Unpatched Remote Hacking Flaw Disclosed in Fortinet's FortiWeb WAF

Details have emerged about a new unpatched security vulnerability in Fortinet's web application firewall WAF appliances that could be abused by a remote, authenticated attacker to execute malicious commands on the system. "An OS command injection vulnerability in FortiWeb's management interface...

SpinetiX Fusion Digital Signage 3.4.8 Username Enumeration

SpinetiX Fusion Digital Signage 3.4.8 Username Enumeration Weakness Vendor: SpinetiX AG Product web page: https://www.spinetix.com Affected version: Username...

CVE-2019-5591

creationtimestamp| type| source ---|---|--- 2020-08-14 20:55:17+00:00| seen| https://t.me/cibsecurity/14145 2021-05-27 19:49:44+00:00| seen| MISP/98c0be2f-eadc-4ce5-9072-82ceacaea9c6 2021-07-29 17:59:02+00:00| seen| https://t.me/RussianOSINT/875 2021-10-25 22:30:42+00:00| seen|...

CVE-2019-5591

A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server...

CVE-2019-5591

A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server...

CVE-2019-5591

A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server. Recent assessments: ccondon-r7 at April 05, 2021 2:16pm UTC reported: One of three vulnerabilities CISA and the FBI have...

CVE-2020-5591

CVE-2020-5591 affects XACK DNS servers (various versions 1.7.0–1.11.4, and older 1.6.x) and enables remote DoS via NXNSAttack, degrading recursive resolver performance or turning it into a reflector for reflection attacks. Affected products use the cache server feature; mitigation is to update to...

CVE-2015-5591

ZenPhoto is affected by an SQL injection vulnerability in versions prior to 1.4.9. The issue arises because user input is not adequately validated, allowing a remote attacker with administrative access to inject and execute arbitrary SQL commands. Impact is the potential compromise of data confid...

Fortinet FortiGate < 6.2.1 Information Disclosure (FG-IR-19-037)

The remote host is running a FortiOS version prior to 6.2.1. It is, therefore, affected by an information disclosure vulnerability. An unauthenticated attacker on the same subnet may be able to intercept sensitive information by impersonating the configured LDAP server. C Tenable Network Security...

Fedora 26 : python-sleekxmpp (2017-68bd2a916e)

Update to latest upstream release 1.3.2 to fix CVE-2017-5591 rhbz1421077 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora Update for python-sleekxmpp FEDORA-2017-97e65f13bb

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 24 : python-sleekxmpp (2017-97e65f13bb)

Update to latest upstream release 1.3.2 to fix CVE-2017-5591 rhbz1421077 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 25 : python-sleekxmpp (2017-99ad80f109)

Update to latest upstream release 1.3.2 to fix CVE-2017-5591 rhbz1421077 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2017-5591

creationtimestamp| type| source ---|---|--- 2017-02-10 23:59:57+00:00| seen| https://t.me/canyoupwnme/772...

CVE-2017-5591

Technical details about CVE-2017-5591 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories and security bulletins.

CVE-2017-5591

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for SleekXMPP up to 1.3.1 and...

CVE-2016-5591

Technical details for CVE-2016-5591 are not publicly available in the provided documents. Monitor for updates.

CVE-2014-5591

The CVE-2014-5591 entry applies to the Frankly Chat (com.chatfrankly.android) app version 3.0.1 on Android, where TLS/SSL certificate verification is not performed, enabling MITM attackers to spoof servers and access sensitive data via a crafted certificate. Root cause: the app does not verify X....

openSUSE Security Update : seamonkey (openSUSE-SU-2013:1788-1)

update to SeaMonkey 2.22 bnc847708 - rebased patches - requires NSS 3.15.2 or higher - MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592 Miscellaneous memory safety hazards - MFSA 2013-94/CVE-2013-5593 bmo868327 Spoofing addressbar through SELECT element - MFSA 2013-95/CVE-2013-5604...

openSUSE Security Update : seamonkey (openSUSE-SU-2013:1644-1)

update to SeaMonkey 2.22 bnc847708 - rebased patches - requires NSS 3.15.2 or higher - MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592 Miscellaneous memory safety hazards - MFSA 2013-94/CVE-2013-5593 bmo868327 Spoofing addressbar through SELECT element - MFSA 2013-95/CVE-2013-5604...