what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New
Showing 1 - 14 of 14 RSS Feed

Files Date: 2024-06-14

TestSSL 3.0.9
Posted Jun 14, 2024
Authored by Dr. Dirk Wetter | Site drwetter.org

testssl.sh is a free command line tool which checks a server's service on any port for the support of TLS/SSL ciphers, protocols as well as recent cryptographic flaws, and much more. It is written in (pure) bash, makes only use of standard Unix utilities, openssl and last but not least bash sockets.

Changes: Fixed bash 5 issue when encountering a short server key extension. Fixed HTML issue when using bash 5. CAA DNS records are now not being queried when nodns is set. MongoDB identification fix. Sanity check when user has broken umask to avoid runtime errors. Fixed for newer grep versions. 8 additional updates.
tags | tool, scanner, protocol, bash
systems | unix
SHA-256 | 75ecbe4470e74f9ad17f4c4ac733be123b0f67d676ed24cc2b30adb41561e05f
Ubuntu Security Notice USN-6834-1
Posted Jun 14, 2024
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 6834-1 - It was discovered that H2 was vulnerable to deserialization of untrusted data. An attacker could possibly use this issue to execute arbitrary code. It was discovered that H2 incorrectly handled some specially crafted connection URLs. An attacker could possibly use this issue to execute arbitrary code.

tags | advisory, arbitrary
systems | linux, ubuntu
advisories | CVE-2021-42392, CVE-2022-23221
SHA-256 | a4f242b0016b3924ded04be334e612db695280fdeb8a7ba3643eaacc3a470aee
Ubuntu Security Notice USN-6833-1
Posted Jun 14, 2024
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 6833-1 - Siddharth Dushantha discovered that VTE incorrectly handled large window resize escape sequences. An attacker could possibly use this issue to consume resources, leading to a denial of service.

tags | advisory, denial of service
systems | linux, ubuntu
advisories | CVE-2024-37535
SHA-256 | 8956f2acd76954b678bc58aa3f277e6a000b2244a7143ab50fb5939dc29ded84
Ubuntu Security Notice USN-6832-1
Posted Jun 14, 2024
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 6832-1 - Jingzhou Fu discovered that Virtuoso Open-Source Edition incorrectly handled certain crafted SQL statements. An attacker could possibly use this issue to crash the program, resulting in a denial of service. Jingzhou Fu discovered that Virtuoso Open-Source Edition incorrectly handled certain crafted SQL statements. An attacker could possibly use this issue to crash the program, resulting in a denial of service. This issue only affects Ubuntu 22.04 LTS, Ubuntu 23.10 and Ubuntu 24.04 LTS.

tags | advisory, denial of service
systems | linux, ubuntu
advisories | CVE-2023-31607, CVE-2023-31611, CVE-2023-31615, CVE-2023-31616, CVE-2023-31619, CVE-2023-31623
SHA-256 | 434f0a9b71e494daacdc7a83f0cb6d78373c1290c01dfa7008dc71d6637b953c
Premium Support Tickets For WHMCS 1.2.10 Cross Site Scripting
Posted Jun 14, 2024
Authored by Sajibe Kanti

Premium Support Tickets For WHMCS version 1.2.10 suffers from a cross site scripting vulnerability.

tags | exploit, xss
SHA-256 | 0b98e620a6ee83502076b64abb1b54bea994147d96f0c0f880577b2df8b36393
Red Hat Security Advisory 2024-3929-03
Posted Jun 14, 2024
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2024-3929-03 - An update for dnsmasq is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.

tags | advisory
systems | linux, redhat
advisories | CVE-2023-50387
SHA-256 | 93f36d20c1e5ebbb9e533b0fd915fba35c52ef1823eae074c1d0d4315e22dfe2
Red Hat Security Advisory 2024-3927-03
Posted Jun 14, 2024
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2024-3927-03 - A new container image for Red Hat Ceph Storage 7.1 is now available in the Red Hat Ecosystem Catalog.

tags | advisory
systems | linux, redhat
advisories | CVE-2023-39325
SHA-256 | 2a34112f7e1e0cd7312b6bcfdaede6f66f1ddaa933d2c4670c126974da2d0af9
Red Hat Security Advisory 2024-3926-03
Posted Jun 14, 2024
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2024-3926-03 - An update for expat is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Issues addressed include a denial of service vulnerability.

tags | advisory, denial of service
systems | linux, redhat
advisories | CVE-2023-52425
SHA-256 | c428c22ea2eaf3f0c60ad9f14332f6e3ec99734d633db8d58912cbc537a46162
Red Hat Security Advisory 2024-3920-03
Posted Jun 14, 2024
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2024-3920-03 - Migration Toolkit for Runtimes 1.2.6 release Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link in the References section. Issues addressed include a password leak vulnerability.

tags | advisory
systems | linux, redhat
advisories | CVE-2023-45857
SHA-256 | 9117dec50690aed76c7ff974632195c0142cc4d49fe07d3d77127e1d167877d4
Red Hat Security Advisory 2024-3919-03
Posted Jun 14, 2024
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2024-3919-03 - Migration Toolkit for Runtimes 1.2.6 release Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link in the References section. Issues addressed include denial of service and spoofing vulnerabilities.

tags | advisory, denial of service, spoof, vulnerability
systems | linux, redhat
advisories | CVE-2023-4639
SHA-256 | fabf9df085e55fbd0dcc97e28bc47009a9d5605b267929b713daa729f4a8542e
AEGON LIFE 1.0 Cross Site Scripting
Posted Jun 14, 2024
Authored by Aslam Anwar Mahimkar

AEGON LIFE version 1.0 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss
advisories | CVE-2024-36599
SHA-256 | 7eceb05ddd8cbd642dccde5405d50cae94f5207cbef2af0b913bb1a391ba70ac
AEGON LIFE 1.0 Remote Code Execution
Posted Jun 14, 2024
Authored by Aslam Anwar Mahimkar

AEGON LIFE version 1.0 suffers from an unauthenticated remote code execution vulnerability.

tags | exploit, remote, code execution
advisories | CVE-2024-36598
SHA-256 | 83c0b6f07fa2bbbfc9a1b6c65faabffb8275dcc2b2ae437176e0a02402bfdb89
AEGON LIFE 1.0 SQL Injection
Posted Jun 14, 2024
Authored by Aslam Anwar Mahimkar

AEGON LIFE version 1.0 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
advisories | CVE-2024-36597
SHA-256 | 646d1cf7442ad77863005127a29e4531ed5bd8d4bad908c80a867f32a4734921
PHP Remote Code Execution
Posted Jun 14, 2024
Authored by Yesith Alvarez

PHP versions prior to 8.3.8 suffer from a remote code execution vulnerability.

tags | exploit, remote, php, code execution
advisories | CVE-2024-4577
SHA-256 | 6d8851066f1e1d5a5aa1172f697d6dfd3debd910db8f3f51cfdc80ab2a6cb6ae
Page 1 of 1
Back1Next

File Archive:

November 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Nov 1st
    30 Files
  • 2
    Nov 2nd
    0 Files
  • 3
    Nov 3rd
    0 Files
  • 4
    Nov 4th
    12 Files
  • 5
    Nov 5th
    44 Files
  • 6
    Nov 6th
    18 Files
  • 7
    Nov 7th
    9 Files
  • 8
    Nov 8th
    8 Files
  • 9
    Nov 9th
    3 Files
  • 10
    Nov 10th
    0 Files
  • 11
    Nov 11th
    14 Files
  • 12
    Nov 12th
    20 Files
  • 13
    Nov 13th
    63 Files
  • 14
    Nov 14th
    18 Files
  • 15
    Nov 15th
    8 Files
  • 16
    Nov 16th
    0 Files
  • 17
    Nov 17th
    0 Files
  • 18
    Nov 18th
    18 Files
  • 19
    Nov 19th
    7 Files
  • 20
    Nov 20th
    13 Files
  • 21
    Nov 21st
    6 Files
  • 22
    Nov 22nd
    48 Files
  • 23
    Nov 23rd
    0 Files
  • 24
    Nov 24th
    0 Files
  • 25
    Nov 25th
    60 Files
  • 26
    Nov 26th
    0 Files
  • 27
    Nov 27th
    0 Files
  • 28
    Nov 28th
    0 Files
  • 29
    Nov 29th
    0 Files
  • 30
    Nov 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2024 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close