CVE-2019-13020

The fetch API in Tightrope Media Carousel before 7.1.3 has CarouselAPI/v0/fetch?url= SSRF. This has two potential areas for abuse. First, a specially crafted URL could be used in a phishing attack to hijack the trust the user and the browser have with the website and could serve malicious content...

Design/Logic Flaw

The fetch API in Tightrope Media Carousel before 7.1.3 has CarouselAPI/v0/fetch?url= SSRF. This has two potential areas for abuse. First, a specially crafted URL could be used in a phishing attack to hijack the trust the user and the browser have with the website and could serve malicious content...

CVE-2019-13020

The CVE-2019-13020 issue affects Tightrope Media Carousel prior to 7.1.3. The vulnerability stems from the CarouselAPI/v0/fetch?url= endpoint, enabling SSRF. Risks described include: (1) phishing-style content hijacking the user’s trust with the site and browser by serving malicious content from ...

CVE-2019-14511

Sphinx Technologies Sphinx 3.1.1 by default has no authentication and listens on 0.0.0.0, making it exposed to the internet unless filtered by a firewall or reconfigured to listen to 127.0.0.1 only...

CVE-2019-14511

Sphinx Technologies Sphinx 3.1.1 by default has no authentication and listens on 0.0.0.0, making it exposed to the internet unless filtered by a firewall or reconfigured to listen to 127.0.0.1 only...

Authentication flaw

Sphinx Technologies Sphinx 3.1.1 by default has no authentication and listens on 0.0.0.0, making it exposed to the internet unless filtered by a firewall or reconfigured to listen to 127.0.0.1 only...

CVE-2019-14511

Sphinx Technologies Sphinx 3.1.1 by default has no authentication and listens on 0.0.0.0, making it exposed to the internet unless filtered by a firewall or reconfigured to listen to 127.0.0.1 only...

CVE-2019-14511

CVE-2019-14511 affects Sphinx Technologies Sphinx up to version 3.1.1. By default, the service has no authentication and listens on 0.0.0.0, exposing it to the Internet unless firewall rules or a reconfiguration restrict it to 127.0.0.1. This creates reliance on network controls for exposure. Rel...

Endian Firewall 3.3.0 Cross Site Scripting

Exploit Title: Endian Firewall cross-site scripting XSS Date: 08/22/2019 Exploit Authors: Milad Soltanian + G0dfather @irpwn Vendor Homepage: https://www.endian.com Version : 3.3.0 An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

FreeBSD-SA-19:22.mbuf

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-19:22.mbuf Security Advisory The FreeBSD Project Topic: IPv6 remote Denial-of-Service Category: kernel Module: net Announced: 2019-08-20 Credits: Clement Lecign...

CVE-2016-10888

CVE-2016-10888 affects the WordPress plugin All In One WP Security and Firewall (prior to version 4.0.7 ). The Red Hat and OpenVAS entries, along with the NVD/NVD-derived data, document multiple SQL injection issues in this plugin. Root cause is not explicitly detailed beyond the vulnerability ty...

Denial of Service Vulnerability in Multiple Siemens Products (CNVD-2019-27702)

SCALANCE SC firewall is used to protect trusted industrial networks from untrusted networks. It allows input and output network connections to be filtered in different ways.SCALANCE X switches a are used to connect industrial components such as programmable logic controllers PLCs or human machine...

Windows Remote Desktop Services remote command execution vulnerability, CVE-2019-1181/1182-a vulnerability warning-the black bar safety net

One, Foreword GMT + 8 on 14 October, Microsoft released a set for the Remote Desktop service repair program, which includes two critical remote code execution（RCE）vulnerability CVE-2019-1181 and CVE-2019-1182。 With the prior repair of the“BlueKeep”vulnerability, CVE-2019-0708）the same. This also...

CVE-2016-10866

The CVE-2016-10866 entry concerns the All In One WP Security & Firewall WordPress plugin. Connected sources confirm multiple XSS vulnerabilities in the plugin prior to version 4.2.0. Affected software: all-in-one-wp-security-and-firewall for WordPress (pre-4.2.0). Root cause: unspecified in the d...

CVE-2016-10867

All-in-One WP Security and Firewall WordPress plugin (pre-4.0.6) contains a cross-site scripting (XSS) vulnerability in settings pages. The issue is documented across sources (e.g., PT-2019-7663, CVE listings, and WPVulnDB) as XSS in the plugin’s settings UI. Impact is limited to user interaction...

CVE-2016-10868

The CVE-2016-10868 entry concerns the WordPress plugin All In One WP Security and Firewall (pre-4.0.5). It describes a cross-site scripting (XSS) vulnerability in the plugin’s blacklist, file system, and file change detection settings pages. The sources consistently state the issue without provid...

CVE-2015-9293

The CVE refers to the All In One WP Security & Firewall WordPress plugin (before 3.9.8) with an XSS in the unlock request feature. Affected component: the plugin’s unlock request handling. Root cause: reflected script injection in the unlock request path (exact technical details not provided in t...

Let Experts Do Their Job – Managed WAF by Indusface

WAF Web Application Firewall has been the first line of defence when it comes to application security for a while now. Many organizations have adopted WAF in one form or the other and most cases, compliance has been the driver for adoption. But unfortunately, when it comes to the efficacy of WAF ...

Veeam Backup & Replication Fails to Connect to Linux Servers Due to Firewall Configuration

Challenge Veeam Backup & Replication may fail to connect to some Linux servers depending on their firewall configuration. For example, distributions based on Debian, SLES, or RHEL have default firewall configurations that may block necessary connections. Cause Linux OS firewall configuration and/...

CB TAU Threat Intelligence Notification: Smominru Botnet Leverages New Attack Techniques

Carbon Black’s Threat Analysis Unit TAU and CB ThreatSight discovered the resurgence of a previously active crypytomining botnet campaign called Smominru. This campaign has evolved since its original discovery in the latter half of 2017, leveraging new techniques including LOLbins, polymorphic...