IBM DataPower Gateways GatewayScript Module Information Disclosure Vulnerability

IBM DataPower Gateways is a suite of security and integration platforms from IBM USA designed specifically for mobile, cloud, application programming interfaces APIs, web, service-oriented architecture SOA, B2B, and cloud workloads, which protects, integrates, and optimizes access across channels...

Shopify: An administrator without the 'Settings' permission is able to see payment gateways

Description ==== An administrator who lacks the 'Settings' permission is not able to see the shops payment gateways through the UI. But the endpoint shop.myshopify.com/admin/paymentgateways.json does disclose payment gateways to the unprivileged user. Mitigation ==== Restrict the endpoint in...

knx-gateway-discover NSE Script

Discovers KNX gateways by sending a KNX Search Request to the multicast address 224.0.23.12 including a UDP payload with destination port 3671. KNX gateways will respond with a KNX Search Response including various information about the gateway, such as KNX address and supported services. Further...

Advantech EKI Vulnerabilities (Update B)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-15-344-01A Advantech EKI Vulnerabilities that was published December 15, 2015, on the NCCIC/ICS-CERT web site. --------- Begin Update B Part 1 of 3 -------- HD Moore of Rapid7 identified several vulnerabilities in...

The vulnerability of the microprogramming software of Sierra Wireless’ wireless gateways—AirLink GX450, AirLink ES440, AirLink GX440, and AirLink LS300—allows a hacker to gain access to the device with administrator privileges.

The vulnerability of the microprogramming software in Sierra Wireless’ wireless gateways—AirLink GX450, AirLink ES440, AirLink GX440, and AirLink LS300—is related to the presence of a pre-installed user with administrator privileges. Exploiting this vulnerability allows a malicious actor to gain...

Advantech EKI Hard-coded SSH Keys Vulnerability

OVERVIEW Independent researcher Neil Smith has identified a hard-coded SSH key vulnerability in Advantech’s EKI-122X series products. Advantech has produced new firmware to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS Advantech reports that the...

CVE-2015-5363

CVE-2015-5363 affects Juniper Networks Junos SRX Series, specifically the SRX Network Security Daemon (nsd). The vulnerability allows a remote DNS server to trigger a denial of service (crash) in nsd by sending a crafted DNS response. Affected releases include Junos 12.1X44 before 12.1X44-D50, 12...

ANTlabs InnGate Firmware SQL Injection Vulnerability

ANTlabs InnGate firmware on IG 3100 etc. is a firmware from ANTlabs Singapore for use in IG 3100 gateways and other devices. A SQL injection vulnerability exists in the main.ant file in the ANTlabs InnGate firmware on multiple ANTlabs devices. A remote attacker could execute arbitrary queries on...

The vulnerability of Cisco ASA network gateways, which allows attackers to trigger a service failure

The vulnerability of the PIM network interface card in Cisco ASA applications is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by generating specific broadcast requests...

Authorization Bypass Vulnerability in RG-NBR Series Gateways of Riptide Networks

Ruijie Networks, is a leading brand of network solutions in China. As a national enterprise, Ruijie Networks adheres to the road of independent research and development, and opens up a unique avenue of innovation in the highly competitive network equipment market. The vendors represented by Ruiji...

WordPress Payment Gateways Caller Plugin <= 0.1.0 - Local file Inclusion

This plugin is prone to a loadmerchant parameter traversal local file inclusion vulnerability. Solution Update the plugin...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The numerous vulnerabilities in the ldap-gateways package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

There are multiple vulnerabilities in the openldap-gateways package of the Debian GNU/Linux operating system. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

AntLabs InnGate security vulnerability patch

ANTLabs today is expected to roll out patches for a vulnerability in its InnGate Internet gateways that are popular in hospitality and convention locations. The gateways provide temporary Internet access to hotel guests or conference attendees using kiosks, for example. The vulnerability...

CVE-2014-8385

Buffer overflow on Advantech EKI-1200 gateways with firmware before 1.63 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2014-8385

Buffer overflow on Advantech EKI-1200 gateways with firmware before 1.63 allows remote attackers to execute arbitrary code via unspecified vectors...

Clam AntiVirus: Denial of service

Background Clam AntiVirus is an open source GPL anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. Description A heap-based buffer overflow exists in the cliscanpe function in libclamav/pe.c in ClamAV. Impact A remote attacker could possibly cause a Denial of...

[SECURITY] Fedora 19 Update: zarafa-7.1.11-1.fc19

The Zarafa Collaboration Platform is a Microsoft Exchange replacement. The Open Source Collaboration provides an integration with your existing Linux mail server, native mobile phone support by ActiveSync compatibility and a webaccess with 'Look & Feel' similar to Outlook using Ajax. Including an...

Payment Gateways Caller for WP e-Commerce 0.1.0 - load_merchant Parameter Traversal Local file Inclusion

The Payment Gateways Caller for WP e-Commerce WordPress plugin was affected by a loadmerchant Parameter Traversal Local file Inclusion security vulnerability...

Pre Multi-Vendor Shopping Malls SQL Injection Vulnerability & Auth Bypass Vulnerabilty.

No description provided by source. --------------------------------------------------------------------------- +Title Multi-Vendor Shopping Malls SQL Injection Vulnerability +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3...