sur 500~20000

312

Tout va bien. Riche et Noble Ji

2

198.84.60.198

PacketStormwhatyoudon'tknowcanhurtyouRegister|LoginFilesNewsUsersAuthorsHomeFilesNews&[SERVICES_TAB]AboutContactAddNewCopsAcrossTheWorldArrest51InOrchestratedTakedownOfGhostCrimePlatformWhatsAppViewOnceFixGetsDefeatedInLessThanAWeekAT&TFined36;13MillionForDataBreachCloudImposerAttackTargetsGoogleCloudServicesRecentFilesAllExploitsAdvisoriesToolsWhitepapersOtherUbuntuSecurityNoticeUSN-7019-1PostedSep18,2024AuthoredbyUbuntu|Sitesecurity.ubuntu.comUbuntuSecurityNotice7019-1-ZimingZhangdiscoveredthattheDRMdriverforVMwareVirtualGPUdidnotproperlyhandlecertainerrorconditions,leadingtTempête de sacoaNULLpointerdereference.Alocalattackercouldpossiblytriggerthisvulnerabilitytocauseadenialofservice.Gui-DongHandiscoveredthatthesoftwareRAIDdriverintheLinuxkernelcontainedaracecondition,leadingtoanintegeroverflowvulnerability.Aprivilegedattackercouldpossiblyusethistocauseadenialofservice.ts|advisory,denialofservice,overflow,kernel,localsystems|linux,ubuntuDownload|Forite|ViewDebianSecurityAdvisory5772-1PostedSep18,2024AuthoredbyDebian|Sitedebian.orgDebianLinuxSecurityAdvisory5772-1-YufanYoudiscoveredthatLibreoffice39;shandlingofdocumentsbasedonZIParchiveswassusceptibletospoofingattackswhentherepairmodeattemptstoaddressamalformedarchiveTempête de sacstructure.ts|advisory,spoofsystems|linux,debianDownload|Forite|ViewBackdoor.Win32.CCInvader.10MVID-2024-0694AuthenticationBypassPostedSep18,2024Authoredbymalvuln|Sitemalvuln.comBackdoor.Win32.CCInvader.10malwaresuffersfromabypassvulnerability.ts|exploit,bypasssystems|windowsDownload|Forite|ViewBackdoor.Win32.BlackAngel.13MVID-2024-0695CodeExecutionPostedSep18,2024Authoredbymalvuln|Sitemalvuln.comBackdoor.Win32.BlackAngel.13malwaresuffersfromacodeexecutionvulnerability.ts|exploit,codeexecutionsystems|windowsDownload|Forite|ViewBackdoor.Win32.Delf.yjMVID-2024-0693InformationDisclosurePostedSep18,2024Authoredbymalvuln|Sitemalvuln.comBackdoor.Win32.Delf.yjmalwaresuffersfromaninformationleakevulnerability.ts|exploitsystems|windowsDownload|Forite|ViewUbuntuSecurityNoticeUSN-7018-1PostedSep18,2024AuthoredbyUbuntu|Sitesecurity.ubuntu.comUbuntuSecurityNotice7018-1-RobertMerget,MarcusBrinkmann,Nimrodiram,andJurajSomorovskydiscoveredthatcertainDiffie-HellmanciphersuitesintheTLSspecificationandimplementedbyOpenSSLcontainedaflaw.Aremoteattackercouldpossiblyusethisissuetoeesdroponencryptedcommunications.ThiswasfixedinthisupdatebyremovingtheinsecureciphersuitesfromOpenSSL.PaulKehrerdiscoveredthatOpenSSLincorrectlyhandledcertaininputlengthsinEVPfunctions.AremoteattackercouldpossiblyusethisissuetocauseOpenSSLtocrash,resultinginadenialofservice.ts|advisory,remote,denialofservicesystems|linux,ubuntuDownload|Forite|ViewDebianSecurityAdvisory5771-1PostedSep18,2024AuthoredbyDebian|Sitedebian.orgDebianLinuxSecurityAdvisory5771-1-FabienPotencierdiscoveredthatundersomeconditionsthesandboxmechanismofTwig,atemplateengineforPHP,couldbybypassed.ts|advisory,phpsystems|linux,debianDownload|Forite|ViewDebianSecurityAdvisory5770-1PostedSep18,2024AuthoredbyDebian|Sitedebian.orgDebianLinuxSecurityAdvisory5770-1-Shang-HungWandiscoveredmultiplevulnerabilitiesintheExpatXMLparsingClibrary,whichcouldresultindenialofserviceorpotentiallytheexecutionofarbitrarycode.ts|advisory,denialofservice