U.S., U.K. and Australia Warn of Iranian Hackers Exploiting Microsoft, Fortinet Flaws

Cybersecurity agencies from Australia, the U.K., and the U.S. on Wednesday released a joint advisory warning of active exploitation of Fortinet and Microsoft Exchange ProxyShell vulnerabilities by Iranian state-sponsored actors to gain initial access to vulnerable systems for follow-on activities...

Unpatched Remote Hacking Flaw Disclosed in Fortinet's FortiWeb WAF

Details have emerged about a new unpatched security vulnerability in Fortinet's web application firewall WAF appliances that could be abused by a remote, authenticated attacker to execute malicious commands on the system. "An OS command injection vulnerability in FortiWeb's management interface...

SpinetiX Fusion Digital Signage 3.4.8 Username Enumeration

SpinetiX Fusion Digital Signage 3.4.8 Username Enumeration Weakness Vendor: SpinetiX AG Product web page: https://www.spinetix.com Affected version: Username...

CVE-2019-5591

creationtimestamp| type| source ---|---|--- 2020-08-14 20:55:17+00:00| seen| https://t.me/cibsecurity/14145 2021-05-27 19:49:44+00:00| seen| MISP/98c0be2f-eadc-4ce5-9072-82ceacaea9c6 2021-07-29 17:59:02+00:00| seen| https://t.me/RussianOSINT/875 2021-10-25 22:30:42+00:00| seen|...

CVE-2019-5591

A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server...

CVE-2019-5591

A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server...

CVE-2019-5591

A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server. Recent assessments: ccondon-r7 at April 05, 2021 2:16pm UTC reported: One of three vulnerabilities CISA and the FBI have...

CVE-2020-5591

CVE-2020-5591 affects XACK DNS servers (various versions 1.7.0–1.11.4, and older 1.6.x) and enables remote DoS via NXNSAttack, degrading recursive resolver performance or turning it into a reflector for reflection attacks. Affected products use the cache server feature; mitigation is to update to...

CVE-2015-5591

ZenPhoto is affected by an SQL injection vulnerability in versions prior to 1.4.9. The issue arises because user input is not adequately validated, allowing a remote attacker with administrative access to inject and execute arbitrary SQL commands. Impact is the potential compromise of data confid...

Fortinet FortiGate < 6.2.1 Information Disclosure (FG-IR-19-037)

The remote host is running a FortiOS version prior to 6.2.1. It is, therefore, affected by an information disclosure vulnerability. An unauthenticated attacker on the same subnet may be able to intercept sensitive information by impersonating the configured LDAP server. C Tenable Network Security...

Fedora 26 : python-sleekxmpp (2017-68bd2a916e)

Update to latest upstream release 1.3.2 to fix CVE-2017-5591 rhbz1421077 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 25 : python-sleekxmpp (2017-99ad80f109)

Update to latest upstream release 1.3.2 to fix CVE-2017-5591 rhbz1421077 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 24 : python-sleekxmpp (2017-97e65f13bb)

Update to latest upstream release 1.3.2 to fix CVE-2017-5591 rhbz1421077 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora Update for python-sleekxmpp FEDORA-2017-97e65f13bb

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-5591

creationtimestamp| type| source ---|---|--- 2017-02-10 23:59:57+00:00| seen| https://t.me/canyoupwnme/772...

CVE-2017-5591

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for SleekXMPP up to 1.3.1 and...

botibal (>=0.7.3, <=0.8.0) potentially affected by CVE-2017-5589 +1 more via slixmpp (1.1.0)

slixmpp PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on slixmpp and may be impacted: - botibal =0.7.3, =0.8.0 Source cves: CVE-2017-5589, CVE-2017-5591 Source advisory: MEND:CVE-2017-5591...

CVE-2017-5591

Technical details about CVE-2017-5591 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories and security bulletins.

CVE-2016-5591

Technical details for CVE-2016-5591 are not publicly available in the provided documents. Monitor for updates.

CVE-2014-5591

The CVE-2014-5591 entry applies to the Frankly Chat (com.chatfrankly.android) app version 3.0.1 on Android, where TLS/SSL certificate verification is not performed, enabling MITM attackers to spoof servers and access sensitive data via a crafted certificate. Root cause: the app does not verify X....