tcpdump allows you to dump the traffic on a network. It can be used to print out the headers and/or contents of packets on a network interface that matches a given expression. You can use this tool to track down network problems, to detect many attacks, or to monitor the network activities.
ad75a6ed3dc0d9732945b2e5483cb41dc8b4b528a169315e499c6861952e73b3Libpcap is a portable packet capture library which is used in many packet sniffers, including tcpdump.
2a8885c403516cf7b0933ed4b14d6caa30e02052489ebd414dc75ac52e7559e6Ubuntu Security Notice 5804-1 - It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote attacker could use this to cause a denial of service or possibly execute arbitrary code. Tamas Koczka discovered that the Bluetooth L2CAP handshake implementation in the Linux kernel contained multiple use-after-free vulnerabilities. A physically proximate attacker could use this to cause a denial of service or possibly execute arbitrary code.
eaaf2b382821a29f0cd1289ad47e022031258f5e6b7b5ad1a6f618862dfb5a67Red Hat Security Advisory 2023-0163-01 - Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This asynchronous patch is a security update for Red Hat JBoss Enterprise Application Platform 7.4. Issues addressed include a server-side request forgery vulnerability.
d55d12dfc8660dd2ed19af26307d3d77442e78e3c73a603fb139af29c4a6822fRed Hat Security Advisory 2023-0163-01 - Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This asynchronous patch is a security update for Red Hat JBoss Enterprise Application Platform 7.4. Issues addressed include a server-side request forgery vulnerability.
d55d12dfc8660dd2ed19af26307d3d77442e78e3c73a603fb139af29c4a6822fOn newer macOS/iOS versions, entitlements in binary signature blobs are stored in the DER format. libCoreEntitlements.dylib is the userspace library for parsing and querying such entitlements. The kernel has its own version of this library inside the AppleMobileFileIntegrity module. libCoreEntitlements exposes several functions, such as, for example, to convert entitlements to a dictionary representation (e.g. CEQueryContextToCFDictionary) or to query a specific entitlement (CEContextQuery). Unfortunately, different functions traverse the DER structure in a subtly different way, which allows one API to see one set of entitlements and another API to see a different set of entitlements.
9313c983a56ba7500d8b9861b16b1c103ae3a9454de12a836126f89cec59a1b8Ubuntu Security Notice 5803-1 - Kyle Zeng discovered that the sysctl implementation in the Linux kernel contained a stack-based buffer overflow. A local attacker could use this to cause a denial of service or execute arbitrary code. Tamas Koczka discovered that the Bluetooth L2CAP handshake implementation in the Linux kernel contained multiple use-after-free vulnerabilities. A physically proximate attacker could use this to cause a denial of service or possibly execute arbitrary code.
4a901d23fe04ca230ee9b786ae58b58154f66077be0ff2e81efffbae06b991afWebKit suffers from a RenderMathMLToken use-after-free vulnerability in CSSCrossfadeValue::crossfadeChanged.
2b3fca29e24705325c2e8f69792ec1fc6a23682a01cfd1f0ecc2b118ac3f4ef8Ubuntu Security Notice 5801-1 - It was discovered that Vim makes illegal memory calls when pasting brackets in Ex mode. An attacker could possibly use this to crash Vim, access or modify memory, or execute arbitrary commands. This issue affected only Ubuntu 20.04 and 22.04 It was discovered that Vim makes illegal memory calls when making certain retab calls. An attacker could possibly use this to crash Vim, access or modify memory, or execute arbitrary commands.
0318c9712fe56a1f8810700373a5c02513327d9045680846c9b5c3c5db26f51dAcademy LMS version 5.11 suffers from a cross site scripting vulnerability.
c4267c2d2313ed4c29b4190bebb424eb41532d3688641f03004ad2b8be81c60eUbuntu Security Notice 5802-1 - It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote attacker could use this to cause a denial of service or possibly execute arbitrary code. Tamás Koczka discovered that the Bluetooth L2CAP handshake implementation in the Linux kernel contained multiple use-after-free vulnerabilities. A physically proximate attacker could use this to cause a denial of service or possibly execute arbitrary code.
34428fdea7c82ae5cc1b2570fe09a946f45222b5e8de50755c8c2bd32c0ca4ffRed Hat Security Advisory 2023-0164-01 - Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This asynchronous patch is a security update for Red Hat JBoss Enterprise Application Platform 7.4. Issues addressed include a server-side request forgery vulnerability.
616521c388a566f932319b081aa87e65cb569e58ad0c35329e4380e9a0b8cb49Red Hat Security Advisory 2023-0017-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.8.56. Issues addressed include bypass, cross site request forgery, cross site scripting, denial of service, and man-in-the-middle vulnerabilities.
100324dc37a3b8c6880e383212a38c4af09adce1dd885bc1832da298b091d2f2ChiKoi New-MVC-SHOP version 1.0 suffers from a cross site scripting vulnerability.
37112a998d09fcfdfdd50638e993ccb4c2969bb383bcb0b8fef8240635bb739cUbuntu Security Notice 5800-1 - It was discovered that Heimdal incorrectly handled certain SPNEGO tokens. A remote attacker could possibly use this issue to cause a denial of service. Evgeny Legerov discovered that Heimdal incorrectly handled memory when performing certain DES decryption operations. A remote attacker could use this issue to cause a denial of service, or possibly execute arbitrary code.
b0e2703f42318fc7c0a4e60c767ce87190f7c37446b669112673f0af14942855Red Hat Security Advisory 2023-0160-01 - PostgreSQL is an advanced object-relational database management system.
47d220474f8300a3da56a595f0c7f3a38eeafb61aafcd5d30a192d4aadc00437WordPress Slider Revolution plugin versions 4.x.x suffer from a remote shell upload vulnerability.
91ad27d5b8aae997e047295a60a4b87610223abd915335d38e21feaee0c21334WordPress Slider Revolution plugin version 4.9.2 suffers from a directory traversal vulnerability.
b974aee33a66e29925be0ab29843b305b114f9a63e635ad75ca2c10d50af3474WordPress Slider Revolution plugin version 4.6.5 suffers from a directory traversal vulnerability.
c0ad551826885e99515a7f31a6660bf3f6f546a33382b918ec3a80f8f2c57bbcWordPress Slider Revolution plugin version 4.1.3 suffers from a directory traversal vulnerability.
83b023ff748b63a814933d6674398e32e4fb2ba5c520cc7997e01b2a23da875cWordPress Slider Revolution plugin version 4.1.2 suffers from a directory traversal vulnerability.
d3b71e6cca26b526cd8c1ef3f9be1a645c838d5b2349fa4c8be240892908d108WordPress Slider Revolution plugin version 3.0.8 suffers from a directory traversal vulnerability.
129c075ad285b288723e5f16312e3c90c87bccd10a3436f09ab9fdb5cfb03d53WordPress Profile Builder plugin version 3.0.5 suffers from a remote SQL injection vulnerability.
dd2a00364eee556c9e3981aef19bd8de262365e971b4b9c66b65ec44ec825637Global Education and Technoworld version 4.1 suffers from an unauthorized backup disclosure vulnerability.
d72fb877f183ce52a7f5cc803d31f26d95d704adfccefbb0b43ecf296a359ca9Laravel versions 1.0 to 9.47.0 suffer from database disclosure and information leakage vulnerabilities.
111b6533007bb0d30833a8fec10c414266b1f7095e1f6e0aecfa7bb54a3e2319
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed