The vulnerability of the Squid proxy server, related to accessing beyond the allocated buffer memory, allows attackers to cause a service failure.

The vulnerability of the Squid proxy server is related to an error that causes data to exceed the allocated memory buffer when processing ESI responses or loading certificates from intermediate certification centers. Exploiting this vulnerability can allow a malicious actor to cause service...

The vulnerability of the django.utils.html.urlize function, as well as the chars and words methods of the django.utils.text.Truncator object in the Django web application framework, allows attackers to trigger a denial-of-service attack.

The vulnerability of the django.utils.html.urlize function, as well as the chars and words methods of the django.utils.text.Truncator object in the Django web application framework, lies in the fact that when control over input data is possible, a malicious attacker can create a string that will...

The vulnerability of the GNU Patch Unix utility lies in insufficient validation of input data. This allows a perpetrator to cause service failures, gain access to confidential data, or compromise the integrity of that data.

The vulnerability of the GNU Patch software tool is related to its support for working with patches in the outdated “ed” format. This format allows for the execution of external commands using the “!” operator. Exploiting this vulnerability can enable a remote attacker to execute arbitrary code...

The vulnerability of the UDP protocol implementation in the Net-SNMP software suite allows a attacker to cause service failures, gain access to confidential data, or compromise the integrity of that data.

The vulnerability of the UDP protocol implementation in the Net-SNMP software suite is related to memory-related errors during the processing of the UDP protocol. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the multimedia library libvorbis, related to the escape from memory buffer reading, allows attackers to cause service failures or compromise data confidentiality and integrity.

The vulnerability of the multimedia library libvorbis is related to an error that causes reading beyond the allocated buffer memory space. Exploiting this vulnerability can allow a malicious actor to cause service failures or compromise data confidentiality and integrity through the use of...

The vulnerability of the `pack` function in the Perl interpreter allows attackers to cause service failures, gain access to confidential data, or compromise its integrity.

The vulnerability of the pack function in the Perl interpreter is related to an error that causes overflow in the dynamic memory when writing data to it during operations involving a large number of elements within the pack function. Exploiting this vulnerability allows a remote attacker to execu...

The vulnerability of the Simple Network Management Protocol packet processor in the Cisco NX-OS operating system allows a attacker to trigger a service failure.

The vulnerability of the Simple Network Management Protocol SNMP packet handler in the Cisco NX-OS operating system arises due to errors in the data block verification of the SNMP protocol. Exploiting this vulnerability can allow a malicious actor to perform a reboot on the device remotely...

Denial of Service Vulnerability in Multiple Rockwell Automation Products

Rockwell Automation MicroLogix 1400 Controllers Series A and others are programmable logic controllers from Rockwell Automation. A security vulnerability exists in several Rockwell Automation products that stems from a lack of authentication in the program. An attacker could exploit this...

The vulnerability of the RSLinx Classic communication server arises from the execution of operations beyond the buffer boundaries in memory, allowing attackers to cause service failures.

The vulnerability of the RSLinx Classic communication server lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending a specially crafted CIP packet to port 44818...

The vulnerability of the DLL component of Cisco AMP’s security tools for end devices allows a malicious actor to disable the security services and system scanning functions.

The vulnerability of the DLL component used by Cisco AMP’s security tools for end devices relates to resource management errors. Exploiting this vulnerability allows a malicious actor to remotely disable security services and system scanning services using a specially crafted DLL file...

IBM MQ Console REST API Denial of Service Vulnerability

IBM MQ formerly known as IBM WebSphere MQ is a messaging middleware product from IBM in the United States. It provides a reliable and proven messaging backbone for Service Oriented Architecture SOA.Console REST AP is one of the console REST application program interface components. A security...

Weak Password Vulnerability in Various Security Products of Tiantai Networks

Shanghai Tiantai Network Technology Co., Ltd. is a professional manufacturer and supplier of WEB security and website protection. A weak password vulnerability exists in a number of Tiantai network security products. An attacker can exploit this vulnerability to control security devices, resultin...

Partner Perspectives: Notes from the Field: Extending Carbon Black Visibility to Undetected Malware

Daniel LaVoie is a Senior Solutions Specialist at ReversingLabs. On a recent customer visit, I asked the company’s Director of Security Operations how ReversingLabs came to be deployed as a part of their SOC tool set. The answer was quite interesting, and one that I wanted to share with our blog...

Presumed technical issue disrupts Google Adsense payouts worldwide

By Waqas Still didn't receive your Google Adsense payouts? Don't worry, you are not alone. For the many millions of Google Adsense users, the earnings derived from it is their bread and butter so when there is a delay in AdSense payouts, predictably there is online pandemonium as many seek answer...

The vulnerability of the Extensible Authentication Protocol over LAN (EAPOL) implementation in microprogrammable routering software from Cisco’s Small Business 100 Series and Cisco Small Business 300 Series allows a perpetrator to induce a service failure.

The vulnerability of the Extensible Authentication Protocol over LAN EAPOL implementation in microprogramming-based router software from Cisco’s Small Business 100 Series and Cisco Small Business 300 Series models is related to errors in processing EAPOL frames. Exploiting this vulnerability allo...

The vulnerability of the Fast Transition function in the 802.11r access point implementation of Cisco IOS Access Points allows a attacker to cause a service failure.

The vulnerability of the Fast Transition function in the 802.11r access point implementation of Cisco IOS Access Points is caused by errors in the timer mechanisms when processing certain networking events. Exploiting this vulnerability allows an attacker to cause service failure by sending...

Blue Server 1.1 - Denial of Service (PoC)

Exploit Title: Blue Server 1.1 - Denial of Service PoC Dork: N/A Date: 2018-11-02 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.mafiatic.org/ Software Link: https://master.dl.sourceforge.net/project/blueserver/Blue-Server-1.1.exe Version: 1.1 Category: Dos Tested on: WiN7x64/KaLiLinuXx...

BGP Route Hijacking

Yes, we can minimize the BGP Hijacking Risk Every day we see something new about the global security threat. It is hard to keep track of all the various ways your network can be attacked. But there are some threat-vectors which need particular attention. "Did you know that a threat-actor with 20...

F5 Networks BIG-IP : F5 BIG-IP TMM vulnerability (K31404801)

In versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL categorization feature may cause the Traffic Management Microkernel TMM to produce a core file when it receives malformed URLs during categorization. CVE-2017-6169. Impact An attacker may be able to...

F5 Networks BIG-IP : TMM DIAMETER vulnerability (K54130510)

When processing DIAMETER transactions with carefully crafted attribute-value pairs, TMM may restart. CVE-2018-5522 Impact This vulnerability allows for a remoteunauthorized disruption of service by way of an unspecified DIAMETER packet. C Tenable Network Security, Inc. The descriptive text and...