Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Jay Turla
Simple Music Management System 1.0 Arbitrary File Upload
============================================================================================================================================= | # Title : Simple Music Management System v1.0 Remote File Upload Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 130.0.0 (64 bits) | | # Vendor : https://www.kashipara.com/project/php/12978/music-management-system-in-php-php-project-source-code |...
Online Eyewear Shop 1.0 Arbitrary File Upload
============================================================================================================================================= | # Title : Online Eyewear Shop v1.0 arbitrary File Upload Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 130.0.0 (64 bits) | | # Vendor : https://www.kashipara.com/project/download/project2/user/2023/202301/kashipara.com_php-oews-zip.zip |...
Ubuntu Security Notice USN-7046-1
========================================================================== Ubuntu Security Notice USN-7046-1 September 30, 2024 bubblewrap, flatpak vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Flatpak could be made to read and write files in locations it would not normally have access to.
Ubuntu Security Notice USN-7048-1
========================================================================== Ubuntu Security Notice USN-7048-1 October 01, 2024 vim vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Vim could be made to crash if it received specially crafted input.
Falco 0.39.0 ≈ Packet Storm
Falco 0.39.0 Authored by Sysdig | Site sysdig.org Sysdig Falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco will notify you when these rules are violated. You can think about Falco as a mix between snort, ossec and strace.
VICIdial Authenticated Remote Code Execution
## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## class MetasploitModule < Msf::Exploit::Remote include Msf::Exploit::Remote::HttpClient include Msf::Exploit::Remote::HttpServer prepend Msf::Exploit::Remote::AutoCheck Rank = ExcellentRanking def initialize(info = {}) super( update_info( info, 'Name' => 'VICIdial Authenticated Remote Code Execution', 'Description' => %q{ An attacker with authenticated...
Packet Storm New Exploits For September, 2024
Packet Storm New Exploits For September, 2024 Authored by Todd J. | Site packetstormsecurity.com This archive contains all of the 522 exploits added to Packet Storm in September, 2024. Please note the increase in size for this month is due to a massive backlog of older exploits being added to the archive and is not representative of an uptick in new issues being discovered. tags | exploit SHA-256 | 8e55d45d17c797a008c2549c382151243f42b03a5be9b34ae0965c6b1d014788
Student Attendance Management System 1.0 Code Injection
============================================================================================================================================= | # Title : Student Attendance Management System 1.0 code injection Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 129.0.1 (64 bits) | | # Vendor : https://www.sourcecodester.com/sites/default/files/download/oretnom23/student-attendance-management-system.zip |...
Student Study Center Management System 1.0 Insecure Settings
==================================================================================================================================== | # Title : Student Study Center Management System 1.0 Insecure Settings Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 130.0.0 (64 bits) | | # Vendor : https://phpgurukul.com/student-study-center-management-system-using-php-and-mysql/ |...
Ubuntu Security Notice USN-7015-3
========================================================================== Ubuntu Security Notice USN-7015-3 October 01, 2024 python2.7, python3.5 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Python could be made to bypass some restrictions if it received specially crafted input.
Red Hat Security Advisory 2024-7441-03
The following advisory data is extracted from: https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_7441.json Red Hat officially shut down their mailing list notifications October 10, 2023. Due to this, Packet Storm has recreated the below data as a reference point to raise awareness.
Simple Music Management System 1.0 Add Administrator / Cross Site Request Forgery
============================================================================================================================================= | # Title : Simple Music Management System v1.0 CSRF Add ADmin Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 130.0.0 (64 bits) | | # Vendor : https://www.kashipara.com/project/php/12978/music-management-system-in-php-php-project-source-code |...
Sample Blog Site 1.0 Cross Site Scripting / Remote File Inclusion
============================================================================================================================================= | # Title : Sample Blog Site 1.0 XSS Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 128.0.3 (64 bits) | | # Vendor : https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-simple-ims.zip |...
Scapy Packet Manipulation Tool 2.6.0
Scapy Packet Manipulation Tool 2.6.0 Authored by Philippe Biondi | Site secdev.org Scapy is a powerful interactive packet manipulation tool, packet generator, network scanner, network discovery tool, and packet sniffer. It provides classes to interactively create packets or sets of packets, manipulate them, send them over the wire, sniff other packets from the wire, match answers and replies, and more.
