TOPSEC Firewalls - ELIGIBLECONTESTANT Remote Code Execution

TOPSEC Firewalls - ELIGIBLECONTESTANT Remote Code Execution Exploit Title: TOPSEC Firewalls - Remote Code Execution ELIGIBLECONTESTANT Date: 19-08-2016 Exploit Author: Shadow Brokers Vendor Homepage: http://www.topsec.com.cn/ Full Exploit:...

TOPSEC Firewalls - 'ELIGIBLEBOMBSHELL' Remote Code Execution

Exploit for cgi platform in category web applications Exploit Title: TOPSEC Firewalls - Remote Code Execution ELIGIBLEBOMBSHELL Date: 19-08-2016 Exploit Author: Shadow Brokers Vendor Homepage: http://www.topsec.com.cn/ Full Exploit:...

TOPSEC Firewalls - ELIGIBLECANDIDATE Remote Code Execution

TOPSEC Firewalls - ELIGIBLECANDIDATE Remote Code Execution Exploit Title: TOPSEC Firewalls - Remote Code Execution ELIGIBLECANDIDATE Date: 19-08-2016 Exploit Author: Shadow Brokers Vendor Homepage: http://www.topsec.com.cn/ Full Exploit:...

TOPSEC Firewalls - ELIGIBLEBOMBSHELL Remote Code Execution

TOPSEC Firewalls - ELIGIBLEBOMBSHELL Remote Code Execution Exploit Title: TOPSEC Firewalls - Remote Code Execution ELIGIBLEBOMBSHELL Date: 19-08-2016 Exploit Author: Shadow Brokers Vendor Homepage: http://www.topsec.com.cn/ Full Exploit:...

TOPSEC Firewalls - 'ELIGIBLEBACHELOR' Remote Exploit

Exploit for hardware platform in category remote exploits Exploit Title: TOPSEC Firewalls - Remote Exploit ELIGIBLEBACHELOR Date: 19-08-2016 Exploit Author: Shadow Brokers Vendor Homepage: http://www.topsec.com.cn/ Full Exploit:...

TOPSEC Firewalls - 'ELIGIBLECONTESTANT' Remote Code Execution

Exploit Title: TOPSEC Firewalls - Remote Code Execution ELIGIBLECONTESTANT Date: 19-08-2016 Exploit Author: Shadow Brokers Vendor Homepage: http://www.topsec.com.cn/ Full Exploit: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/40272.zip...

TOPSEC Firewalls - 'ELIGIBLECANDIDATE' Remote Code Execution

Exploit Title: TOPSEC Firewalls - Remote Code Execution ELIGIBLECANDIDATE Date: 19-08-2016 Exploit Author: Shadow Brokers Vendor Homepage: http://www.topsec.com.cn/ Full Exploit: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/40273.zip...

Fortigate Firewalls - 'EGREGIOUSBLUNDER' Remote Code Execution

Exploit for hardware platform in category web applications Exploit Title: Fortigate Firewalls - Remote Code Execution EGREGIOUSBLUNDER Date: 19-08-2016 Exploit Author: Shadow Brokers Vendor Homepage: https://www.fortinet.com/products/fortigate/ Full Exploit:...

Fortigate Firewalls - 'EGREGIOUSBLUNDER' Remote Code Execution

Exploit Title: Fortigate Firewalls - Remote Code Execution EGREGIOUSBLUNDER Date: 19-08-2016 Exploit Author: Shadow Brokers Vendor Homepage: https://www.fortinet.com/products/fortigate/ Full Exploit: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/40276.zip...

TOPSEC Firewalls - 'ELIGIBLEBACHELOR' Remote Command Execution

Exploit Title: TOPSEC Firewalls - Remote Exploit ELIGIBLEBACHELOR Date: 19-08-2016 Exploit Author: Shadow Brokers Vendor Homepage: http://www.topsec.com.cn/ Full Exploit: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/40275.zip...

TOPSEC Firewalls - 'ELIGIBLEBOMBSHELL' Remote Code Execution

Exploit Title: TOPSEC Firewalls - Remote Code Execution ELIGIBLEBOMBSHELL Date: 19-08-2016 Exploit Author: Shadow Brokers Vendor Homepage: http://www.topsec.com.cn/ Full Exploit: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/40274.zip...

Watchguard Firewalls - 'ESCALATEPLOWMAN' ifconfig Privilege Escalation

Exploit Title: WatchGuard Firewalls - ifconfig Privilege Escalation ESCALATEPLOWMAN Date: 19-08-2016 Exploit Author: Shadow Brokers Vendor Homepage: http://www.watchguard.com/ Full Exploit: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/40270.zip...

ShadowBrokers' Leak Has 'Strong Connection' to Equation Group

A high-stakes game of attribution started by a group claiming to have a cache of exploits belonging to the Equation Group took a somewhat definitive turn Tuesday afternoon. Researchers at Kaspersky Lab yesterday confirmed a connection between the tools currently up for auction by the ShadowBroker...

Cross-site scripting issue in policy

Palo Alto Networks firewalls running the PAN-OS web interface are subject to a cross-site scripting vulnerability Ref. 93072...

Cisco RV110W, RV130W, and RV215W Routers Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of...

CVE-2016-4577

Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to...

CVE-2016-4577

Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to...

CVE-2016-4577

Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to...

IRZ RUH2 3G Firmware Overwrite Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-138-01 iRZ RUH2 3G Firmware Overwrite Vulnerability that was published May 17, 2016, on the NCCIC/ICS-CERT web site. ICS-CERT has identified a firmware overwrite vulnerability in iRZ’s RUH2 device. iRZ has...

PentestBox 2.0 - Portable Penetration Testing Distribution for Windows Environments

PentestBox provides all security tools as a software package, eliminating requirement of Virtual machines or dualboot environments on Windows Operating System. It is created because more than 50% of penetration testing distribution users uses windows. Source So it provides an efficient platform f...