FreeBSD Servers Compromised; Third-Party Software Packages Could be Impacted

FreeBSD is warning users of the open source UNIX-like operating system about a compromise of a pair of servers used to build third-party software. The organization said attackers had sufficient access to affect third-party packages distributed by the project and suggests that any software install...

Tropos Wireless Mesh Routers

Overview This advisory is a follow-up to the original advisory titled ICSA-12-297-01P—Tropos Wireless Mesh Routers Insufficient Entropy Vulnerability that was published October 23, 2012, on the ICS-CERT secure Portal library. This advisory provides mitigation details for a vulnerability that...

RedHat Update for kexec-tools RHSA-2011:1532-03

Check for the Version of kexec-tools OpenVAS Vulnerability Test RedHat Update for kexec-tools RHSA-2011:1532-03 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

F5 BIG-IP remote root authentication bypass Vulnerability(CVE-2012-1493)

No description provided by source. Advisory ID: MATTA-2012-002 CVE reference: CVE-2012-1493 Affected platforms: BIG-IP platforms without SCCP Version: F5 BigIP 11.x F5 BigIP 10.x F5 BigIP 9.x Date: 2012-February-16 Security risk: High Vulnerability: F5 BIG-IP remote root authentication bypass...

Open Season on Open Source

A flurry of attacks on open source servers, operating systems and software also permeated the headlines this year, with a compromise of the repository for the Linux source code leading the way. It appeared the code wasn’t compromised when the attack was initially reported, yet weeks after, the...

Multi Gather OpenSSH PKI Credentials Collection

This module will collect the contents of all users' .ssh directories on the targeted machine. Additionally, knownhosts and authorizedkeys and any other files are also downloaded. This module is largely based on firefoxcreds.rb. This module requires Metasploit: https://metasploit.com/download...

Fedora Project Mandating New Password and SSH Key Change

Recent site breaches like those at Kernel.org and Linux have prompted the Fedora Project to contact users to change their password and SSH public key before November 30 to avoid having their accounts marked as inactive. In a message posted on Wednesday to the Developer’s Announcements mailing lis...

Fedora Web Site Hacked, But the Servers Undamaged !

An attacker who had credentials and the use of taxpayer Fedora Fedora server, but the project leaders say the assailants apparently managed to compromise any software or servers. An attacker has attempted to compromise the servers for the Fedora Project, the community version of Red Hat Enterpris...

Fedora System Compromised, But No Changes Made

The infrastructure of the Fedora Project was compromised over the weekend and an account belonging to a Fedora contributor was taken over by an attacker. However, Fedora officials said they don’t believe that the attacker was able to push any changes to the Fedora package system or make any actua...

Ubuntu PAM MOTD Local Root

!/bin/bash Exploit Title: Ubuntu PAM MOTD local root Date: July 9, 2010 Author: Anonymous Software Link: http://packages.ubuntu.com/ Version: pam-1.1.0 Tested on: Ubuntu 9.10 Karmic Koala, Ubuntu 10.04 LTS Lucid Lynx CVE: CVE-2010-0832 Patch Instructions: sudo aptitude -y update; sudo aptitude -y...

Ubuntu PAM MOTD Local Root Exploit

Exploit for linux platform in category local exploits ================================== Ubuntu PAM MOTD Local Root Exploit ================================== !/bin/bash Exploit Title: Ubuntu PAM MOTD local root Date: July 9, 2010 Author: Anonymous Software Link: http://packages.ubuntu.com/...

SLAD Microsoft Baseline Security Analyzer OS run

This script connects to SLAD on a remote host to run remote the Microsoft Baseline Security Analyzer. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenV...

SLAD Microsoft Baseline Security Analyzer ALL run

This script connects to SLAD on a remote host to run remote the Microsoft Baseline Security Analyzer. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenV...

TANDBERG Video Communication Server multiple security vulnerabilities

Static ssh key, authentication bypass, files access...

freeSSHd 1.2.4 - Denial of Service

!/usr/bin/env python """ Exploit Title: FreeSSHD 1.2.4 Remote Buffer Overflow DoS Date: 22-03-2010 Author: Pi3rrot - tagazok At gmail D0t com ak37@freenode Software Link: http://www.freesshd.com/ Version: 1.2.4 Tested on: Windows XP SP3 fr Explications : This pof just may crash FreeSSHD 1.2.4 on...

freeSSHd 1.2.4 - Denial of Service

freeSSHd 1.2.4 - Denial of Service !/usr/bin/env python """ Exploit Title: FreeSSHD 1.2.4 Remote Buffer Overflow DoS Date: 22-03-2010 Author: Pi3rrot - tagazok At gmail D0t com ak37@freenode Software Link: http://www.freesshd.com/ Version: 1.2.4 Tested on: Windows XP SP3 fr Explications : This po...

FreeSSHD 1.2.4 Buffer Overflow Denial Of Service

!/usr/bin/env python """ Exploit Title: FreeSSHD 1.2.4 Remote Buffer Overflow DoS Date: 22-03-2010 Author: Pi3rrot - tagazok At gmail D0t com ak37@freenode Software Link: http://www.freesshd.com/ Version: 1.2.4 Tested on: Windows XP SP3 fr Explications : This pof just may crash FreeSSHD 1.2.4 on...

SLAD Netstat -natcp run

This script connects to SLAD on a remote host to run remote the Microsoft Baseline Security Analyzer. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenV...

SLAD Microsoft Baseline Security Analyzer Updates run

This script connects to SLAD on a remote host to run remote the Microsoft Baseline Security Analyzer. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenV...

SLAD Microsoft (R) Windows (R) Resource Checker run

This script connects to SLAD on a remote host to run remote the Microsoft R Windows R Resource Checker. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in...