ATutor LMS 2.2.4 Weak Password Reset Hash

Exploit Title: ATutor LMS 2.2.4 - Weak Password Reset Hash Date: 2020-05-05 Exploit Author: Hodorsec Version: 2.2.4 Software Link: https://atutor.github.io/atutor/downloads.html Vendor Homepage: https://atutor.github.io Tested on: Debian 10 x64 - PHP 7.3.15-3 Problem: While the original intention...

Preparing for Y2038 (Already?!)

It somehow doesn't seem that long ago, but nineteen years ago during Y2K I spent my New Year's Eve in the Akamai Network Operations center, waiting to respond to anything that might go awry as the clock struck midnight in key time zones such as Greenwich and Boston. As of January 9, 2019, we are...

Debian DSA-2642-1 : sudo - several issues

Several vulnerabilities have been discovered in sudo, a program designed to allow a sysadmin to give limited root privileges to users. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2013-1775 Marco Schoepl discovered an authentication bypass when the...

DSA-2642-1 sudo - several issues

Bulletin has no description...

Debian Security Advisory DSA 2642-1 (sudo - several issues)

Several vulnerabilities have been discovered in sudo, a program designed to allow a sysadmin to give limited root privileges to users. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-1775 Marco Schoepl discovered an authentication bypass when the clock...