Slackware 14.1 : kernel (SSA:2016-242-01)

New kernel packages are available for Slackware 14.1 to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2016-242-01. The text itself is copyright C Slackware Linux, In...

Linux/x86 - execve /bin/sh Shellcode (19 bytes)

/ Linux/x86 - execve /bin/sh shellcode 19 bytes Author: sajith Tested on: i686 GNU/Linux Shellcode Length: 19 SLAE - 750 Disassembly of section .text: 08048060 : 8048060: 31 c0 xor eax,eax 8048062: 50 push eax 8048063: 68 2f 2f 73 68 push 0x68732f2f 8048068: 68 2f 62 69 6e push 0x6e69622f 804806d...

Linux/x86 - execve /bin/sh Shellcode (19 bytes)

Linux/x86 - execve /bin/sh Shellcode 19 bytes. Shellcode exploit for Linx86 platform / Linux/x86 - execve /bin/sh shellcode 19 bytes Author: sajith Tested on: i686 GNU/Linux Shellcode Length: 19 SLAE - 750 Disassembly of section .text: 08048060 : 8048060: 31 c0 xor eax,eax 8048062: 50 push eax...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libc6-i686 package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Arch Linux Security Layer: ArchStrike

Arch Linux Security Layer done the Arch Way optimized for i686, x8664, ARMv6, and ARMv7 An Arch Linux repository for security professionals and enthusiasts. Done the Arch Way and optimized for i686, x8664, ARMv6, and ARMv7. ArchStrike is a penetration testing and security layer on top of Arch...

Medium: php56, php55

Issue Overview: A stack overflow vulnerability was reported that may occur when decompressing tar archives due to phartarwriteheaders potentially copying non-terminated linknames from entries parsed by pharparsetarfile. Affected Packages: php56, php55 Issue Correction: Run yum update php56 or yum...

Low: pngcrush

Issue Overview: A double-free bug was discovered in pngcrush's handling of the sPLT chunk. A malicious PNG could crash the pngcrush process. CVE-2015-7700 Affected Packages: pngcrush Issue Correction: Run yum update pngcrush or yum update --advisory ALAS-2016-646 to update your system. New...

openSUSE Security Update : flash-player (openSUSE-2015-603)

Adobe Flash Player was updated to 11.2.202.521 APSB15-23 bsc946880 fixing several security issues : More information can be found on : https://helpx.adobe.com/security/products/flash-player/apsb15-23.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

Penetration Testers Distro: Pentoo

Pentoo is a Live CD and Live USB designed for penetration testing and security assessment. Based on Gentoo Linux , Pentoo is provided both as 32 and 64 bit installable livecd. Pentoo is also available as an overlay for an existing Gentoo installation. It features packet injection patched wifi...

Medium: php55

Issue Overview: PHP process crashes when processing an invalid file with the "phar" extension. CVE-2015-5589 As discussed upstream https://bugs.php.net/bug.php?id=69669, mysqlnd is vulnerable to the attack described in https://www.duosecurity.com/blog/backronym-mysql-vulnerability. CVE-2015-3152...

linux/x86 - /bin/nc -le /bin/sh -vp 17771 Shellcode - 58 Bytes

/ Linux x86 /bin/nc -le /bin/sh -vp 17771 shellcode This shellcode will listen on port 17771 and give you /bin/sh Shellcode Author: Oleg Boytsev Tested on: Debian GNU/Linux 7/i686 Shellcode Length: 58 Command: gcc -m32 -z execstack x86Linuxnetcatshellcode.c -o x86Linuxnetcatshellcode global start...

Important: php54

Issue Overview: A use-after-free flaw was found in the way PHP's unserialize function processed data. If a remote attacker was able to pass crafted input to PHP's unserialize function, they could cause the PHP interpreter to crash or, possibly, execute arbitrary code. CVE-2015-0231 An integer...

Important: java-1.7.0-openjdk

Issue Overview: Multiple flaws were discovered in the Libraries, 2D, and Hotspot components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions. CVE-2014-6506, CVE-2014-6531, CVE-2014-6502, CVE-2014-6511, CVE-2014-6504, CVE-2014-65...

Important: nss-softokn

Issue Overview: A flaw was found in the way NSS parsed ASN.1 Abstract Syntax Notation One input from certain RSA signatures. A remote attacker could use this flaw to forge RSA certificates by providing a specially crafted signature to an application using NSS. Affected Packages: nss-softokn Issue...

Linux i686 - pacman -R <package> - 59 bytes

No description provided by source. / Title : Linux i686 - pacman -R package - 59 bytes Author : Jonathan Salwan Mail : submit ! shell-storm.org Web : http://www.shell-storm.org Pacman is a software package manager, developed as part of the Arch Linux distribution. With this shellcode you can remo...

Linux i686 - pacman -S <package> (default package: backdoor) - 64 bytes

No description provided by source. / Title : Linux i686 - pacman -S package default package: backdoor - 64 bytes Author : Jonathan Salwan Mail : submit ! shell-storm.org Web : http://www.shell-storm.org Pacman is a software package manager, developed as part of the Arch Linux distribution. With...

Low: python-crypto

Issue Overview: The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator PRNG before allowing a child process to access it, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging a race...

Mageia release 2 (32bit) sock_diag_handlers Local root exploit

Exploit for linux platform in category local exploits / Exploit Title: Mageia release 2 32bit sockdiaghandlers Local root exploit Date: 22-03-2013 Exploit Author: email protected | @y3dips Vendor Homepage: http://www.mageia.org/en/ Software Link: http://www.mageia.org/en/downloads/ Version: Magei...

Important: java-1.6.0-openjdk

Issue Overview: An improper permission check issue was discovered in the JMX component in OpenJDK. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions. CVE-2013-1486 It was discovered that OpenJDK leaked timing information when decrypting TLS/SSL protoc...

Important: bind

Issue Overview: A flaw was found in the way BIND handled certain combinations of resource records. A remote attacker could use this flaw to cause a recursive resolver, or an authoritative server in certain configurations, to lockup. CVE-2012-5166 Affected Packages: bind Issue Correction: Run yum...