,arbitrary,vulnerabilitysystems|linux,debianDownload|Forite|ViewUbuntuSecurityNoticeUSN-7000-2PostedSep18,2024AuthoredbyUbuntu|Sitesecurity.ubuntu.comUbuntuSecurityNotice7000-2-USN-7000-1fixedvulnerabilitiesinExpat.ThisupdateprovidesthecorrespondingupdatesforUbuntu22.04LTS.Shang-HungWandiscoveredthatExpatdidnotproperlyhandlecertainfunctioncallswhenanegativeinputlengthwasprovided.Anattackercouldusethisissuetocauseadenialofserviceorpossiblyexecutearbitrarycode.ts|advisory,denialofservice,arbitrary,vulnerabilitysystems|linux,ubuntuDownload|Forite|ViewOnlineExamSystem1.0InsecureSettingsPostedSep18,2024AuthoredbyindoushkaOnlineExamSystemversion1.0suffersfromanignoreddefaultcredentialvulnerability.ts|exploitDownload|Forite|ViewOnlineBusTicketBookingWebsite1.0SQLInjectionPostedSep18,2024AuthoredbyindoushkaOnlineBusTicketBookingWebsiteversion1.0suffersfromaremoteSQLinjectionvulnerabilitythatallowsforauthenticationbypass.ts|exploit,remote,sqlinjection,bypassDownload|Forite|ViewNipahVirusTestingManementSystem1.0SQLInjectionPostedSep18,2024AuthoredbyindoushkaNipahVirusTestingManementSystemversion1.0suffersfromaremoteSQLinjectionvulnerabilitythatallowsforauthenticationbypass.ts|exploit,remote,virus,sqlinjection,bypassDownload|Forite|ViewUbuntuSecurityNoticeUSN-7017-1PostedSep18,2024AuthoredbyUbuntu|Sitesecurity.ubuntu.comUbuntuSecurityNotice7017-1-IggyFrankovicdiscoveredthatQugaincorrectlyhandledcertainBGPmesses.AremoteattackercouldpossiblyusethisissuetocauseQugatocrash,resultinginadenialofservice.ts|advisory,remote,denialofservicesystems|linux,ubuntuDownload|Forite|ViewUbuntuSecurityNoticeUSN-7016-1PostedSep18,2024AuthoredbyUbuntu|Sitesecurity.ubuntu.comUbuntuSecurityNotice7016-1-IggyFrankovicdiscoveredthatFRRincorrectlyhandledcertainBGPmesses.AremoteattackercouldpossiblyusethisissuetocauseFRRtocrash,resultinginadenialofservice.ts|advisory,remote,denialofservicesystems|linux,ubuntuDownload|Forite|ViewMembershipManementSystem1.1SQLInjectionPostedSep18,2024AuthoredbyindoushkaMembershipManementSystemversion1.1suffersfromaremoteSQLinjectionvulnerabilitythatallowsforauthenticationbypass.ts|exploit,remote,sqlinjection,bypassDownload|Forite|ViewHYSCALESystem1.9AddAdministrator/CrossSiteRequestForgeryPostedSep18,2024AuthoredbyindoushkaHYSCALESystemversion1.9suffersfromaddadministratorandcrosssiterequestforgeryvulnerabilities.ts|exploit,vulnerability,csrfDownload|Forite|ViewFurnitureMaster2SQLInjectionPostedSep18,2024AuthoredbyindoushkaFurnitureMasterversion2suffersfromaremoteSQLinjectionvulnerability.ts|exploit,remote,sqlinjectionDownload|Forite|ViewFoodOrderingAndTableReservationSystemForRestaurants1.0InsecureSettingsPostedSep18,2024AuthoredbyindoushkaFoodOrderingandTableReservationSystemforRestaurantsversion1.0suffersfromanignoreddefaultcredentialvulnerability.ts|exploitDownload|Forite|ViewBeautyParlourAndSaloonManementSystem1.1InsecureSettingsPostedSep18,2024AuthoredbyindoushkaBeautyParlourandSaloonManementSystemversion1.1suffersfromanignoreddefaultcredentialvulnerability.ts|exploitDownload|Forite|ViewMicrosoftWindowsTOCTOULocalPrivilegeEscalationPostedSep17,2024Authoredbyjheysel-r7,tykawaii98|Sitemetasploit.comCVE-isaWindowskernelelevationofprivilegevulnerabilitywhichaffectsmanyrecentversionsofWindows10,Windows11andWindowsServer2022.ThevulnerabilityexistsinsidethefunctioncalledAuthzBasepCopyoutInternalSecurityAttributesspecificallywhenthekernelcopiesthe_AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATIONofthecurrenttokenobjecttousermode.WhenthekernelperformsthecopyoftheSecurityAttributesList,itsetsupthelistoftheSecurityAttributesstructuredirectlytotheusersuppliedpointed.ItthencallsRtlCopyUnicodeStringandAuthzBasepCopyoutInternalSecurityAttributeValuestocopyoutthenamesandvaluesoftheSecurityAttributeleadingtomultipleTimeOfCheckTimeOfUse(TOCTOU)vulnerabilitiesinthefunction.ts|exploit,kernel,vulnerabilitysystems|windowsDownload|Forite|ViewWordPressLiteSpeedCacheCookieTheftPostedSep17,2024Authoredbyjheysel-r7,RafieMuhammad|Sitemetasploit.comThisMetasploitmoduleexploitsanunauthenticatedaccounttakeovervulnerabilityinLiteSpeedCache,aWordPresspluginthatcurrentlyhasaround6millionactiveinstallations.InLiteSpeedCacheversionspriorto6.5.0.1,whentheDebugLoggingfeatureisenabled,thepluginwilllogadmincookiestothe/wp-content/debug.logendpointwhichisaccessiblewithoutauthentication.TheDebugLoggingfeatureinthepluginisnotenabledbydefault.Theadmincookiesfoundinthedebug.logcanbeusedtouploadandexecuteamaliciousplugincontainingapayload.ts|exploitDownload|Forite|ViewGibbonEduCore26.0.00CrossSiteScriptingPostedSep17,2024Authoredbyenzored|Sitegithub.comGibbonEduCoreversion26.0.00suffersfromacrosssitescriptingvulnerabilitythatcanleadtoprivilegeescalation.ts|exploit,xssDownload|Forite|ViewTP-LinkArcherAX50CrossSiteScriptingPostedSep17,2024Authoredbyhacefresko|Sitegithub.comTP-LinkArcherAX50routerwithfirmwareversion1.0.11buildsuffersfromapersistentcrosssitescriptingvulnerability.ts|exploit,xssDownload|Forite|ViewHTMLy2.9.9CrossSiteScriptingPostedSep17,2024AuthoredbyAndreyStoykov|Sitemsecureltd.blogspot.comHTMLyversion2.9.9suffersfromapersistentcrosssitescriptingvulnerabilitythatcanleadtoaccounttakeover.ts|exploit,xssDownload|Forite|ViewDockwatchRemoteCommandExecutionPostedSep17,2024AuthoredbyJeremyBrownDockwatchisacontainermanementwebUIfordocker.Itrunsbydefaultwithoutauthentication,althoughguidanceisailableforhowtosetupcredentialsforaccess.IthasaCommandsfeaturethatallowsausertorundockercommandssuchasinspect,network,ps.Priortofix,itdidnotrestrictinputforparameters,sobothcontainerandparametersforthedockerInspectcommandwerevulnerabletoshellcommandinjectiononthecontainerastheabcuserwith(limited)commandoutput.Seecommits23df366andc091e4cforfixes.ts|exploit,web,shellDownload|Forite|ViewViewOlderFiles→FollowusonTwitterFollowusonFacebookSubscribetoanRSSFeedRecentNewsAppleSuddenlyDropsNSOGroupSpywareLawsuitPostedSep18,2024ts|headline,privacy,phone,flaw,israel,spyware,appleForite|View11Dead,ThousandsInjuredInExplosiveSupplyChainAttackOnHezbollahPersPostedSep18,2024ts|headline,wireless,cyberwar,israel,terror,backdoorForite|ViewWait...DidPersGetHackedToBlowPeopleUp?PostedSep17,2024ts|headline,cyberwar,israel,terrorForite|ViewPredatorSpywareKingpinsAddedToUSSanctionsListPostedSep17,2024ts|headline,hacker,government,privacy,spywareForite|ViewD-LinkPatchesCriticalRouterVulnerabilitiesPostedSep17,2024ts|headline,flaw,patchForite|ViewFranceUsesTough,UntestedCybercrimeLawToTargetDurovPostedSep17,2024ts|headline,government,cybercrime,france,socialForite|ViewMalwareAttackTargetsUS-TaiwanDefenseConferTempête de