This Metasploit module exploits an arbitrary command execution vulnerability in Webmin 1.910 and lower versions. Any user authorized to the "Package Updates" module can execute arbitrary commands with root privileges.
caa352f2bdb2cd2ebe21355770a606a5756d88a75639e90b6ef5f0792ec9e235Ubuntu Security Notice 4016-2 - It was discovered that Neovim incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code.
6f2c98453fc683143c54d2095571b8cd02361c7d8ba5fe6e1329bf378dcc6cecDebian Linux Security Advisory 4459-1 - Multiple security issues were discovered in the VLC media player, which could result in the execution of arbitrary code or denial of service if a malformed file/stream is processed.
0db3a4b34d64ba82713dffc824475115a6d4b1aaff0aaee269eae97d07837d11Red Hat Security Advisory 2019-1455-01 - The Advanced Virtualization module provides the user-space component for running virtual machines that use KVM in environments managed by Red Hat products. Issues addressed include a CPU related vulnerability.
fb14c30b2b4b66950a7ad55fc835d08f356665ba897057d854fa2a630fade726Ubuntu Security Notice 4014-2 - USN-4014-1 fixed a vulnerability in GLib. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. It was discovered that GLib incorrectly handled certain files. An attacker could possibly use this issue to access sensitive information.
e56097da639f222b3e22f1a7eff9534402f3df6414aa68254391feec4d32dd0fRed Hat Security Advisory 2019-1436-01 - HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. Issues addressed include denial of service and information leakage vulnerabilities.
32edc2abaa3ffdf63a726d8bec1e2bdd7c03e376d519aba6fdfc9d05d7ae811eRed Hat Security Advisory 2019-1429-01 - Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual environments. CloudForms Management Engine is built on Ruby on Rails, a model-view-controller framework for web application development. Action Pack implements the controller and the view components. Issues addressed include a code execution vulnerability.
5b7f130f699a5a49f828b29131f6acba61d5b7e4ecc5061ffeb6c7667b32abd3Ubuntu Security Notice 4016-1 - It was discovered that Vim incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. It was discovered that Vim incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code.
a392e5428ae1b5d43c0b1294a6b07cdc54d37f309c0d40089807ea393a31986eLiferay Portal version 7.1 CE GA4 suffers from cross site scripting vulnerability in the SimpleCaptcha API.
c06ac7b231e2f75dd445d19536c2d9c072a0b166eb94fe361bb49d3ed66e35b0This is a tool that generates a Linux kernel module for custom rules with Netfilter hooking to block ports, run in hidden mode, perform rootkit functions, etc.
d0dc6f8136db21f01228d49ad0aaf1fb756fbd13cbc46d39483563c187f9fd7cphpMyAdmin version 4.8 suffers from a cross site request forgery vulnerability.
1195e94c941b44b7613f283cea8689e64c13b0485be6d8b2b38539f01103e2c4Red Hat Security Advisory 2019-1456-01 - Red Hat Single Sign-On 7.3 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. This release of Red Hat Single Sign-On 7.3.2 serves as a replacement for Red Hat Single Sign-On 7.3.1, and includes bug fixes and enhancements, which are documented in the Release Notes document. Issues addressed include code execution, cross site scripting, and denial of service vulnerabilities.
25c2558aac7fb2895d66d097f8f7a50aad9eb71bc4ec6f0e3de7d20c6660856fUbuntu Security Notice 4015-1 - Joe Vennix discovered that DBus incorrectly handled DBUS_COOKIE_SHA1 authentication. A local attacker could possibly use this issue to bypass authentication and connect to DBus servers with elevated privileges.
0a1f3c43d3f74c5045915abb2ea99ab7bd4e1fb496a273ef442d9edc77ec8c39WordPress Insert or Embed Articulate Content plugin versions 4.2995 through 4.2997 suffers from a remote code execution vulnerability.
9771f7ccb148d86c4f0548c246bef914ba2d328d1ba57a9f0e1b46724c8577d7ProShow version 9.0.3797 suffers from a local privilege escalation vulnerability.
7455cbbf08b56b06dc073da12719442d3c75fc1a0e952dd8cecd6cfb43cc1b0d
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed