When Apache OpenOffice and LibreOffice are spawn as an office server, they bind an Apache UNO API that allows for remote code execution.
8cddb7ad2dfb2dbc6da9b983b4db2b73dc316bef58ef8cdacac477383bf65d80
Debian Linux Security Advisory 4401-1 - Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform various Cross-Side Scripting (XSS) and PHP injections attacks, delete files, leak potentially sensitive data, create posts of unauthorized types, or cause denial-of-service by application crash.
492fe3e260dc593d29548bd956d9378ccf1ca3fff50153ea674dfbee1da8a7d4
XNU suffers from a copy-on-write behavior bypass via mount of user-owned filesystem image.
1cbe8d9b00a17be65ba28a162ea9cc8b19a0075c2fd69b22351c86753940b808
FileZilla version 3.40.0 suffers from multiple denial of service vulnerabilities.
7a75b71c981fd008503e9011ab2940914e615cf66c5aef326cfb91230482af31
OOP CMS BLOG version 1.0 suffers from cross site request forgery and remote SQL injection vulnerabilities.
1e7b5416a28e061fb5c492f0295c7e55010fd1f08451b69be2cf4b61f5e0c6e4
CMSsite version 1.0 suffers from multiple cross site request forgery vulnerabilities.
241748063ab6d6e8091f6e8021490521b8b3dcbbbccd35e322ea0b5b179a10f0
Debian Linux Security Advisory 4398-1 - Multiple security issues were found in PHP, a widely-used open source accesses were found in the xmlrpc, mbstring and phar extensions and the dns_get_record() function.
bb6f100c0cfb913e1e3fe016d99002b7a50d51a8a65b9ce07de097341cf78649
Debian Linux Security Advisory 4400-1 - Juraj Somorovsky, Robert Merget and Nimrod Aviram discovered a padding oracle attack in OpenSSL.
8b3bd6404f65745161cc6a1873fed7ddf1ec54093e6aa6e4528362789df0c5cd
Debian Linux Security Advisory 4399-1 - Joey Hess discovered that the aggregate plugin of the Ikiwiki wiki compiler was susceptible to server-side request forgery, resulting in information disclosure or denial of service.
d6bb4a97c23871e9c6c546e71817c31355213c5d28bda7b5d2dda772e53a43ce
Debian Linux Security Advisory 4397-1 - Garming Sam reported an out-of-bounds read in the ldb_wildcard_compare() function of ldb, a LDAP-like embedded database, resulting in denial of service.
153b008bf81b6e3f393679c1f1a9177097ff8096fd7c14b17a9a2a1e6a8a5a63
PRTG Network Monitor version 7.1.3.3378 suffers from multiple cross site scripting vulnerabilities.
929aabab18dd36ddc0d64df2ed1835203b3bfafb3b51f2c7989ed4531b579fda
vBulletin version 4.2.3 with vBSecurity version 2.2.2 Pro suffers from an open redirection vulnerability.
bc6ebc120e30d3ea29b92fb72be3daedbec5dad75d04c10b45472cd231bfb846
vBulletin version 3.8.x with vBadvanced CMPS version 3.2.3 suffers from an open redirection vulnerability.
e79c231fdfcbb61b29966455c9446f58d62abf5a015fe3873f40b64d94f875ab
vBulletin version 3.8.4 with Zoints SEO version 2.3.2 suffers from an open redirection vulnerability.
f9d316af1834c1bbf3910ae82e0316f9f81d6f631edda1d0d6017be15d9bfb65
This archive contains all of the 319 exploits added to Packet Storm in February, 2019.
1bcaf072acbe7fc8862dec9857fb641a8d7c2eaf91d8ebb36d996758af7943b5