Student Management System 1.0 Insecure Cookie Handling
==================================================================================================================================== | # Title : Student Management System 1.0 Insecure Cookie Handling Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 130.0.0 (64 bits) | | # Vendor : https://phpgurukul.com/student-management-system-using-php-and-mysql/ |...
Simple Student Quarterly Result / Grade System 1.0 Insecure Settings
============================================================================================================================================= | # Title : Simple Student Quarterly Result / Grade System v1.0 Insecure Settings Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 125.0.1 (64 bits) | | # Vendor : https://www.sourcecodester.com/php/15169/simple-student-quarterly-resultgrade-system-php-and-mysql-free-source-code.html |...
Sistem Penyewaan Baju atau Pakaian Berbasis Web 1.0 SQL Injection
============================================================================================================================================= | # Title : Sistem Penyewaan Baju atau Pakaian Berbasis Web v1.0 Auth By Pass Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 125.0.1 (64 bits) | | # Vendor : https://shopee.co.id/Aplikasi-Sistem-Penyewaan-Baju-atau-Pakaian-Berbasis-Web-i.95672618.9716246272 |...
Microsoft CWE-73 Weakness
Hi @ll, <https://cwe.mitre.org/data/definitions/73.html> CWE-73: External Control of File Name or Path is a well-known and well-documented weakness.
Debian Security Advisory 5779-1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5779-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso September 29, 2024 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : cups CVE ID : CVE-2024-47175 Simone Margaritelli reported that cups, the Common UNIX Printing System, does not properly...
Student Enrollment 1.0 Arbitrary File Upload
============================================================================================================================================= | # Title : Student Enrollment v1.0 Remote File Upload Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 125.0.1 (64 bits) | | # Vendor : https://download-media.code-projects.org/2020/06/Student_Enrollment_In_PHP_With_Source_Code.zip |...
Debian Security Advisory 5776-1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5776-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff September 27, 2024 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : tryton-server CVE ID : not yet available Albert Cervera discovered two missing authorisation checks in the Tryton...
Simple Responsive Tourism Website 1.0 Cross Site Request Forgery
============================================================================================================================================= | # Title : Simple Responsive Tourism Website v1.0 CSRF Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 128.0.3 (64 bits) | | # Vendor : https://www.sourcecodester.com/sites/default/files/download/oretnom23/tourism_1.zip |...
Debian Security Advisory 5777-1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5777-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff September 27, 2024 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : booth CVE ID : CVE-2024-3049 It was discovered that the Booth cluster ticket manager failed to correctly validate some...
VegaBird Vooki 5.2.9 DLL Hijacking
==================================== CVE ID: CVE-2024-45874 Author: Iulian Florea Vendor: VegaBird Product: Vooki - Dynamic Web Application & REST API Vulnerability Scanner (DAST Tool) Vulnerability Type: DLL Hijacking ==================================== ==================================== Summary ==================================== A DLL hijacking vulnerability in VegaBird Vooki 5.2.9 allows attackers to execute arbitrary code / maintain persistence via placing a crafted DLL file in the...
Debian Security Advisory 5778-1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5778-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso September 29, 2024 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : cups-filters CVE ID : CVE-2024-47076 CVE-2024-47176 Debian Bug : 1082820 1082827 Simone Margaritelli reported several...
Debian Security Advisory 5779-1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5779-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso September 29, 2024 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : cups CVE ID : CVE-2024-47175 Simone Margaritelli reported that cups, the Common UNIX Printing System, does not properly...
Gentoo Linux Security Advisory 202409-27
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202409-27 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: tmux: Null Pointer Dereference Date: September 28, 2024 Bugs: #891783 ID: 202409-27 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== A...
Red Hat Security Advisory 2024-7346-03
The following advisory data is extracted from: https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_7346.json Red Hat officially shut down their mailing list notifications October 10, 2023. Due to this, Packet Storm has recreated the below data as a reference point to raise awareness.
