.ts|exploit,web,arbitrary,shell,phpDownload|Forite|ViewABBCylonAspect3.07.02sshUpdate.phpUnauthenticatedRemoteSSHServiceControlPostedOct11,2024AuthoredbyLiquidWorm|Sitezeroscience.mkABBCylonAspectversion3.07.02suffersfromavulnerabilitythatallowsanunauthenticatedattackertoenableordisabletheSSHdaemonbysendingaPOSTrequesttosshUpdate.phpwithasimpleJSONpayload.ThiscanbeexploitedtostarttheSSHserviceontheremotehostwithoutproperauthentication,potentiallyenablingunauthorizedaccessorstopanddenyserviceaccess.ts|exploit,remote,phpDownload|Forite|ViewDebianSecurityAdvisory5788-1PostedOct11,2024AuthoredbyDebian|Sitedebian.orgDebianLinuPacket StormxSecurityAdvisory5788-1-DamienSchaefferdiscoveredause-after-freeintheMozillaFirefoxwebbrowser,whichcouldresultintheexecutionofarbitrarycode.ts|advisory,web,arbitrarysystems|linux,debianDownload|Forite|ViewUbuntuSecurityNoticeUSN-7020-4PostedOct11,2024AuthoredbyUbuntu|Sitesecurity.ubuntu.comUbuntuSecurityNotice7020-4-SeveralsecurityissueswerediscoveredintheLinuxkernel.Anattackercouldpossiblyusethesetocompromisethesystem.ts|advisory,kernelsystems|linux,ubuntuDownload|Forite|ViewUbuntuSecurityNoticeUSN-7062-1PostedOct11,2024AuthoredbyUbuntu|Sitesecurity.ubuntu.comUbuntuSecurityNotice7062-1-ItwasdiscoveredthatlibgsfincorrectlyhandledcertainCompoundDocumentBinaryfiles.Ifauserorautomatedsystemweretrickedintoopeningaspeciallycraftedfile,aremoteattackercouldpossiblyusethisissuetoexecutearbitrarycode.ts|advisory,remote,arbitrarysystems|linux,ubuntuDownload|Forite|ViewRedHatSecurityAdvisory2024-7994-03PostedOct11,2024AuthoredbyRedHat|Siteaccess.redhat.comRedHatSecurityAdvisory2024-7994-03-RedHatAdvancedClusterManementforKubernetes2.11.3Generalailabilityreleaseimes,bugfixes,andupdatedcontainerimes.ts|advisorysystems|linux,redhatDownload|Forite|ViewTerraMasterTOS4.2.29CodeInjection/LocalFileInclusionPostedOct11,2024AuthoredbyindoushkaTerraMasterTOSversion4.2.29suffersfromaremotecodeinjectionvulnerabilityleveringalocalfileinclusionvulnerability.ts|exploit,remote,local,fileinclusionDownload|Forite|ViewRedHatSecurityAdvisory2024-7987-03PostedOct11,2024AuthoredbyRedHat|Siteaccess.redhat.comRedHatSecurityAdvisory2024-7987-03-AnupdateisnowailableforRedHatSatellite6.15forRHEL8.IssuesaddressedincludeHTTPrequestsmugglingandnullpointervulnerabilities.ts|advisory,web,vulnerabilitysystems|linux,redhatDownload|Forite|ViewSolarViewCompact6.00CodeInjectionPostedOct11,2024AuthoredbyindoushkaSolarViewCompactversion6.00suffersfromaPHPcodeinjectionvulnerability.ts|exploit,phpDownload|Forite|ViewOpenfire4.8.0CodeInjectionPostedOct11,2024AuthoredbyindoushkaOpenfireversion4.8.0suffersfromauthenticationbypassandcodeinjectionvulnerabilities.ts|exploit,vulnerabilityDownload|Forite|ViewViewOlderFiles→FollowusonTwitterFollowusonFacebookSubscribetoanRSSFeedRecentNewsRecentVeeamVulnerabilityExploitedInRansomwareAttacksPostedOct11,2024ts|headline,hacker,malware,cybercrime,flaw,cryptographyForite|ViewFidelityInvestmenPacket