Packet Storm

The No cON Name 2024 call for papers has been announced. It will be held in Barcelona, Spain, from November 18th through the 20th, 2024.

Ubuntu Security Notice 6973-4 - It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel, leading to a null pointer dereference vulnerability. A privileged local attacker could use this to possibly cause a denial of service. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.

Taskhub version 2.8.8 suffers from an ignored default credential vulnerability.

Webpay E-Commerce version 1.0 suffers from a remote SQL injection vulnerability.

SPIP version 4.2.9 suffers from a code execution vulnerability.

Ubuntu Security Notice 6984-1 - It was discovered that WebOb incorrectly handled certain URLs. An attacker could possibly use this issue to control a redirect or forward to another URL.

Ubuntu Security Notice 6983-1 - Zeng Yunxiang discovered that FFmpeg incorrectly handled memory during video encoding. An attacker could possibly use this issue to perform a denial of service, or execute arbitrary code.

Online Traffic Offense version 1.0 suffers from a cross site request forgery vulnerability.

Penglead version 2.0 suffers from a cross site scripting vulnerability.

PPDB version 2.4-update 6118-1 suffers from a cross site request forgery vulnerability.