5560 matches found
U.S. Dept Of Defense: [CVE-2018-7600] Remote Code Execution due to outdated Drupal server on www.█████████
Summary Due to an outdated Drupal version, remote code execution is possible on www.█████ via CVE-2018-7600. Description Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple...
U.S. Dept Of Defense: Reflected XSS on ███████
Summary Reflected XSS on ████████. Description During my explorations I found █████████/search/node, which provides a basic search functionality. If we search something, the value is reflected and not properly sanitized. For example if we search ██████████/search/node/chron0x we can see in the...
The vulnerability of the secure loading process for Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to circumvent the secure loading mechanism.
The vulnerability of the secure loading process for Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to failures in the security mechanisms. Exploiting this vulnerability can allow attackers to bypass the secure loading mechanism...
The vulnerability of the sftunnel function in Cisco Firepower Management Center (FMC) and Cisco Firepower Threat Defense (FTD) allows a attacker to obtain the device’s registration hash.
The vulnerability of the sftunnel function in Cisco Firepower Management Center FMC and Cisco Firepower Threat Defense FTD is related to encryption errors. Exploiting this vulnerability can allow a malicious actor to obtain a device’s registration hash...
The vulnerability of Cisco Firepower Management Center (FMC) and Cisco Firepower Threat Defense (FTD’s) network interface layers allows attackers to read or write arbitrary files on a peer-to-peer device connected to the sftunnel.
The vulnerability of the sftunnel in Cisco Firepower Management Center FMC and Cisco Firepower Threat Defense FTD relates to the possibility of path traversal. Exploiting this vulnerability allows a malicious actor to read or write arbitrary files on a peer-to-peer device connected to the sftunne...
Ensuring customers are protected from Solorigate
Microsoft is monitoring a dynamic threat environment surrounding the discovery of a sophisticated attack that included compromised binaries from a legitimate software. These binaries, which are related to the SolarWinds Orion Platform, could be used by attackers to remotely access devices. We hav...
[SECURITY] [DSA 4811-1] libxstream-java security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4811-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 15, 2020 https://www.debian.org/security/faq -...
Customer Guidance on Recent Nation-State Cyber Attacks
Note: we are updating as the investigation continues. Revision history listed at the bottom. This post contains technical details about the methods of the actor we believe was involved in Recent Nation-State Cyber Attacks, with the goal to enable the broader security community to hunt for activit...
Customer Guidance on Recent Nation-State Cyber Attacks
Note: we are updating as the investigation continues. Revision history listed at the bottom. This post contains technical details about the methods of the actor we believe was involved in Recent Nation-State Cyber Attacks, with the goal to enable the broader security community to hunt for activit...
U.S. Dept Of Defense: Full account takeover on https://████████.mil
Description The flow in application is to sign up and wait for an email containing a one-time password, as soon as you login using that password, it asks you to change it. I took that password change request and applied on any email changing their password and it worked Steps to produce: 1- Copy...
U.S. Dept Of Defense: Reflected XSS on ███
Summary Reflected XSS on █████████ for invalid paths. Description Requesting a non-existent path on █████, such as https://██████████/chron0x the site responds with No jsonpage404 is /chron0x versus /chron0x./chron0x does not exist. As it can be seen, the path is reflected. This can be exploited...
U.S. Dept Of Defense: PII Information Leak at https://████████.mil/
Summary: While making use of some recon techniques I came across this file which is leaking PII information publically on the Internet. In the description section, I explain the contents of the file and why it shouldn't be public like this. Description: The file in the POC section contains more...
Defending the Intelligent Edge from Evolving Attacks
Cybercriminals keep their fingers on the pulse of potential new attack vectors at all times, looking for their next opportunity. They are currently moving significant resources to target and exploit emerging network-edge environments, such as the cloud and remote workers, rather than just targeti...
D-Link Routers at Risk for Remote Takeover from Zero-Day Flaw
Buggy firmware opens a number of D-Link VPN router models to zero-day attacks. The flaws, which lack a complete vendor fix, allow adversaries to launch root command injection attacks that can be executed remotely and allow for device takeover. Impacted are D-Link router models DSR-150, DSR-250,...
U.S. Dept Of Defense: PHP info page disclosure
Summary: phpinfo is a debug functionality that prints out detailed information on both the system and the PHP configuration. Step-by-step Reproduction Instructions 1.Go to https://███████phpinfo Impact An attacker can obtain information such as: •Exact PHP version. •Exact OS and its version...
U.S. Dept Of Defense: Sensitive data exposure via https://███/secure/QueryComponent!Default.jspa - CVE-2020-14179
Summary: Information Disclosure vulnerability in outdated Jira. Description: Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field names and custom SLA names via an Information Disclosure vulnerability in the...
CVE-2020-23727
There is a local denial of service vulnerability in the Antiy Zhijia Terminal Defense System 5.0.2.10121559 and an attacker can cause a computer crash BSOD...
CVE-2020-23727
There is a local denial of service vulnerability in the Antiy Zhijia Terminal Defense System 5.0.2.10121559 and an attacker can cause a computer crash BSOD...
