U.S. Dept Of Defense: xmlrpc.php FILE IS enable which enables attacker to XSPA Brute-force and even Denial of Service(DOS), in https://████/xmlrpc.php

Summary: Hello team, I have found a security vulnerability inhttps://███████/xmlrpc.php which lets attacker to: 1: XSPA or PortScan 2: Bruteforce 3:DOS and much more Description: Impact Step-by-step Reproduction Instructions █████████ 1: Go to https://██████/xmlrpc.php to check if it is enabled o...

Active Defense Bypass Vulnerability in SmartMass Endpoint Security

Wizards Endpoint Security is a professional and practical artificial intelligence-based antivirus software. Wise Terminal Security has an active defense bypass vulnerability that can be exploited by attackers to cause a program crash...

Cisco Firepower Threat Defense Software Web Services Path Traversal (cisco-sa-asaftd-path-JE3azWw43)

A vulnerability exists in the web services interface of Cisco Firepower Threat Defense FTD Software due to a lack of proper input validation of the HTTP URL. An unauthenticated, remote attacker can exploit this, by sending a crafted HTTP request containing directory traversal character sequences,...

Cisco Firepower Threat Defense Software SSL/TLS DoS (cisco-sa-asa-ssl-vpn-dos-qY7BHpjN)

A vulnerability exists in the Secure Sockets Layer SSL/Transport Layer Security TLS handler of Cisco Firepower Threat Defense FTD Software due to improper resource management for inbound SSL/TLS connections. An unauthenticated, remote attacker can exploit this, by establishing multiple SSL/TLS...

Cisco Firepower Threat Defense Software Management Interface DoS (cisco-sa-ftd-mgmt-interface-dos-FkG4MuTU)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a denial of service DoS vulnerability in the management interface due to how FTD handles session timeouts for management connections. An unauthenticated, remote attacker can exploit this issue, by sendi...

Cisco Firepower Threat Defense Software (FTD) BGP DoS (cisco-sa-asa-dos-P43GCE5j)

According to its self-reported version, Cisco Firepower Threat Defense FTD Software is affected by a vulnerability in the implementation of the Border Gateway Protocol BGP module due to incorrect processing of certain BGP packets. An unauthenticated, remote attacker can exploit this, by sending a...

Cisco Firepower 1000 Series SSL/TLS Denial of Service Vulnerability (cisco-sa-ftd-tls-dos-4v5nmWtZ)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a denial of service DoS vulnerability in its SSL/TLS handler component due to a communication error between internal functions. An unauthenticated, remote attacker can exploit this issue, by sending a...

The vulnerability of the implementation of the Open Shortest Path First (OSPF) protocol in Cisco Adaptive Security Appliance (ASA) and Configure Firepower Threat Defense (FTD) software allows a attacker to induce a service failure.

The vulnerability of the OSPF implementation in Cisco Adaptive Security Appliance ASA and Configure Firepower Threat Defense FTD software relates to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the implementation library for the Transport Layer Security protocol of Cisco Firepower Threat Defense micro-programming software allows a attacker to compromise the integrity of the protected information.

The vulnerability of the Transport Layer Security protocol implementation library in Cisco Firepower Threat Defense software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

The vulnerability of the implementation of the Open Shortest Path First (OSPF) protocol in Cisco Adaptive Security Appliance (ASA) and Configure Firepower Threat Defense (FTD) software allows a attacker to induce a service failure.

The vulnerability of the OSPF implementation in Cisco Adaptive Security Appliance ASA and Configure Firepower Threat Defense FTD software relates to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the implementations of Secure Sockets Layer and Transport Layer Security protocols in the microsoftware for Cisco Adaptive Security Appliance (ASA) and Configure Firepower Threat Defense (FTD) allows a attacker to induce a service failure.

The vulnerability of the Secure Sockets Layer and Transport Layer Security implementations in Cisco Adaptive Security Appliance ASA and Configure Firepower Threat Defense FTD software lies in an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to caus...

The vulnerability of the Image Signature Verification function in Cisco Adaptive Security Appliance (ASA) and Configure Firepower Threat Defense (FTD) microprogramming systems allows attackers to compromise the integrity of protected information.

The vulnerability of the Image Signature Verification function in Cisco Adaptive Security Appliance ASA and Configure Firepower Threat Defense FTD software relates to improper verification of cryptographic signatures. Exploiting this vulnerability can allow a malicious actor to compromise the...

The vulnerability of the web interface of Cisco Adaptive Security Appliance (ASA) and Configure Firepower Threat Defense (FTD) allows attackers to gain unauthorized access to protected information.

The vulnerability of the web interface of Cisco Adaptive Security Appliance ASA and Configure Firepower Threat Defense FTD lies in memory object processing errors. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerabilities of the Snort mechanism on the Cisco IOS operating system, the Cisco Firepower Threat Defense network firewall, and the Cisco Firepower Management Center network management software allow attackers to compromise the integrity of protected information.

The vulnerabilities of the Snort mechanism on the Cisco IOS operating system, the Cisco Firepower Threat Defense network firewall, and the Cisco Firepower Management Center network management software are related to deficiencies in the segmentation of the controlled system area. Exploitation of...

Cisco Firepower Threat Defense Software Management Access List Bypass Vulnerability (cisco-sa-ftd-accesslist-bypass-5dZs5qZp)

According to its version and configuration, the Cisco Firepower Threat Defense FTD Software running on the remote device is affected by vulnerability, where an unauthenticated attacker could bypass a configured management interface access list on an affected system. The vulnerability is due to th...

U.S. Dept Of Defense: Remote Code Execution through DNN Cookie Deserialization

Summary: The application at https://████████ presents a deserialization vulnerability that permits RCE and file read/write Step-by-step Reproduction Instructions 1. Navigate to a random page that must return a 404 Error status like https://████/test 2. Add this cookie in the request header:...

Predicting the Future of the SOC Analyst

I’ve been a SOC Analyst for four years now and was a desktop support engineer before that. When I first started as a SOC Analyst it was an exciting change. I was going to help protect the company and resolve suspicious incidents before they turned into breaches. The reality of my day-to-day was n...

U.S. Dept Of Defense: Register with non accepted email types on https://███████

Summary Hello, this is a new report from 874457. Thank you @agent-l8 for your advice, really appreciate it. This report is about register with non-accepted email types on https://███████ Steps to Reproduce 1. Register With Not Accepted Email Types 2. Go to https://█████████ 3. Fill all the field...

The vulnerability in the processing of DNS packets through the IPv6 protocol of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to induce service interruptions.

The vulnerability of DNS packet processing through the IPv6 protocol on Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD devices is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptio...

The vulnerability of the web interface of Cisco Adaptive Security Appliance (ASA) and Configure Firepower Threat Defense (FTD) allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the web interface of Cisco Adaptive Security Appliance ASA and Configure Firepower Threat Defense FTD lies in the lack of pathname checking for access-controlled directories. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality,...