Linksys X2000 Command Execution Vulnerability

The Linksys X2000 suffers from a remote, unauthenticated command execution vulnerability that scores root privileges. Hello, I have found on my router, a Linksys X2000, that there is a poor validation of the IP target in the ping diagnostics web page http://$routerip/Diagnostics.asp. This can be...

ZyXEL PMG5318-B20A diagnostic ping function input validation vulnerability

ZyXEL PMG5318-B20A is a wireless switch product from Hopkins ZyXEL Technology. A security vulnerability exists in the 'PingIPAddr' parameter in the diagnostic ping function of the ZyXEL PMG5318-B20A using firmware version V100AANC0b5. A remote attacker can exploit the vulnerability to execute...

Gping - Ping, But With A Graph

Ping, but with a graph Install and run Created/tested with Python 3.4, should run on 2.7 will require the statistics module though. pip3 install pinggraph Tested on Windows and Ubuntu, should run on OS X as well. After installation just run: gping yourhost If you don't give a host then it pings...

SolarWinds Log and Event Manager < 6.2.0 Multiple Remote Command Execution Vulnerabilities

According to its self-reported version number, the SolarWinds Log and Event Manager installed on the remote host is prior to version 6.2.0. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the messagebroker/nonsecurestreamingamf service when using the traceroute...

SolarWinds Log and Event Manager Arbitrary Code Execution Vulnerability (CNVD-2015-06702)

SolarWinds Log and Event Manager is a log and event manager that provides real-time log analysis, memory event correlation, and threat attack response. A security vulnerability exists in the command line management console CMC of SolarWinds Log and Event Manager. This allows remote attackers to...

SUSE: Security Advisory for Xen (SUSE-SU-2015:0613-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-7840

The command line management console CMC in SolarWinds Log and Event Manager LEM before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature...

Security feature bypass

The command line management console CMC in SolarWinds Log and Event Manager LEM before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature...

PT-2015-7638

Name of the Vulnerable Software and Affected Versions SolarWinds Log and Event Manager versions prior to 6.2.0 Description The issue allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature in the command line management console of the affected software...

CVE-2015-7840: Undefined Security Weakness

The command line management console CMC in SolarWinds Log and Event Manager LEM before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature...

Cross site scripting

Cross-site scripting XSS vulnerability in the Diagnosis Ping feature in the administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote attackers to inject arbitrary web script or HTML via an unspecified field...

CVE-2015-6466

CVE-2015-6466 is an XSS vulnerability in the Diagnosis Ping feature of the administrative web interface on Moxa EDS-405A/EDS-408A switches, exploitable via an unspecified field in firmware prior to 3.6. Affected devices run Moxa’s EDS-405A/EDS-408A series; CVSSv2 base score 4.3 (AV:N/AC:M/Au:N/C:...

CVE-2015-6466: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Diagnosis Ping feature in the administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote attackers to inject arbitrary web script or HTML via an unspecified field...

PT-2015-3452

Name of the Vulnerable Software and Affected Versions Moxa EDS-405A and Moxa EDS-408A versions prior to 3.6 Description The issue is related to insufficient protection of the web page structure in the Diagnosis Ping feature of the administrative web interface. This can be exploited by a remote...

RHEL 7 : kernel-rt (RHSA-2015:1565)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1565 advisory. - kernel: netfilter connection tracking extensions denial of service CVE-2014-9715 - kernel: execution in the early microcode loader...

PT-2015-2963

Name of the Vulnerable Software and Affected Versions ZyXEL PMG5318-B20A versions prior to 1.00AANC.2C0 Description The issue is related to the diagnostic-ping implementation, which has inadequate access restrictions. This allows a remote attacker to execute arbitrary commands through the...

Moderate: Red Hat Security Advisory: httpd24-httpd security update

Updated httpd24-httpd packages that fix multiple security issues are now available for Red Hat Software Collections 2. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

httpd: Possible mod_lua crash due to websocket bug

A denial of service flaw was found in the way the modlua httpd module processed certain WebSocket Ping requests. A remote attacker could send a specially crafted WebSocket Ping packet that would cause the httpd child process to crash...

kernel: ping sockets: use-after-free leading to local privilege escalation

It was found that the Linux kernel's ping socket implementation did not properly handle socket unhashing during spurious disconnects, which could lead to a use-after-free flaw. On x86-64 architecture systems, a local user able to create ping sockets could use this flaw to crash the system. On...

Amazon Linux AMI : httpd24 (ALAS-2015-579)

It was discovered that in httpd 2.4, the internal API function apsomeauthrequired could incorrectly indicate that a request was authenticated even when no authentication was used. An httpd module using this API function could consequently allow access that should have been denied. CVE-2015-3185...