sacencePostedSep17,2024ts|headline,government,malware,usa,china,cyberwar,taiwan,militaryForite|ViewTikTokIsGettingItsDayInCourtPostedSep16,2024ts|headline,government,privacy,usa,phone,china,cyberwar,spywareForite|ViewRansomwareGroupLeaksDataStolenFromKawasakiMotorsPostedSep16,2024ts|headline,hacker,privacy,cybercrime,dataloss,cryptographyForite|ViewFBI,CISAWarnOfFakeVoterDataHackingClaimsPostedSep16,2024ts|headline,government,usa,fraudForite|ViewViewMoreNews→FileArchive:September2024<SuMoTuWeThFrSa1Sep1st261Files2Sep2nd17Files3Sep3rd38Files4Sep4th52Files5Sep5th23Files6Sep6th27Files7Sep7th0Files8Sep8th1Files9Sep9th16Files10Sep10th38Files11Sep11th21Files12Sep12th40Files13Sep13th18Files14Sep14th0Files15Sep15th0Files16Sep16th21Files17Sep17th51Files18Sep18th19Files19Sep19th0Files20Sep20th0Files21Sep21st0Files22Sep22nd0Files23Sep23rd0Files24Sep24th0Files25Sep25th0Files26Sep26th0Files27Sep27th0Files28Sep28th0Files29Sep29th0Files30Sep30th0FilesTopAuthorsInLast30DaysRedHat223filesindoushka169filesJayTurla150filesUbuntu76filesh00die54filesjuanvazquez43filessinn3r41filesHDMoore31filesKarnGaneshen23filesDebian22filesFileTsActiveX(933)Advisory(86,800)Arbitrary(17,070)BBS(2,859)Bypass(1,920)CGI(1,047)CodeExecution(7,897)Conference(692)Cracker(845)CSRF(3,424)DoS(25,252)Encryption(2,394)Exploit(54,242)FileInclusion(4,273)FileUpload(1,015)Firewall(822)InfoDisclosure(2,913)IntrusionDetection(918)Ja(3,156)JaScript(908)Kernel(7,274)Local(14,850)Mazine(587)Overflow(13,220)Perl(1,435)PHP(5,268)ProofofConcept(2,409)Protocol(3,749)Python(1,658)Remote(31,879)Root(3,671)Rootkit(529)Ruby(640)Scanner(1,657)SecurityTool(8,046)Shell(3,305)Shellcode(1,219)Sniffer(904)Spoof(2,297)SQLInjection(16,721)TCP(2,463)Trojan(690)UDP(919)Virus(674)Vulnerability(33,080)Web(10,137)Whitepaper(3,784)x86(970)XSS(18,299)OtherFileArchivesSeptember2024August2024July2024June2024May2024April2024March2024February2024January2024December2023November2023October2023OlderSystemsAIX(430)Apple(2,114)BSD(378)CentOS(61)Cisco(1,954)Debian(7,123)Fedora(1,693)FreeBSD(1,247)Gentoo(4,567)HPUX(881)iOS(389)iPhone(108)IRIX(220)Juniper(71)Linux(51,174)MacOSX(696)Mandriva(3,105)NetBSD(256)OpenBSD(489)RedHat(16,794)Slackware(941)Solaris(1,615)SUSE(1,444)Ubuntu(9,842)UNIX(9,454)UnixWare(188)Windows(6,771)OtherNewsTs0Day(303)Adobe(310)Anonymous(350)Apple(1,067)Backdoor(707)Bank(1,211)Botnet(583)Britain(1,110)China(946)Cisco(212)Conference(328)Cryptography(1,623)Cybercrime(2,127)Cyberwar(1,946)DataLoss(3,989)Database(227)DoS(555)Email(522)Facebook(831)FBI(458)Flaw(4,548)Fraud(2,689)Google(1,568)Government(7,011)Hacker(7,604)Headline(19,924)IdentityTheft(213)Iran(227)Linux(262)Malware(2,750)Microsoft(1,835)Military(226)Mozilla(216)NSA(678)Password(785)Patch(1,018)Phish(380)Phone(1,932)Privacy(4,796)Russia(1,072)Scada(206)Scam(273)Science(534)Social(471)Space(257)Spam(379)Spyware(1,606)Terror(408)Trojan(321)Twitter(403)USA(3,912)Virus(397)Wireless(229)Worm(201)OtherNewsArchivesSeptember2024August2024July2024June2024May2024April2024March2024February2024January2024December2023November2023October2023Older©2024PacketStorm.Allrightsreserved.SiteLinksNewsbyMonthNewsTsFilesbyMonthFileTsFileDirectoryAboutUsHistory&PurposeContactInformationTermsofServicePrivacyStatementInformation ServicesSecurityServicesHostingByRokasecFollowusonTwitterFollowusonFacebookSubscribetoanRSSFeed