Security Bulletin: varying error codes allows detection of existing systems behind firewall

Summary A security vulnerability related to content handler URLs makes it possible to check if a system exists for example, behind a firewall. A different error code is returned for a systems that exist but are not accessible via the proxy functionality versus b systems that do not exist. Affecte...

Don’t be a Coinmining Zombie – Part 2: How Do You Protect Yourself from being Cryptojacked?

Safe behaviors to protect yourself from cryptojacking follow the familiar rules you should adhere to every day to protect yourself against viruses, worms, bots, and malware, including ransomware, which are typically pushed to you through phishing techniques and social engineering: | Strengthen yo...

Error: "Cannot Complete Your Request" Due to Antivirus Firewall Blocking Connection on StoreFront

The following error is displayed due to antivirus firewall blocking connection on StoreFront: Cannot Complete Your Request...

OEcms 3.1 Cross Site Scripting

Title: ======= OEcms v3.1 - Reflected Cross-Site Scripting Introduction: ============== A content management system CMS is a computer application that supports the creation and modification of digital content. It is often used to support multiple users working in a collaborative environment. CMS...

Schneider Electric U.motion Builder

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: U.motion Builder Vulnerabilities: Command Injection, Cross-site Scripting, and Improper Input Validation 2. RISK EVALUATION Successful exploitation of these...

Command Execution Vulnerability in Dieppe Firewall Appliances

Ltd. "DP Technology" is a high-tech enterprise integrating R&D, production and sales in the field of network security and application delivery. With the mission of "making the network simpler, smarter and safer", DIPTECH continues to innovate and provide customers with leading products and...

Qualys Cloud Platform 2.33 New Features

This release of the Qualys Cloud Platform version 2.33 includes the release for CertView, plus updates and new features for AssetView, Cloud Agent, EC2 Connector, Security Assessment Questionnaire, Web Application Scanning, and Web Application Firewall, highlights as follows. This posting has bee...

Windows Defender Firewall: Log dropped packets

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winadvsecprofilelogdroppedpackets.nasl 10010 2018-05-29 14:43:35Z emoss $ Check value for Windows Defender Firewall: Log dropped packets Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Windows Defender Firewall: Prohibit notifications

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winadvsecprofilenotification.nasl 10010 2018-05-29 14:43:35Z emoss $ Check value for Windows Defender Firewall: Prohibit notifications Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Windows Defender Firewall: Public Profile: Apply local firewall rules

The policy determines whether the local firewall rules are merged with GP settings when connected to a public network. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Windows Defender Firewall: Logfile path

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winadvsecprofilelogfilepath.nasl 10010 2018-05-29 14:43:35Z emoss $ Check value for Windows Defender Firewall: Path to logfile Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.ne...

Windows Defender Firewall: Outbound connections

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winadvsecprofileoutboundcon.nasl 10010 2018-05-29 14:43:35Z emoss $ Check value for Windows Defender Firewall: Domain: Outbound connections Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Windows Defender Firewall: Log successful connections

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winadvsecprofilelogsuccesspackets.nasl 10010 2018-05-29 14:43:35Z emoss $ Check value for Windows Defender Firewall: Log successful connections Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Windows Defender Firewall: Logfile size limit

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winadvsecprofilelogfilesize.nasl 10010 2018-05-29 14:43:35Z emoss $ Check value for Windows Defender Firewall: logfile size limit Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Windows Defender Firewall: Public Profile: Apply local connection security rules

The policy determines whether the local connection rules are merged with GP settings when connected to a public network. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Windows Defender Firewall: firewall profiles status.

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winadvsecprofilestatus.nasl 10010 2018-05-29 14:43:35Z emoss $ Check value for Windows Defender Firewall: Enable Firewall Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net Thi...

Windows Defender Firewall: Inbound connections

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winadvsecprofileinboundcon.nasl 10010 2018-05-29 14:43:35Z emoss $ Check value for Windows Defender Firewall: Inbound connections Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Firewall information leak to regular SSL VPN web portal users

A SSL VPN user logged in via the web portal can access internal FortiOS configuration information eg: addresses via specifically crafted URLs...

Cisco SA520W Security Appliance Path Traversal

Title: Cisco SA520W Security Appliance - Path Traversal Author: Nassim Asrir Contact: [email protected] / https://www.linkedin.com/in/nassim-asrir-b73a57122/ Vendor: https://www.cisco.com/ About Product: =============== Cisco SA 500 Series Security Appliances are designed for businesses with few...

Cisco SA520W Security Appliance - Path Traversal

Cisco SA520W Security Appliance - Path Traversal Title: Cisco SA520W Security Appliance - Path Traversal Author: Nassim Asrir Contact: [email protected] / https://www.linkedin.com/in/nassim-asrir-b73a57122/ Vendor: https://www.cisco.com/ About Product: =============== Cisco SA 500 Series Securit...