PT-2017-7388

Name of the Vulnerable Software and Affected Versions KNX ETS version 4.1.5 Build 3246 Description The issue is related to a buffer overflow in the Group messages monitor Falcon that allows remote attackers to execute arbitrary code via a crafted KNXnet/IP UDP packet. Recommendations For KNX ETS...

CVE-2015-8299: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Group messages monitor Falcon in KNX ETS 4.1.5 Build 3246 allows remote attackers to execute arbitrary code via a crafted KNXnet/IP UDP packet...

PRTG Network Monitor < 17.3.33.265 XSS Vulnerability

PRTG Network Monitor is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Dokodemo eye Smart HD SCR02HD OS Command Injection Vulnerability

Dokodemo eye Smart HD SCR02HD is a wireless monitor from NIPPON ANTENNA. The Dokodemo eye Smart HD SCR02HD suffers from an OS command injection vulnerability that can be exploited by an attacker to execute arbitrary operating system commands...

Dokodemo eye Smart HD SCR02HD Unauthorized Access Vulnerability

Dokodemo eye Smart HD SCR02HD is a wireless monitor from NIPPON ANTENNA. An unauthorized access vulnerability exists in the Dokodemo eye Smart HD SCR02HD, which can be exploited by a remote attacker to view sensitive information and modify configuration...

Dokodemo eye Smart HD SCR02HD Arbitrary PHP Code Execution Vulnerability

Dokodemo eye Smart HD SCR02HD is a wireless monitor from NIPPON ANTENNA. The Dokodemo eye Smart HD SCR02HD suffers from an arbitrary PHP code execution vulnerability that can be exploited by an attacker to execute arbitrary PHP code on the product...

Cross site scripting

Cross-site scripting XSS-STORED vulnerability in the DEVICES OR SENSORS functionality in Paessler PRTG Network Monitor before 17.3.33.2654 allows authenticated remote attackers to inject arbitrary web script or HTML...

CVE-2017-12879

Cross-site scripting XSS-STORED vulnerability in the DEVICES OR SENSORS functionality in Paessler PRTG Network Monitor before 17.3.33.2654 allows authenticated remote attackers to inject arbitrary web script or HTML...

CVE-2017-12879

Cross-site scripting XSS-STORED vulnerability in the DEVICES OR SENSORS functionality in Paessler PRTG Network Monitor before 17.3.33.2654 allows authenticated remote attackers to inject arbitrary web script or HTML...

CVE-2017-12879

Paessler PRTG Network Monitor (before version 17.3.33.2654) contains a stored XSS in the DEVICES OR SENSORS feature. Exploitation requires authentication and remote access; an attacker can inject arbitrary web script or HTML, with the impact described as partial integrity impact and low confident...

CVE-2017-12879

Cross-site scripting XSS-STORED vulnerability in the DEVICES OR SENSORS functionality in Paessler PRTG Network Monitor before 17.3.33.2654 allows authenticated remote attackers to inject arbitrary web script or HTML...

PT-2017-12747

Name of the Vulnerable Software and Affected Versions Paessler PRTG Network Monitor versions prior to 17.3.33.2654 Description A cross-site scripting XSS issue exists in the DEVICES OR SENSORS functionality, allowing authenticated remote attackers to inject arbitrary web script or HTML...

CVE-2017-12879: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS-STORED vulnerability in the DEVICES OR SENSORS functionality in Paessler PRTG Network Monitor before 17.3.33.2654 allows authenticated remote attackers to inject arbitrary web script or HTML...

How to refresh the device policy and observe it

This article describes how to refresh the device policy and observe it...

CVE-2017-12785

The novish command-line interface, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, is prone to a buffer overflow in the "show log cli" command. This could be used by a read-only user monitor role to gain privileged root code execution on the...

CVE-2017-12785

The novish command-line interface, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, is prone to a buffer overflow in the "show log cli" command. This could be used by a read-only user monitor role to gain privileged root code execution on the...

Command injection

The novish command-line interface, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, is prone to a buffer overflow in the "show log cli" command. This could be used by a read-only user monitor role to gain privileged root code execution on the...

UPDATE: Sysdig Falco v0.7.0

PenTestIT RSS Feed A few months ago, I posted about an open source behavorial activity monitor. It was updated some time ago and we now have update - the Sysdig Falco v0.7.0! What is Sysdig Falco? Sysdig Falco is a behavioral activity monitor designed to detect anomalous activity in your...

CVE-2017-7421

Reflected and stored Cross-Site Scripting XSS, CWE-79 vulnerabilities in Directory Server aka Enterprise Server Administration web UI and ESMAC aka Enterprise Server Monitor and Control in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2....

Authentication flaw

An Authentication Bypass CWE-287 vulnerability in ESMAC aka Enterprise Server Monitor and Control in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter...