Friday, December 27th, 2013

Time	Event
4:44a	Ofilter Player 1.1 Integer Division By Zero http://packetstormsecurity.com/files/124610/ofilter-divbyzero.txt Ofilter Player version 1.1 integer division by zero exploit that creates a malicious .wav file.
4:18p	PHPSurveyor Shell Upload http://packetstormsecurity.com/files/124606/phpsurveyor-shell.txt PHPSurveyor suffers from a remote shell upload vulnerability.
4:19p	AWS Elastic Beanstalk Code Execution http://packetstormsecurity.com/files/124607/awsbeanstalk-exec.txt Amazon Web Services Elastic Beanstalk suffers from a code execution vulnerability.
4:22p	Safari Phishing Alert Bypass http://packetstormsecurity.com/files/124608/safari-phish.txt The PhishingAlert of Safari stops functioning in Windows systems if an abnormal URL is being used.
4:23p	Red Hat CloudForms Management Engine 5.1 miq_policy/explorer SQL Injection http://packetstormsecurity.com/files/124609/cfme_manageiq_evm_pass_reset.rb.txt This Metasploit module exploits a SQL injection vulnerability in the "explorer" action of "miq_policy" controller of the Red Hat CloudForms Management Engine 5.1 (ManageIQ Enterprise Virtualization Manager 5.0 and earlier) by changing the password of the target account to the specified password.
4:26p	IBM Web Content Manager XPath Injection http://packetstormsecurity.com/files/124611/SA-20131227-0.txt IBM Web Content Manager versions 6.x, 7.x, and 8.x suffer from blind XPath injection attacks. This allows an attacker to get current application configuration, enumerate nodes, and extract other valuable information from vulnerable installations of Web Content Manager.
4:32p	ipset_list 2.9.1 http://packetstormsecurity.com/files/124612/ipset_list-2.9.1.tar.gz ipset_list is a wrapper script for listing sets of the netfilter ipset program. It allows you to match and display sets, headers, and elements in various ways. Optionally, the output can be colorized.
5:33p	Snapchat Crypto Flaws http://packetstormsecurity.com/files/124613/Snapchat.pdf As prior disclosure to Snapchat has not resulted in fixes, the researchers at Gibson Security have released exploits and documentation on the previously undocumented API.

<< Previous Day

2013/12/27 [Calendar]

Next Day >>