Lucene search
+L

334 matches found

The Hacker News
The Hacker News
added 2022/03/17 10:5 a.m.151 views

TrickBot Malware Abusing MikroTik Routers as Proxies for Command-and-Control

Microsoft on Wednesday detailed a previously undiscovered technique put to use by the TrickBot malware that involves using compromised Internet of Things IoT devices as a go-between for establishing communications with the command-and-control C2 servers. "By using MikroTik routers as proxy server...

9.1CVSS1AI score0.96087EPSS
SaveExploits24
ATTACKERKB
ATTACKERKB
added 2021/12/27 11:15 p.m.7 views

CVE-2021-45906

OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen...

5.4CVSS5.4AI score0.00515EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2021/12/24 12:0 a.m.13 views

The vulnerability of the Network Address Translation (NAT) technology implementation in Cisco IOS XE operating systems allows a hacker to induce a service failure.

The vulnerability of the Network Address Translation NAT technology implementation in Cisco IOS XE operating systems is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service interruptions...

8.6CVSS7.6AI score0.01328EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/25 12:0 a.m.6 views

The vulnerability of the Session Initiation Protocol (SIP) implementation and the Network Address Translation (NAT) function of the Application Layer Gateway (ALG) in microprogrammable network interface devices from Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to circumvent security restrictions and establish unauthorized connections.

The vulnerability of the Session Initiation Protocol SIP implementation and the Network Address Translation NAT function of the Application Layer Gateway ALG in microprogrammable network devices such as Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to...

5CVSS5.9AI score0.011EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/11/12 12:0 a.m.12 views

The vulnerability of the File Transfer Protocol (FTP) implementation and the NAT functions of the Application Layer Gateway (ALG) in microprogrammable network devices such as Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to circumvent security restrictions and establish unauthorized connections.

The vulnerability of the File Transfer Protocol FTP implementation and the Network Address Translation NAT function of the Application Layer Gateway ALG in microprogrammable network devices such as Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to...

5CVSS5.9AI score0.011EPSS
SaveExploits0References3Affected Software2
OSV
OSV
added 2021/10/27 7:15 p.m.7 views

CVE-2021-34790

Multiple vulnerabilities in the Application Level Gateway ALG for the Network Address Translation NAT feature of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized...

5.3CVSS5.8AI score0.011EPSS
SaveExploits0References1
NVD
NVD
added 2021/10/27 7:15 p.m.30 views

CVE-2021-34791

Multiple vulnerabilities in the Application Level Gateway ALG for the Network Address Translation NAT feature of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized...

5.3CVSS0.011EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/27 7:15 p.m.20 views

Design/Logic Flaw

Multiple vulnerabilities in the Application Level Gateway ALG for the Network Address Translation NAT feature of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized...

5CVSS5.6AI score0.011EPSS
SaveExploits0References1Affected Software11
Prion
Prion
added 2021/10/27 7:15 p.m.24 views

Design/Logic Flaw

Multiple vulnerabilities in the Application Level Gateway ALG for the Network Address Translation NAT feature of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized...

5CVSS5.6AI score0.011EPSS
SaveExploits0References1Affected Software11
Cisco
Cisco
added 2021/10/27 4:0 p.m.62 views

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Application Level Gateway Bypass Vulnerabilities

Multiple vulnerabilities in the Application Level Gateway ALG for the Network Address Translation NAT feature of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized...

4.7CVSS5.3AI score0.011EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.6 views

The vulnerability of the Network Address Translation (NAT) technology implemented in the Cisco IOS XE operating system allows attackers to bypass ALG and establish unauthorized connections.

The vulnerability of the Network Address Translation NAT technology implemented in the Cisco IOS XE operating system is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass the Address Resolution Protocol ALG and establish unauthorized...

5CVSS5.5AI score0.01194EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2021/10/27 12:0 a.m.14 views

PT-2021-4887 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: Multiple vulnerabilities in the Application Level Gateway ALG for the...

5.3CVSS5.6AI score0.011EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2021/10/15 12:0 a.m.9 views

The vulnerability of the NAT component of the Windows operating system arises from insufficient validation of input data, allowing attackers to trigger a service failure.

The vulnerability of the NAT component of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.7CVSS7.2AI score0.02437EPSS
SaveExploits0References2
OSV
OSV
added 2021/10/13 1:15 a.m.0 views

CVE-2021-40463

Windows Network Address Translation NAT Denial of Service Vulnerability...

7.7CVSS7.1AI score0.02437EPSS
SaveExploits0References1
NVD
NVD
added 2021/10/13 1:15 a.m.21 views

CVE-2021-40463

Windows Network Address Translation NAT Denial of Service Vulnerability...

7.7CVSS0.02437EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/13 1:15 a.m.24 views

Denial of service

Windows Network Address Translation NAT Denial of Service Vulnerability...

4CVSS7.5AI score0.02437EPSS
SaveExploits0References1Affected Software3
CVE
CVE
added 2021/10/13 12:27 a.m.129 views

CVE-2021-40463

CVE-2021-40463 is a Windows NAT Denial of Service vulnerability. The connected OpenVAS entries map this CVE to multiple Microsoft KBs (KB5006667, KB5006669, KB5006670, KB5006674, KB5006675, etc.), indicating it is considered in Windows security update contexts, but the provided documents do not d...

7.7CVSS7.9AI score0.02437EPSS
SaveExploits0References1Affected Software8
Cvelist
Cvelist
added 2021/10/13 12:27 a.m.28 views

CVE-2021-40463 Windows Network Address Translation (NAT) Denial of Service Vulnerability

...

7.7CVSS8.3AI score0.02437EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2021/10/12 7:0 a.m.26 views

Windows Network Address Translation (NAT) Denial of Service Vulnerability

...

7.7CVSS7.6AI score0.02437EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/10/12 12:0 a.m.7 views

Microsoft Windows 输入验证错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows Network Address Translation NAT. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

7.7CVSS7.2AI score0.02437EPSS
SaveExploits0References5
Rows per page
Query Builder