security-advisories

Threat Lance Security Advisories Public security advisory rep...

PYSEC-2026-1531 Langroid has a Code Injection vulnerability in LanceDocChatAgent through vector_store

Summary LanceDocChatAgent uses pandas eval through computefromdocs: https://github.com/langroid/langroid/blob/18667ec7e971efc242505196f6518eb19a0abc1c/langroid/vectorstore/base.pyL136-L150 As a result, an attacker may be able to make the agent run malicious commands through QueryPlan.dataframecal...

EUVD-2008-4696

Malware in sbrugna...

EUVD-2009-2911

Malware in sbrugna...

Security News This Week: Sensitive US Military Emails Exposed

Plus: Iran’s secret torture black sites, hacking a bank account with AI-generated voice, and Lance Bass’ unhinged encounter in Russia...

lance.com.br Cross Site Scripting vulnerability OBB-2460540

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Confessions of an ID Theft Kingpin, Part II

Yesterdays piece told the tale of Hieu Minh Ngo, a hacker the U.S. Secret Service described as someone who caused more material financial harm to more Americans than any other convicted cybercriminal. Ngo was recently deported back to his home country after serving more than seven years in prison...

Congressional Report on the 2017 Equifax Data Breach

The US House of Representatives Committee on Oversight and Government Reform has just released a comprehensive report on the 2017 Equifax hack. It's a great piece of writing, with a detailed timeline, root cause analysis, and lessons learned. Lance Spitzner also commented on this. Here is my...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : GnuPG vulnerabilities (USN-3675-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3675-1 advisory. Marcus Brinkmann discovered that during decryption or verification, GnuPG did not properly filter out terminal sequences when...

PHP-Lance 1.52 SQL Injection

Exploit Title: PHP-Lance 1.52 - 'subcat' Parameter SQL Injection Dork: N/A Date: 21.08.2017 Vendor Homepage: http://www.scriptdemo.com/ Software Link: http://www.scriptdemo.com/details/phplance/ Demo: http://www.scriptdemo.com/php-lance/ Version: 1.52 Category: Webapps Tested on:...

PHP-Lance 1.52 - subcat SQL Injection

PHP-Lance 1.52 - subcat SQL Injection Exploit Title: PHP-Lance 1.52 - 'subcat' Parameter SQL Injection Dork: N/A Date: 21.08.2017 Vendor Homepage: http://www.scriptdemo.com/ Software Link: http://www.scriptdemo.com/details/phplance/ Demo: http://www.scriptdemo.com/php-lance/ Version: 1.52 Categor...

PHP-Lance 1.52 - 'subcat' SQL Injection

Exploit Title: PHP-Lance 1.52 - 'subcat' Parameter SQL Injection Dork: N/A Date: 21.08.2017 Vendor Homepage: http://www.scriptdemo.com/ Software Link: http://www.scriptdemo.com/details/phplance/ Demo: http://www.scriptdemo.com/php-lance/ Version: 1.52 Category: Webapps Tested on:...

PHP-Lance 1.52 - subcat Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: PHP-Lance 1.52 - 'subcat' Parameter SQL Injection Dork: N/A Date: 21.08.2017 Vendor Homepage: http://www.scriptdemo.com/ Software Link: http://www.scriptdemo.com/details/phplance/ Demo: http://www.scriptdemo.com/php-lance/...

Trillian 0.73/0.74 IRC PRIVMSG Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5755/info Trillian is an instant messaging client that supports a number of protocols including IRC, ICQ, MSN. It is available for Microsoft Windows systems. A buffer overflow has been discovered in Trillian version .73 a...

PHP Lance v1.52 SQL / XSS Vulnerabilties

Exploit for php platform in category web applications PHP Lance v1.52 Multiple Vulnerabilties ======================================================================= .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://www.scriptdemo.com/ .:. Tested On Demo :...

Directory traversal

Multiple directory traversal vulnerabilities in BitmixSoft PHP-Lance 1.52 allow remote attackers to read arbitrary files via a .. dot dot in the 1 language parameter to show.php and 2 in parameter to advancedsearch.php...

CVE-2009-2923

Multiple directory traversal vulnerabilities in BitmixSoft PHP-Lance 1.52 allow remote attackers to read arbitrary files via a .. dot dot in the 1 language parameter to show.php and 2 in parameter to advancedsearch.php...

CVE-2009-2923

Multiple directory traversal vulnerabilities in BitmixSoft PHP-Lance 1.52 allow remote attackers to read arbitrary files via a .. dot dot in the 1 language parameter to show.php and 2 in parameter to advancedsearch.php...

CVE-2009-2923

The CVE-2009-2923 entry concerns BitmixSoft PHP-Lance 1.52 with two directory-traversal flaws. The vulnerability allows remote attackers to read arbitrary files by injecting a .. payload in (1) the language parameter to show.php and (2) in the parameter to advanced_search.php. Affected software i...

PHP-Lance 1.52 Local File Inclusion

Name : PHP-Lance v1.52 price US $349.95 :p Demo : http://www.scriptdemo.com/php-lance/ ------------------------------------------------------------------------ |Author : jetli007 |alkhari9007ATgmailDOTcom |www.vxx9.cc |Thx&Greets to: 5D;taishi;dr.php;!bad boy!;psycho;ABK;reno...