Backdoor.Win32.Boiling MVID-2024-0696 Code Execution
Discovery / credits: Malvuln (John Page aka hyp3rlinx) (c) 2024 Original source: https://malvuln.com/advisory/80cb490e5d3c4205434850eff6ef5f8f.txt Contact: malvuln13@gmail.com Media: x.com/malvuln Threat: Backdoor.Win32.Boiling Vulnerability: Unauthenticated Remote Command Execution Description: The malware listens on TCP port 4369. Third party adversaries who can reach an infected host, can issue single OS commands to takeover the system undermining the initial infection.
Backdoor.Win32.Prorat.jz MVID-2024-0699 Buffer Overflow
Discovery / credits: Malvuln (John Page aka hyp3rlinx) (c) 2024 Original source: https://malvuln.com/advisory/277f9a4db328476300c4da5f680902ea.txt Contact: malvuln13@gmail.com Media: x.com/malvuln Threat: Backdoor.Win32.Prorat.jz Vulnerability: Remote Stack Buffer Overflow (SEH) Description: The RAT listens on TCP ports 51100,5112,5110 and runs an FTP service.
Backdoor.Win32.Benju.a MVID-2024-0700 Remote Command Execution
Discovery / credits: Malvuln (John Page aka hyp3rlinx) (c) 2024 Original source: https://malvuln.com/advisory/88922242e8805bfbc5981e55fdfadd71.txt Contact: malvuln13@gmail.com Media: x.com/malvuln Threat: Backdoor.Win32.Benju.a Vulnerability: Unauthenticated Remote Command Execution Family: Benju Type: PE32 MD5: 88922242e8805bfbc5981e55fdfadd71 SHA256: 7d34804173e09d0f378dfc8c9212fe77ff51f08c9d0b73d00a19b7045ddc1f0e Vuln ID: MVID-2024-0700 Disclosure: 09/27/2024 Description: The RAT listens...
Lynis Auditing Tool 3.1.2
Lynis Auditing Tool 3.1.2 Authored by Michael Boelen | Site cisofy.com Lynis is an auditing tool for Unix (specialists). It scans the system and available software to detect security issues. Beside security related information it will also scan for general system information, installed packages and configuration mistakes. This software aims in assisting automated auditing, software patch management, vulnerability and malware scanning of Unix based systems.
Simple College Website 1.0 Shell Upload
============================================================================================================================================= | # Title : Simple College Website 1.0 code injection Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 129.0.1 (64 bits) | | # Vendor : https://www.sourcecodester.com/php/14548/simple-college-website-using-htmlphpmysqli-source-code.html |...
Simple Music Management System 1.0 SQL Injection
============================================================================================================================================= | # Title : Simple Music Management System v1.0 Auth By PAss Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 130.0.0 (64 bits) | | # Vendor : https://www.kashipara.com/project/php/12978/music-management-system-in-php-php-project-source-code |...
Seo Panel 4.10.0 Remote File Inclusion
==================================================================================================================================== | # Title : Seo Panel 4.10.0 File inclusion Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 125.0.1 (64 bits) | | # Vendor : https://www.seopanel.org/download/ | ==================================================================================================================================== poc : [+]...
Simbarashe Financial Services 2.9.0 Insecure Direct Object Reference
==================================================================================================================================== | # Title : Simbarashe Financial Services v2.9.0 IDOR Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 125.0.1 (64 bits) | | # Vendor : https://www.sourcecodester.com/ | ==================================================================================================================================== poc :...
Aquatronica Control System 5.1.6 Hash Disclosure
============================================================================================================================================= | # Title : Aquatronica Control System 5.1.6 Hash Disclosure Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 130.0.1 (64 bits) | | # Vendor : https://www.aquatronica.com |...
Debian Security Advisory 5775-1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5775-1 security@debian.org https://www.debian.org/security/ Andres Salomon September 26, 2024 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : chromium CVE ID : CVE-2024-9120 CVE-2024-9121 CVE-2024-9122 CVE-2024-9123 Security issues were discovered in Chromium which...
Red Hat Security Advisory 2024-7203-03
The following advisory data is extracted from: https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_7203.json Red Hat officially shut down their mailing list notifications October 10, 2023. Due to this, Packet Storm has recreated the below data as a reference point to raise awareness.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Jay
Contact Jay, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack