CVE-2019-0101

Authentication bypass in the Intel UniteR solution versions 3.2 through 3.3 may allow an unauthenticated user to potentially enable escalation of privilege to the Intel UniteR Solution administrative portal via network access...

CVE-2019-0101

The CVE-2019-0101 issue affects Intel Unite Solution server component on versions 3.2–3.3, enabling an unauthenticated user to bypass authentication and escalate privileges to the admin portal via network access. The Intel advisory Intel® Unite Privilege Escalation (INTEL-SA-00214) documents a cr...

Intel® Unite Privilege Escalation Advisory

Summary: A potential security vulnerability in Intel Unite® Solution administrative portal may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-0101 Description: Authentication bypass in the Intel...

Photon OS 2.0: Linux PHSA-2018-2.0-0101 (deprecated)

An update of 'linux-secure', 'linux', 'linux-aws', 'linux-esx' packages of Photon OS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0101. The te...

Important Photon OS Security Update - PHSA-2018-0101

Updates of 'linux', 'linux-esx', 'linux-aws', 'linux-secure' packages of Photon OS have been released...

Security Bulletin: Cross-site scripting vulnerability in IBM Business Process Manager (BPM) Process Center (CVE-2015-0101)

Summary Insufficient user input validation in IBM Business Process Manager's Process Center can lead to a cross-site scripting exposure. Vulnerability Details CVEID: CVE-2015-0101 DESCRIPTION: IBM Business Process Manager Process Centeris vulnerable to cross-site scripting, caused by improper...

RSA Authentication Agent for Web for Apache 8.x < 8.0.2 Multiple Vulnerabilities

The version of RSA Authentication Agent for Web for Apache is 8.x prior to 8.0.2. It is, therefore, potentially affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108888; scriptversion"1.5";...

Webmin < 1.070 authentication bypass

According to its self-reported version, the Webmin install hosted on the remote host is earlier than 1.070. It is, therefore, affected by an authentication bypass vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108544; scriptversion"1.5";...

Cisco Confirms Critical Firewall Software Bug Is Under Attack

Attackers are trying to exploit a critical vulnerability in Cisco’s Adaptive Security Appliance firewall software, the company has confirmed. Cisco has updated its advisory for the vulnerability, which was first revealed on Jan. 29 and has been logged as CVE-2018-0101, on Feb. 7. “The Cisco Produ...

Cisco ASA Crash Proof Of Concept

Cisco ASA CVE-2018-0101 Crash PoC We basically just read: https://www.nccgroup.trust/globalassets/newsroom/uk/events/2018/02/reconbrx2018-robin-hood-vs-cisco-asa.pdf @zerosum0x0, @jennamagius, @alephnaught import requests, sys headers = headers'User-Agent' = 'Open AnyConnect VPN Agent...

Cisco ASA - Crash PoC Exploit

Exploit for hardware platform in category dos / poc Cisco ASA CVE-2018-0101 Crash PoC We basically just read: https://www.nccgroup.trust/globalassets/newsroom/uk/events/2018/02/reconbrx2018-robin-hood-vs-cisco-asa.pdf @zerosum0x0, @jennamagius, @alephnaught import requests, sys headers =...

Cisco ASA - Crash (PoC)

Cisco ASA - Crash PoC Cisco ASA CVE-2018-0101 Crash PoC We basically just read: https://www.nccgroup.trust/globalassets/newsroom/uk/events/2018/02/reconbrx2018-robin-hood-vs-cisco-asa.pdf @zerosum0x0, @jennamagius, @alephnaught import requests, sys headers = headers'User-Agent' = 'Open AnyConnect...

Beers with Talos EP 22: Forget the ASA, Rob Joyce Favorited Craig’s Tweet

Beers with Talos BWT Podcast Episode 22 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing: www.talosintelligence.com/podcast EP22 Show Notes: Recorded 2/2/18 - Guests two EPs in a row! We are joined by Omar Santos from Cisco PSI...

Cisco Firepower Threat Defense (FTD) Adaptive Security Appliance Remote Code Execution and Denial of Service Vulnerability (cisco-sa-20180129-asa1)

According to its version, the Cisco Firepower Threat Defense FTD software installed on the remote host is affected by a vulnerability in the XML parser that can allow a remote, unauthenticated attacker to execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; if description...

Cisco Adaptive Security Appliance Remote Code Execution (CVE-2018-0101)

A Remote Code Execution vulnerability exists in Cisco Adaptive Security Appliance software. The vulnerability is due to a failure on part of Internet Key Exchange code to handle UDP requests. A remote, unauthenticated attacker could exploit this vulnerability by sending crafted UDP requests to a...

CVE-2018-0101

creationtimestamp| type| source ---|---|--- 2018-01-31 17:52:50+00:00| published-proof-of-concept| https://t.me/canyoupwnme/3160 2018-02-08 09:56:32+00:00| seen| https://t.me/antichat/883 2018-02-08 16:06:12+00:00| seen| https://t.me/xakepru/3130 2018-02-09 09:23:46+00:00| exploited|...

Cisco Patches Critical VPN Vulnerability

Cisco Systems released a patch Monday to fix a critical security vulnerability in its Secure Sockets Layer VPN solution called Adaptive Security Appliance. The vulnerability, according to a Cisco Security Advisory, could allow an unauthenticated and remote attacker to execute remote code on...

Cisco ASA Remote Code Execution and Denial of Service Vulnerability (cisco-sa-20180129-asa1)

According to its self-reported version the Cisco Adaptive Security Appliance ASA software running on the remote device is affected by a denial of service vulnerability which could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. TRUST...

CVE-2018-0101

CVE-2018-0101 concerns Cisco ASA webvpn: a double-free in the webvpn component can allow an unauthenticated remote attacker to trigger a reload or execute arbitrary code by sending crafted XML packets to a webvpn-configured interface. Public PoCs and PoC sources exist (exploit-db, GitHub), illust...

CentOS 6 : bind (CESA-2018:0101)

"An update for bind is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...