CB Exploits

Gentoo Linux Security Advisory 202407-09

Tue, 02 Jul 2024 15:10:17 +0000

Gentoo Linux Security Advisory 202407-9 - A vulnerability has been discovered in OpenSSH, which can lead to remote code execution with root privileges. Versions greater than or equal to 9.7_p1-r6 are affected.

WordPress FooGallery 2.4.16 Cross Site Scripting

Tue, 02 Jul 2024 15:09:11 +0000

WordPress FooGallery plugin version 2.4.16 suffers from a persistent cross site scripting vulnerability.

WordPress Gallery 2.3.6 Cross Site Scripting

Tue, 02 Jul 2024 15:08:16 +0000

WordPress Gallery version 2.3.6 suffers from a persistent cross site scripting vulnerability.

Ubuntu Security Notice USN-6851-2

Tue, 02 Jul 2024 15:07:35 +0000

Ubuntu Security Notice 6851-2 - USN-6851-1 fixed vulnerabilities in Netplan. The update lead to the discovery of a regression in netplan which caused systemctl enable to fail on systems without dbus. This update fixes the problem.

Ubuntu Security Notice USN-6844-2

Tue, 02 Jul 2024 15:07:25 +0000

Ubuntu Security Notice 6844-2 - USN-6844-1 fixed vulnerabilities in the CUPS package. The update lead to the discovery of a regression in CUPS with regards to how the cupsd daemon handles Listen configuration directive. This update fixes the problem. Rory McNamara discovered that when starting the cupsd server with a Listen configuration item, the cupsd process fails to validate if bind call passed. An attacker could possibly trick cupsd to perform an arbitrary chmod of the provided argument, providing world-writable access to the target.

Red Hat Security Advisory 2024-4212-03

Tue, 02 Jul 2024 15:05:30 +0000

Red Hat Security Advisory 2024-4212-03 - An update for golang is now available for Red Hat Enterprise Linux 9.

Red Hat Security Advisory 2024-4211-03

Tue, 02 Jul 2024 15:05:21 +0000

Red Hat Security Advisory 2024-4211-03 - An update for kernel is now available for Red Hat Enterprise Linux 8. Issues addressed include double free, memory leak, null pointer, spoofing, and use-after-free vulnerabilities.

Red Hat Security Advisory 2024-4210-03

Tue, 02 Jul 2024 15:05:11 +0000

Red Hat Security Advisory 2024-4210-03 - An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.9 for RHEL 8. Issues addressed include a denial of service vulnerability.

Red Hat Security Advisory 2024-4209-03

Tue, 02 Jul 2024 15:05:03 +0000

Red Hat Security Advisory 2024-4209-03 - An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.2 for RHEL 8. Issues addressed include a denial of service vulnerability.

PowerVR Driver Missing Sanitization

Tue, 02 Jul 2024 15:03:26 +0000

The PowerVR driver does not sanitize ZS-Buffer / MSAA scratch firmware addresses.

Ubuntu Security Notice USN-6859-1

Mon, 01 Jul 2024 15:08:48 +0000

Ubuntu Security Notice 6859-1 - It was discovered that OpenSSH incorrectly handled signal management. A remote attacker could use this issue to bypass authentication and remotely access systems without proper credentials.

Debian Security Advisory 5724-1

Mon, 01 Jul 2024 15:08:33 +0000

Debian Linux Security Advisory 5724-1 - The Qualys Threat Research Unit (TRU) discovered that OpenSSH, an implementation of the SSH protocol suite, is prone to a signal handler race condition. If a client does not authenticate within LoginGraceTime seconds (120 by default), then sshd's SIGALRM handler is called asynchronously and calls various functions that are not async-signal-safe. A remote unauthenticated attacker can take advantage of this flaw to execute arbitrary code with root privileges. This flaw affects sshd in its default configuration.

