WatchGuard XMT515 Cross-Site Scripting Vulnerability

WatchGuard XMT515 is a firewall router product from WatchGuard USA. A cross-site scripting vulnerability exists in WatchGuard XMT515 version 12.1.3 and earlier. The vulnerability stems from the lack of proper validation of client-side data by the WEB application. An attacker can exploit the...

Huawei USG9500 Credential Mismanagement Vulnerability

Huawei USG9500 is a data center firewall product from Huawei, China. A security vulnerability exists in the Huawei USG9500, which arises from the program failing to properly manage credentials. An attacker could exploit the vulnerability to cause information leakage or corruption, compromising th...

WindowsFirewallRuleset - Windows Firewall Ruleset Powershell Scripts

About WindowsFirewallRuleset Windows firewall rulles organized into individual powershell scripts according to: 1. Rule group 2. Traffic direction 3. IP version IPv4 / IPv6 4. Further sorted according to programs and services such as for example: 2. ICMP traffic 3. Browser rules 4. rules for...

F5 Networks BIG-IP : TMOS vulnerability (K03126093)

On BIG-IP 15.0.0 and 14.1.0-14.1.0.6, under certain conditions, network protections on the management port do not follow current best practices. CVE-2019-6664 Impact BIG-IP The defaultfirewall rules for the management interface are not reliably reinstalled after first boot. As a result, the...

SonicOS Elevation of Privilege Vulnerability

SonicWall SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWall, Inc. An authorization issue vulnerability exists in SonicWall SonicOS. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in a network...

Apple macOS Mojave Application Firewall Component Input Validation Error Vulnerability

Apple macOS Mojave is a specialized operating system developed by Apple for Mac computers.Application Firewall is one of the application firewall components. An input validation error vulnerability exists in the Application Firewall component in Apple macOS Mojave versions prior to 10.14.5. An...

Huawei USG9500 Denial of Service Vulnerability (CNVD-2020-00216)

Huawei USG9500 is a data center firewall product from Huawei, China. A denial of service vulnerability exists in the implementation of X.509 in Huawei USG9500 V500R001C30 and V500R001C60 versions. An attacker can exploit this vulnerability to cause a denial of service dead loop with a malicious...

ESXi firewall changes required to process a Veeam backup from storage snapshot with Cisco HyperFlex IOvisor

Challenge To process a Veeam backup from storage snapshot with Cisco HyperFlex IOvisor, adjustments may have to be to the ESXi firewall settings. The process outlined below applies to all HyperFlex clusters running HX Data Platform 3.0 or later. Solution Before you add the HyperFlex Cluster into...

SQL Injection Bypass Vulnerability in D-Shield Firewall (CNVD-2020-04854)

D Shield Firewall is a free IIS firewall software, this software protects websites and servers from intrusion. D Shield Firewall suffers from a SQL injection bypass vulnerability. An attacker can exploit the vulnerability to gain access to sensitive database information...

Huawei USG9500 Missing Integrity Check Vulnerability

Huawei USG9500 is a data center firewall product from Huawei, China. A security vulnerability exists in the Huawei USG9500 V500R001C30 version and V500R001C60 version, which stems from a lack of integrity checks in the program. An attacker can exploit the vulnerability to make malicious...

SQL Injection Bypass Vulnerability in D-Shield Firewalls

D Shield Firewall is a free IIS firewall software, this software protects websites and servers from intrusion. D Shield Firewall suffers from a SQL injection bypass vulnerability. An attacker can exploit the vulnerability to gain access to sensitive database information...

Unspecified Vulnerability in Forcepoint NGFW Security Management Center

Forcepoint NGFW Security Management Center SMC is a Forcepoint product that provides unified, centralized management capabilities for Forcepoint's next-generation firewalls. A security vulnerability exists in Forcepoint NGFW SMC versions prior to 6.5.12 and prior to 6.7.1. An attacker could explo...

F5 BIG-IP ASM Resource Management Error Vulnerability

F5 BIG-IP ASM is a Web Application Firewall WAF from F5 USA that provides secure remote access, protects email, and simplifies Web access control while enhancing network and application performance. A security vulnerability exists in the F5 BIG-IP ASM. A remote attacker could exploit the...

BetterBackdoor - A Backdoor With A Multitude Of Features

A backdoor is a tool used to gain remote access to a machine. Typically, backdoor utilities such as NetCat have 2 main functions: to pipe remote input into cmd or bash and output the response. This is useful, but it is also limited. BetterBackdoor overcomes these limitations by including the...

Security Bulletin: Multiple Vulnerabilities in Kubernetes affects IBM Watson Studio Local

Summary Multiple Vulnerabilities in Kubernetes affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2019-5736 DESCRIPTION: runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary and consequently obtain host root...

Equinox Control Expert

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Equinox Equipment: Control Expert Vulnerability: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' 2. RISK EVALUATION Successful exploitation of this vulnerability...

ReconCobra - Complete Automated Pentest Framework For Information Gathering

ReconCobra Reconcobra is Foot printing software for Ultimate Information Gathering Kali, Parrot OS, Black Arch, Termux, Android Led TV Interface Software have 82 Options with full automation with powerful information gathering capability In-Action !https://blogger.googleuser...

Out-of-bounds read vulnerability in multiple Huawei products (CNVD-2020-36735)

Huawei AP2000 and others are products of Huawei, China.Huawei AP2000 is a wireless access point device.Huawei IPS Module is an intrusion prevention system IPS module.NGFW Module is a next-generation firewall NGFW module. An out-of-bounds read vulnerability exists in multiple Huawei products. The...

Buffer overflow vulnerability in multiple Huawei products (CNVD-2020-36734)

Huawei AP2000 and others are products of Huawei, China.Huawei AP2000 is a wireless access point device.Huawei IPS Module is an intrusion prevention system IPS module.NGFW Module is a next-generation firewall NGFW module. A buffer overflow vulnerability exists in multiple Huawei products. An...

Buffer overflow vulnerability in multiple Huawei products (CNVD-2020-36733)

Huawei AP2000 and others are products of Huawei, China.Huawei AP2000 is a wireless access point device.Huawei IPS Module is an intrusion prevention system IPS module.NGFW Module is a next-generation firewall NGFW module. A buffer error vulnerability exists in multiple Huawei products that arises...