sebastian vulnerabilities and exploits

(subscribe to this query)

NA

Aptdaemon 0.43 and previous versions in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate packages when the transaction is not simulated, which allows remote malicious users to install arbitrary packages via a man-in-the-middle attack.

Sebastian Heinlein Aptdaemon 0.34 Sebastian Heinlein Aptdaemon 0.33 Canonical Ubuntu Linux 12.04 Sebastian Heinlein Aptdaemon 0.32 Sebastian Heinlein Aptdaemon 0.31 Sebastian Heinlein Aptdaemon 0.41 Sebastian Heinlein Aptdaemon 0.40 Canonical Ubuntu Linux 11.04 Canonical Ubuntu Linux 11.10 Sebastian Heinlein Aptdaemon Sebastian Heinlein Aptdaemon 0.30 Sebastian Heinlein Aptdaemon 0.20

NA

suPHP prior to 0.6.3 allows local users to gain privileges via (1) a race condition that involves multiple symlink changes to point a file owned by a different user, or (2) a symlink to the directory of a different user, which is used to determine privileges.

Sebastian Marsching Suphp

NA

myphpPagetool PHP script 0.4.3-1 and previous versions allows remote malicious users to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable.

Sebastian Bunka Myphppagetool 0.4.3.1

NA

The logging capability in muh 2.05d IRC server does not properly cleanse user-injected format strings, which allows remote malicious users to cause a denial of service or execute arbitrary commands via a malformed nickname.

Sebastian Kienzl Muh 2.05d

NA

Buffer overflow in the http_parse_hex function in libz/misc.c in Zervit Webserver 0.02 allows remote malicious users to cause a denial of service (daemon crash) via a long URI, related to http.c.

Sebastian Fernandez Zervit 0.02

1 EDB exploit

NA

Multiple SQL injection vulnerabilities in the getGalleryImage function in st_admin/gallery_output.php in ST-Gallery 0.1 alpha, when magic_quotes_gpc is disabled, allow remote malicious users to execute arbitrary SQL commands via the (1) gallery_category or (2) gallery_show parame...

Sebastian-thiele St-gallery 0.1 Alpha

1 EDB exploit

NA

Unknown vulnerability in Parallel port powerSwitch (aka pp_powerSwitch) 0.1 does not properly enforce access controls, which allows local users to access arbitrary ports.

Sebastian Dehne Pp Powerswitch 0.1

NA

Aptdaemon 0.43 in Ubuntu 11.10 and 12.04 LTS uses short IDs when importing PPA GPG keys from a keyserver, which allows remote malicious users to install arbitrary package repository GPG keys via a man-in-the-middle (MITM) attack.

Sebastian Heinlein Aptdaemon 0.43 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 11.10

4.8

CVSSv3

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sebastian Krysmanski Upload File Type Settings plugin <= 1.1 versions.

Upload File Type Settings Plugin Project Upload File Type Settings Plugin

NA

PHP remote file inclusion vulnerability in include/editfunc.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter SW 1.42 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the NWCONF_SYSTEM[server_path] parameter.

Baumedia Newswriter 1.42 Baumedia Newswriter 1.40 Baumedia Newswriter 1.41

1 EDB exploit

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook