Updated kernel packages fix security vulnerabilities

This kernel update is based on the upstream 4.14.62 and fixes at least the following security issues: Security researchers from FICORA have identified a remote denial of service attack against the Linux kernel caused by inefficient implementation of TCP segment reassembly, named "SegmentSmack". A...

DEBIAN-CVE-2018-14678

An issue was discovered in the Linux kernel through 4.17.11, as used in Xen through 4.11.x. The xenfailsafecallback entry point in arch/x86/entry/entry64.S does not properly maintain RBX, which allows local users to cause a denial of service uninitialized memory usage and system crash. Within Xen...

UBUNTU-CVE-2018-14678

An issue was discovered in the Linux kernel through 4.17.11, as used in Xen through 4.11.x. The xenfailsafecallback entry point in arch/x86/entry/entry64.S does not properly maintain RBX, which allows local users to cause a denial of service uninitialized memory usage and system crash. Within Xen...

Cross-site Scripting in loofah

Loofah allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments. Users are affected if running Loofah = 2.9.2. JRuby users are not affected...

GHSA-X7RV-CR6V-4VM4 Cross-site Scripting in loofah

Loofah allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments. Users are affected if running Loofah = 2.9.2. JRuby users are not affected...

Cross-site Scripting (XSS)

loofah is vulnerable to cross-site scripting XSS attacks. The vulnerability can occur under specific conditions when running on MRI or RBX and while using libxml2 = 2.9.2. It exists as the scrubattributes method in lib/loofah/html5/scrub.rb failed to sanitize some non-whitelisted attributes...

Linux - Reverse Shell Shellcode (66 bytes)

Linux - Reverse Shell Shellcode 66 bytes. Shellcode exploit for Linux platform ;The MIT License MIT ;Copyright c 2017 Robert L. Taylor ;Permission is hereby granted, free of charge, to any person obtaining a ;copy of this software and associated documentation files the “Software”, ;to deal in the...

Wordpress RBX Gallery Plugin 2.1 - Arbitrary File Upload

No description provided by source. Description : Wordpress Plugins - RBX Gallery Multiple Arbitrary File Upload Vulnerability Version : 2.1 Link : http://wordpress.org/extend/plugins/rbxgallery/ Plugins : http://downloads.wordpress.org/plugin/rbxgallery.2.1.zip Date : 03-06-2012 Google Dork :...

WordPress RBX Gallery 2.1 File Upload

File upload vulnerability in WordPress RBX Gallery plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

CVE-2012-3575

Unrestricted file upload vulnerability in uploader.php in the RBX Gallery plugin 2.1 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/rbxslider...

Unrestricted file upload

Unrestricted file upload vulnerability in uploader.php in the RBX Gallery plugin 2.1 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/rbxslider...

CVE-2012-3575

Summary (CVE-2012-3575) : The RBX Gallery WordPress plugin version 2.1 is affected by an unrestricted file upload in uploader.php, allowing remote attackers to execute arbitrary code by uploading a file with an executable extension and then accessing it via uploads/rbxslider. Connected sources co...

CVE-2012-3575

Unrestricted file upload vulnerability in uploader.php in the RBX Gallery plugin 2.1 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/rbxslider...

WordPress RBX Gallery 2.1 Shell Upload

No description provided by source. Description : Wordpress Plugins - RBX Gallery Multiple Arbitrary File Upload Vulnerability Version : 2.1 Link : http://wordpress.org/extend/plugins/rbxgallery/ Plugins : http://downloads.wordpress.org/plugin/rbxgallery.2.1.zip Date : 03-06-2012 Google Dork :...

WordPress Plugin RBX Gallery 2.1 - Arbitrary File Upload

WordPress Plugin RBX Gallery 2.1 - Arbitrary File Upload Description : Wordpress Plugins - RBX Gallery Multiple Arbitrary File Upload Vulnerability Version : 2.1 Link : http://wordpress.org/extend/plugins/rbxgallery/ Plugins : http://downloads.wordpress.org/plugin/rbxgallery.2.1.zip Date :...

WordPress Plugin RBX Gallery 2.1 - Arbitrary File Upload

Description : Wordpress Plugins - RBX Gallery Multiple Arbitrary File Upload Vulnerability Version : 2.1 Link : http://wordpress.org/extend/plugins/rbxgallery/ Plugins : http://downloads.wordpress.org/plugin/rbxgallery.2.1.zip Date : 03-06-2012 Google Dork : inurl:/wp-content/plugins/rbxgallery/...

WordPress RBX Gallery 2.1 Shell Upload

Description : Wordpress Plugins - RBX Gallery Multiple Arbitrary File Upload Vulnerability Version : 2.1 Link : http://wordpress.org/extend/plugins/rbxgallery/ Plugins : http://downloads.wordpress.org/plugin/rbxgallery.2.1.zip Date : 03-06-2012 Google Dork : inurl:/wp-content/plugins/rbxgallery/...

WordPress RBX Gallery Plugin 2.1 - Arbitrary File Upload

RBX Gallery plugin is prone to an arbitrary file upload vulnerability. Restricted access to this script is not properly realized. In that way an attacker can to upload files containing malicious PHP code and run it in the context of the web server process. Other attacks are also possible. Solutio...

Wordpress Plugins - RBX Gallery Multiple Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Description : Wordpress Plugins - RBX Gallery Multiple Arbitrary File Upload Vulnerability Version : 2.1 Link : http://wordpress.org/extend/plugins/rbxgallery/ Plugins : http://downloads.wordpress.org/plugin/rbxgallery.2.1.zip Google Dork :...