StormtsDataBreachImpacts77,000CustomersPostedOct11,2024ts|headline,hacker,privacy,bank,datalossForite|ViewShadowLogicAttackTargetsAIModelGraphsToCreateCodelessBackdoorsPostedOct11,2024ts|headline,hacker,flaw,backdoorForite|ViewMeetTheTeamPaidToBreakIntoTopSecretBasesPostedOct11,2024ts|headline,hacker,government,usa,cyberwar,militaryForite|ViewFBICreatedACryptocurrencySoItCouldWatchItBeingAbusedPostedOct11,2024ts|headline,government,usa,cybercrime,fraud,spyware,fbi,cryptographyForite|ViewUSCharges3Companies,15PeopleWithCryptocurrencyFraudPostedOct10,2024ts|headline,government,usa,fraud,fbi,cryptographyForite|ViewFirefox131UpdatePatchesExploitedZero-DayVulnerabilityPostedOct10,2024ts|headline,flaw,patch,mozilla,firefox,zerodayForite|ViewDoctorWebRefutesHackers39;ClaimOfUserDataTheftPostedOct10,2024ts|headline,hacker,privacy,datalossForite|ViewSiemensDevicePINSusceptibleToRemoteBruteForceInOlderModelPostedOct10,2024ts|headline,flawForite|ViewInternetArchiveLeaksUserInfoAndSuccumbsToDDoSPostedOct10,2024ts|headline,hacker,privacy,denialofservice,dataloss,passwordForite|ViewViewMoreNews→FileArchive:October2024<SuMoTuWeThFrSa1Oct1st39Files2Oct2nd23Files3Oct3rd18Files4Oct4th20Files5Oct5th0Files6Oct6th0Files7Oct7th17Files8Oct8th66Files9Oct9th25Files10Oct10th20Files11Oct11th21Files12Oct12th0Files13Oct13th0Files14Oct14th14Files15Oct15th0Files16Oct16th0Files17Oct17th0Files18Oct18th0Files19Oct19th0Files20Oct20th0Files21Oct21st0Files22Oct22nd0Files23Oct23rd0Files24Oct24th0Files25Oct25th0Files26Oct26th0Files27Oct27th0Files28Oct28th0Files29Oct29th0Files30Oct30th0Files31Oct31st0FilesTopAuthorsInLast30DaysRedHat250filesindoushka150filesUbuntu90filesGentoo32filesDebian24filesLiquidWorm15filesApple11filesmalvuln8filesGoogleSecurityResearch7filesverylazytech4filesFileTsActiveX(933)Advisory(87,165)Arbitrary(17,149)BBS(2,859)Bypass(1,934)CGI(1,049)CodeExecution(7,950)Conference(693)Cracker(845)CSRF(3,440)DoS(25,346)Encryption(2,396)Exploit(54,429)FileInclusion(4,279)FileUpload(1,027)Firewall(822)InfoDisclosure(2,930)IntrusionDetection(923)Ja(3,156)JaScript(910)Kernel(7,324)Local(14,874)Mazine(587)Overflow(13,235)Perl(1,435)PHP(5,315)ProofofConcept(2,417)Protocol(3,757)Python(1,668)Remote(31,956)Root(3,676)Rootkit(530)Ruby(644)Scanner(1,660)SecurityTool(8,060)Shell(3,319)Shellcode(1,219)Sniffer(905)Spoof(2,297)SQLInjection(16,743)TCP(2,463)Trojan(690)UDP(919)Virus(675)Vulnerability(33,168)Web(10,160)Whitepaper(3,785)x86(970)XSS(18,312)OtherFileArchivesOctober2024September2024August2024July2024June2024May2024April2024March2024February2024January2024December2023November2023OlderSystemsAIX(430)Apple(2,117)BSD(378)CentOS(61)Cisco(1,954)Debian(7,143)Fedora(1,693)FreeBSD(1,247)Gentoo(4,599)HPUX(881)iOS(391)iPhone(108)IRIX(220)Juniper(71)Linux(51,538)MacOSX(696)Mandriva(3,105)NetBSD(256)OpenBSD(490)RedHat(17,026)Slackware(941)Solaris(1,615)SUSE(1,444)Ubuntu(9,918)UNIX(9,469)UnixWare(188)Windows(6,784)OtherNewsTs0Day(307)Adobe(310)Anonymous(350)Apple(1,069)Backdoor(713)Bank(1,213)Botnet(592)Britain(1,115)China(953)Cisco(214)Conference(328)Cryptography(1,649)Cybercrime(2,148)Cyberwar(1,958)DataLoss(4,012)Database(227)DoS(561)Email(523)Facebook(833)FBI(462)Flaw(4,583)Fraud(2,698)Google(1,570)Government(7,051)Hacker(7,656)Headline(20,039)IdentityTheft(214)Iran(230)Linux(264)Malware(2,771)Microsoft(1,841)Military(229)Mozilla(218)NSA(678)Password(790)Patch(1,026)Phish(382)Phone(1,937)Privacy(4,819)Russia(1,078)Scada(209)Scam(273)Science(534)Social(473)Space(259)Spam(379)Spyware(1,612)Terror(410)Trojan(321)Twitter(404)USA(3,934)Virus(397)Wireless(230)Worm(201)OtherNewsArchivesOctober2024September2024August2024July2024June2024May2024April2024March2024February2024January2024December2023November2023Older©2024PacketStorm.Allrightsreserved.SiteLinksNewsbyMonthNewsTsFilesbyMonthFileTsFileDirectoryAboutUsHistory&PurposeContactInformationTermsofServicePrivacyStatementInformation ServicesSecurityServicesHostingByRokasecFollowusonTwitterFollowusonFacebookSubscribetoanRSSFeed