The vulnerability of the Fly-wm file manager in the Astra Linux operating system allows a hacker to gain unauthorized access to the user’s session, as well as to cause a service failure.

The vulnerability of the Fly-wm file manager in the Astra Linux operating system is related to an error that causes buffer overflows and unauthorized access to a locked user’s session when entering a specially crafted, large-length password. Additionally, there are security issues with the sumac...

The vulnerability of the X Window System Xorg-server on the Astra Linux operating system allows a hacker to gain access to confidential data.

The vulnerability of the X Window System Xorg-server on the Astra Linux operating system is related to the lack of restrictions on the use of XungrabKeyboard and XgrabKeyboard functions for untrusted users, allowing the implementation of software tools with “keylogger” functionality. Exploiting...

The vulnerability of the Postgresql database management system in the Astra Linux operating system allows a perpetrator to gain access to confidential data and cause service interruptions.

The vulnerability of the Postgresql database management system in the Astra Linux operating system is related to an error in the interaction with LDAP via parsec calls when retrieving user security attributes. Exploiting this vulnerability allows a malicious actor to gain access to information...

The vulnerability of Astra Linux Directory service (ALD), a component of the Astra Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the Astra Linux Directory Service ALD in the Astra Linux operating system is related to an error in the command for accessing cache files of directory attributes. This error causes these files to be constantly recreated. Exploiting this vulnerability allows a malicious actor,...

PT-2018-19309

Уязвимость утилиты fly-admin-autostart для настройки автозапуска программ операционной системы Astra Linux связана с отсутствием проверки значения указателя на равенство NULL. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2018-2854

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to a memory deallocation error in the ddb open handler implementation in the Astra Linux kernel, specifically in the ddbridge.ko module. The error occurs in the ddb...

PT-2018-2855

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to a memory deallocation error in the dc395x interrupt handler of the Astra Linux kernel, specifically in the find dcb function called from the dc395x interrupt...

PT-2018-2853

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to a memory deallocation error in the ems usb disconnect handler of the Astra Linux kernel. Specifically, in the ems usb probe function within the...

PT-2018-2851

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to a memory leak in the virtio pci remove handler of the Astra Linux kernel loadable module drivers/virtio/virtio pci.ko. The problem arises from the allocation of...

PT-2018-2852

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to a memory deallocation error in the hwarc probe handler of the Astra Linux kernel, specifically in the drivers/uwb/hwa-rc.ko module. The error occurs when memory is...

astra-arms.ch XSS vulnerability

Open Bug Bounty ID: OBB-667641 Description| Value ---|--- Affected Website:| astra-arms.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

REST API Penetration Testing: Astra

REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can automatically...

porchester-cars.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-553109 Description| Value ---|--- Affected Website:| porchester-cars.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

The vulnerability of the `psf_binheader_writef` function in the `common.c` file of the `libsndfile` library in the Astra Linux operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data, or cause service failures.

The vulnerability of the psfbinheaderwritef function in the common.c file of the libsndfile library in the Astra Linux operating system is related to a buffer overflow issue. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

astra-sa.com.br XSS vulnerability

On the 18.11.2017 security researcher reported a XSS vulnerability affecting the astra-sa.com.br website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 18 November, 2017...

parts.isuzu.astra.co.id XSS vulnerability

Vulnerable URL: http://parts.isuzu.astra.co.id/marketing/catalog/search.php?search=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

Windows Gather Trillian Password Extractor

This module extracts account password from Trillian & Trillian Astra v4.x-5.x instant messenger. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Trillian Password Extractor',...

Joomla Astra SQL Injection

Exploit Title: Comastra SQL Injection Vuln. Author: Err0r Date: 08.05.2011 E-mail: [email protected] Category: Web App. Note : Warning. Demo: http://www.hankrum.brit-invest.com/index.php?option=comastra Exploit : http://www.hankrum.brit-invest.com/index.php?option=comastra&S=3&F=6SQLInjecti...