904 matches found
IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Clients
IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Clients. Stand: 14. Ergänzungslieferung 14. EL. Hinweis: Getestet wird auf die Microsoft Windows Firewall. Für Vista und Windows 7 auf jegliche Firewall die sich systemkonform installiert. Auf Linux, soweit möglich, anzeige der iptables...
IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Clients
IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Clients. Stand: 14. Ergänzungslieferung 14. EL. Hinweis: Getestet wird auf die Microsoft Windows Firewall. Für Vista und Windows 7 auf jegliche Firewall die sich systemkonform installiert. Auf Linux, soweit möglich, anzeige der iptables...
Reverse Shells With Terminal Support: revsh
revsh is a tool for establishing reverse shells with terminal support, reverse VPNs for advanced pivoting Pivoting , as well as arbitrary data tunneling. A reverse shell is a network connection that grants shell access to a remote host. As opposed to other remote login tools such as telnet and ss...
DrayTek VigorACS SI 1.3.0 - Multiple Vulnerabilities
DrayTek VigorACS SI 1.3.0 - Multiple Vulnerabilities DrayTek VigorACS SI /ACSServer/ We found that most of the VigorACS SI deployments are using the default http authentication settings acs/password. This is not so much a software vulnerability but more a configuration issue. 2.2 Unauthenticated...
VMSA-2014-0010 : VMware product updates address critical Bash security vulnerabilities (Shellshock)
a. Bash update for multiple products. Bash libraries have been updated in multiple products to resolve multiple critical security issues, also referred to as Shellshock. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the identifiers CVE-2014-6271, CVE-2014-7169,...
Failed to call RPC function 'StartAgent': Timed out requesting agent port for client sessions.
Challenge A task fails with the error: Error: Failed to call RPC function 'StartAgent': Timed out requesting agent port for client sessions. Cause These errors may occur because of either: A firewall prevents the remote machine from initiating communication on one or more of the assigned...
Working Resources BadBlue 1.7.x/2.x Unauthorized Proxy Relay Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11030/info BadBlue is prone to a vulnerability that may let the application be abused as a proxy. This vulnerability presents itself due to the 'Pass Thru' function allowing the server to be used as a proxy. This could be...
ZoneAlarm Pro 1.0/2.x Outbound Packet Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3647/info Due to a common design error, it may be possible for outbound packets to bypass packet filtering in many personal firewalls. Many of these applications only block packets created by the standard Windows protocol...
Fortigate Firewalls - CSRF Vulnerability
No description provided by source. Vulnerability ID: CVE-2013-1414 Vulnerability Type: CSRF Cross-Site Request Forgery Product: All Fortigate Firewalls Vendor: Fortinet http://www.fortinet.com Vulnerable Version: 4.3.13 & 5.0.2 Description ========== Because many functions are not protected by...
ICS-CERT Alert on Easily Hackable Road Signs
A new, remotely exploitable vulnerability in Daktronics’ Vanguard software could make it even easier for attackers to hack electronic road signs, a task that was reportedly never very difficult to begin with. Daktronics’ Vanguard dynamic highway message sign configuration software was initially...
Gameover Malware, variant of ZeuS Trojan uses Encryption to Bypass Detection
The year begins with the number of new variants of malware that were discovered by various security researchers. The new variants are more complex, sophisticated and mostly undetectable. Two years back in 2012, the FBI warned us about the ‘GameOver’ banking Trojan, a variant of Zeus financial...
GameOver Zeus Now Using Encryption to Bypass Detection
Cybercriminals have begun to tweak the way the GameOver Zeus Trojan is being delivered to users’ machines, making it easier for the banking malware to evade detection and steal victims’ credentials. To get the job done the malware has been working in tandem with the malware Upatre. For about a we...
[AIEngine] Artificial Inteligent Engine
AIEngine is a packet inspection engine with capabilities of learning without any human intervention. AIEngine helps network/security profesionals to identify traffic and develop signatures for use them on NIDS, Firewalls, Traffic classifiers and so on. Using AIEngine To use AIEngine just execute...
IOServer Out of Bounds Read Vulnerability
OVERVIEW Chris Sistrunk of Mandiant and Adam Crain of Automatak have identified an out of bounds read vulnerability in IOServer’s OPC Server application. IOServer has released a new version that mitigates this vulnerability. The researchers have tested the new version to validate that it resolves...
IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Clients
IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Clients. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95070 Stand: 13. Ergänzungslieferung 13. EL. Hinweis:...
IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Clients
IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Clients. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95070 Stand: 13. Ergänzungslieferung 13. EL. Hinweis:...
ModSecurity Version
Based on HTTP headers, the remote host appears to be running ModSecurity, an open source web application firewall WAF. It was possible to read the version number from the banner. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid67123; scriptversion"1.6";...
Fortigate Firewalls - CSRF Vulnerability
Exploit for hardware platform in category web applications Vulnerability ID: CVE-2013-1414 Vulnerability Type: CSRF Cross-Site Request Forgery Product: All Fortigate Firewalls Vendor: Fortinet http://www.fortinet.com Vulnerable Version:...
Fortigate Firewalls - Cross-Site Request Forgery
Fortigate Firewalls - Cross-Site Request Forgery Vulnerability ID: CVE-2013-1414 Vulnerability Type: CSRF Cross-Site Request Forgery Product: All Fortigate Firewalls Vendor: Fortinet http://www.fortinet.com Vulnerable Version:...
Fortigate Firewalls - Cross-Site Request Forgery
Vulnerability ID: CVE-2013-1414 Vulnerability Type: CSRF Cross-Site Request Forgery Product: All Fortigate Firewalls Vendor: Fortinet http://www.fortinet.com Vulnerable Version:...