Gentoo Linux Security Advisory 202407-08

Mon, 01 Jul 2024 15:08:10 +0000

Gentoo Linux Security Advisory 202407-8 - Multiple vulnerabilities have been discovered in GNU Emacs and Org Mode, the worst of which could lead to arbitrary code execution. Versions greater than or equal to 26.3-r16:26 are affected.

Gentoo Linux Security Advisory 202407-07

Mon, 01 Jul 2024 15:04:35 +0000

Gentoo Linux Security Advisory 202407-7 - A vulnerability has been discovered in cpio, which can lead to arbitrary code execution. Versions greater than or equal to 2.13-r1 are affected.

Packet Storm New Exploits For June, 2024

Mon, 01 Jul 2024 15:03:38 +0000

This archive contains all of the 65 exploits added to Packet Storm in June, 2024.

OpenSSH Server regreSSHion Remote Code Execution

Mon, 01 Jul 2024 15:00:47 +0000

Qualys has discovered a a signal handler race condition vulnerability in OpenSSH's server, sshd. If a client does not authenticate within LoginGraceTime seconds (120 by default, 600 in old OpenSSH versions), then sshd's SIGALRM handler is called asynchronously, but this signal handler calls various functions that are not async-signal-safe - for example, syslog(). This race condition affects sshd in its default configuration.

OpenSSH 9.8p1

Mon, 01 Jul 2024 15:00:31 +0000

This is a Linux/portable port of OpenBSD's excellent OpenSSH. OpenSSH is based on the last free version of Tatu Ylonen's SSH with all patent-encumbered algorithms removed, all known security bugs fixed, new features reintroduced, and many other clean-ups.

Ubuntu Security Notice USN-6858-1

Mon, 01 Jul 2024 14:58:33 +0000

Ubuntu Security Notice 6858-1 - It was discovered that eSpeak NG did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a denial of service, or execute arbitrary code.

Gentoo Linux Security Advisory 202407-06

Mon, 01 Jul 2024 14:58:16 +0000

Gentoo Linux Security Advisory 202407-6 - Multiple vulnerabilities have been discovered in cryptography, the worst of which could lead to a denial of service. Versions greater than or equal to 42.0.4 are affected.

Gentoo Linux Security Advisory 202407-05

Mon, 01 Jul 2024 14:58:01 +0000

Gentoo Linux Security Advisory 202407-5 - A vulnerability has been discovered in SSSD, which can lead to arbitrary code execution. Versions greater than or equal to 2.5.2-r1 are affected.

Simple Laboratory Management System 1.0 SQL Injection

Mon, 01 Jul 2024 14:57:02 +0000

Simple Laboratory Management System version 1.0 suffers from a remote time-based SQL injection vulnerability.

Ubuntu Security Notice USN-6855-1

Mon, 01 Jul 2024 14:55:42 +0000

Ubuntu Security Notice 6855-1 - Mansour Gashasbi discovered that libcdio incorrectly handled certain memory operations when parsing an ISO file, leading to a buffer overflow vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code.

Gentoo Linux Security Advisory 202406-06

Mon, 01 Jul 2024 14:55:27 +0000

Gentoo Linux Security Advisory 202406-6 - Multiple vulnerabilities have been discovered in GStreamer and GStreamer Plugins, the worst of which could lead to code execution. Versions greater than or equal to 1.22.11-r1 are affected.

Azon Dominator Affiliate Marketing Script SQL Injection

Mon, 01 Jul 2024 14:54:31 +0000

Azon Dominator Affiliate Marketing Script suffers from a remote SQL injection vulnerability.

Gentoo Linux Security Advisory 202407-02

Mon, 01 Jul 2024 14:53:46 +0000

Gentoo Linux Security Advisory 202407-2 - A vulnerability has been discovered in SDL_ttf, which can lead to arbitrary memory writes. Versions greater than or equal to 2.20.0 are affected.

[remote] - Android - 'BadKernel' Remote Code Execution