Security Advisory - Out-of-Bounds Memory Access Vulnerability on Some Huawei FireWall Products

There is an Out-of-Bounds memory access vulnerability in Huawei FireWall products due to insufficient verification. An authenticated local attacker can make processing crash by executing some commands. The attacker can exploit this vulnerability to cause a denial of service. Vulnerability ID:...

Common Open Policy Service Protocol module buffer error vulnerability in multiple Huawei products

Huawei DP300 and others are products of Huawei, China.Huawei DP300 is a videoconferencing terminal.IPS Module is an intrusion prevention and intrusion detection product.NGFW Module is a firewall product.Common Open Policy Service Protocol COPS is one of the Common Open Policy Service Protocol COP...

Huawei AR3200 and NGFW Module Memory Disclosure Vulnerability

Huawei AR3200 and NGFW Module are both products of Huawei, China.Huawei AR3200 is an AR3200 series enterprise router product.NGFW Module is a firewall product. A memory leak vulnerability exists in the Huawei AR3200 and NGFW Module due to the device failing to reasonably free memory when parsing ...

The vulnerability of the Smart Network Configuration Manager’s automatic network configuration management system, related to authentication mechanisms that lack sufficient protection, allows attackers to circumvent network firewall restrictions.

The vulnerability of the Smart Network Configuration Manager’s automatic network configuration management system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to bypass network firewalls by using a Zebedee client that connects t...

IKEv2 protocol memory out-of-bounds access vulnerability in multiple Huawei products (CNVD-2017-38286)

Huawei IPS Module, NGFW Module, NIP6300/6600 series products and Secospace USG series are the new generation of professional intrusion prevention and firewall products launched by Huawei for enterprise, IDC, campus network and carrier customers. A memory out-of-bounds access vulnerability exists ...

IKEv2 Protocol Memory Leakage Vulnerability in Multiple Huawei Products

Huawei IPS Module, NGFW Module, NIP6300/6600 series products and Secospace USG series are the new generation of professional intrusion prevention and firewall products launched by Huawei for enterprise, IDC, campus network and carrier customers. A memory leak vulnerability exists in the IKEv2...

Murus 1.4.11 - Local Privilege Escalation

I recently blogged about the prevalence of escalation hijack vulnerabilities amongst macOS applications. One example of this is the latest version of Murus firewall. By design it requires the user to authenticate every time in order to obtain the access it needs to modify the firewall settings. I...

Murus 1.4.11 Local Privilege Escalation

I recently blogged about the prevalence of escalation hijack vulnerabilities amongst macOS applications. One example of this is the latest version of Murus firewall. By design it requires the user to authenticate every time in order to obtain the access it needs to modify the firewall settings. I...

Murus 1.4.11 - Local Privilege Escalation

Murus 1.4.11 - Local Privilege Escalation I recently blogged about the prevalence of escalation hijack vulnerabilities amongst macOS applications. One example of this is the latest version of Murus firewall. By design it requires the user to authenticate every time in order to obtain the access i...

Murus 1.4.11 - Local root Privilege Escalation Exploit

Exploit for macOS platform in category local exploits I recently blogged about the prevalence of escalation hijack vulnerabilities amongst macOS applications. One example of this is the latest version of Murus firewall. By design it requires the user to authenticate every time in order to obtain...

Randy Bias joins Wallarm board of advisers

Menlo Park, California — December 5, 2017 — Wallarm today announced that Randy Bias, Vice President of Technology and Strategy, Cloud Software at Juniper and founder of Cloudscaling acquired by EMC, has joined Wallarm’s board of advisers. “Randy is an agile cloud pioneer and a thought leader in...

Apache Qpid Broker-J Security Bypass Vulnerability

Apache Qpid is the United States Apache Apache Software Foundation developed an object-oriented messaging middleware , it is an AMQP Advanced Message Queuing Protocol implementation , you can communicate with AMQP-compliant systems , and provides a C++, Python, Java, C and other programming...

Authentication flaw

In Apache Qpid Broker-J 0.18 through 0.32, if the broker is configured with different authentication providers on different ports one of which is an HTTP port, then the broker can be tricked by a remote unauthenticated attacker connecting to the HTTP port into using an authentication provider tha...

CVE-2017-15702

In Apache Qpid Broker-J 0.18 through 0.32, if the broker is configured with different authentication providers on different ports one of which is an HTTP port, then the broker can be tricked by a remote unauthenticated attacker connecting to the HTTP port into using an authentication provider tha...

Multiple Huawei products H323 protocol out-of-bounds read vulnerability

Huawei AR and SRG series enterprise routers are all-in-one routers launched by Huawei for small and medium-sized offices or branches of small and medium-sized enterprises; Huawei SVN series products are security access gateway products launched by Huawei; NIP6300/6600 series products and Secospac...

H323 Protocol Memory Leakage Vulnerability in Multiple Huawei Products

Huawei AR and SRG series enterprise routers are all-in-one routers launched by Huawei for small and medium-sized offices or branches of small and medium-sized enterprises; Huawei SVN series products are security access gateway products launched by Huawei; NIP6300/6600 series products and Secospac...

Memory Leak Vulnerability in Multiple Huawei Products

The NIP6300/6600 series products are Huawei's new-generation professional intrusion prevention products for customers in enterprises, IDCs, campus networks, and carriers, etc. The Secospace USG6300/6500 is Huawei's new-generation, T-class, all-in-one data center firewall for cloud service...

Fortinet FortiWebManager Security Feature Bypass Vulnerability

Fortinet FortiWebManager is a web application firewall. A security feature bypass vulnerability exists in Fortinet FortiWebManager, which can be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...

pfSense 2.3.1_1 Remote Command Execution Exploit

pfSense versions 2.3.11 and below contain a remote command execution vulnerability post authentication in the systemgroupmanager.php page. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'pfSens...

net-Shield - An Easy and Simple Anti-DDoS solution for VPS, Dedicated Servers and IoT devices

An Easy and Simple Anti-DDoS solution for VPS,Dedicated Servers and IoT devices based on iptables. Requirements Linux System with python, iptables Nginx Will be installed automatically by install.sh Quickstart Running as a standalone software No install.sh required via DryRun option -dry to only...