SQL Injection Vulnerability in EMN Intelligent Network Management System

EMN Intelligent Network Management System is a DNS service system composed of a set of industrial control hardware devices and an embedded DNS software system. EMN Intelligent Network Management System suffers from SQL injection vulnerability. It allows attackers to utilize commonly used SQL...

The vulnerability of the HP SDN VAN Controller, a system for managing virtual networks, allows a hacker to execute arbitrary code.

The vulnerability of the HP SDN VAN Controller’s virtual network management subsystem is related to resource management errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending network packets to the REST port...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The multiple vulnerabilities in the Debian GNU/Linux operating system’s SNMP package can be exploited, leading to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the Squid HTTP Proxy Server software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

An “off-by-one error” in the snmpHandleUdp function in snmpcore.cc in Squid when using the SNMP port allows malicious actors to trigger a service failure or execute arbitrary code through a specially crafted UDP SNMP request, resulting in a buffer overflow in the dynamic memory...

CVE-2016-1428

Double free vulnerability in Cisco IOS XE 3.15S, 3.16S, and 3.17S allows remote authenticated users to cause a denial of service device restart via a sequence of crafted SNMP read requests, aka Bug ID CSCux13174...

Cisco IOS XE SNMP Subsystem Denial of Service Vulnerability

Cisco IOS XE is an operating system developed by the American company Cisco Cisco for its network equipment. A security vulnerability exists in the SNMP subsystem of Cisco IOS XE. A remote attacker can exploit this vulnerability to cause a denial of service device reload by sending a large number...

Vulnerabilities of the Cisco Evolved Programmable Network Manager, a software tool for managing network services, and the Cisco Prime Infrastructure, a software tool for managing network lifecycle. These vulnerabilities allow attackers to obtain confidential information, enhance their privileges, or circumvent existing RBAC restrictions.

The vulnerability of the application programming interface of the Cisco Evolved Programmable Network Manager and the Cisco Prime Infrastructure network lifecycle management tool relates to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to circumvent...

North Korean Hackers Steal thousands of Military files from S. Korea

Hackers aligned with North Korea have always been accused of attacking and targeting South Korean organizations, financial institutions, banks and media outlets. Recent reports indicate that North Korean hackers have hacked into more than 140,000 computers of at least 160 South Korean government...

CVE-2016-2014

HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to modify data or cause a denial of service via unspecified vectors...

Siemens SINEMA Server Privilege Escalation Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-215-02 Siemens SINEMA Server Privilege Escalation Vulnerability that was published August 2, 2016, on the NCCIC/ICS-CERT web site. --------- Begin Update A Part 1 of 2 -------- Security researcher rgod working...

The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure

The vulnerability of the Cisco IOS operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to trigger a service failure device reboot through an SNMP request...

The vulnerability of the NX-OS network operating system allows a hacker to induce a maintenance failure.

The vulnerability of the NX-OS network operating system exists due to insufficient checking of PDU fragments in SNMP packets. Exploiting this vulnerability can allow a malicious actor to trigger a service failure reloading of the SNMP application by using a specially crafted packet...

The vulnerability of Oracle Communications Applications’ network management and organization software allows attackers to compromise the confidentiality of information.

The vulnerability of the Oracle Communications Convergence component of the Oracle Communications Applications software and network management suite is related to code errors. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of information through...

USN-2921-1 squid3 vulnerabilities

Sebastian Krahmer discovered that Squid incorrectly handled certain SNMP requests. If SNMP is enabled, a remote attacker could use this issue to cause Squid to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2014-6270 Alex Rousskov discovered that Squid incorrectl...

Protecting Personal Information: Freedom Box

FreedomBox is a personal server that protects your privacy. It hosts on demand applications such as file sharing, shared calendaring, instant messaging, secure voice conference calling, blog and wiki. FreedomBox is a free software stack, a subset of the Debian universal operating system, that can...

Manage Engine OPutils 8.0 Cross Site Request Forgery / Cross Site Scripting

================================================== CSRF and XsS In Manage Engine oputils ================================================== . contents:: Table Of Content Overview ======== Title : CSRF and XSS In Manage Engine OPutils Author: Kaustubh G. Padwad Plugin Homepage:...

ManageEngine OPutils 8.0 - Multiple Vulnerabilities

=================================================================================== Privilege escalation Vulnerability in ManageEngine oputils =================================================================================== Overview ======== Title:- Privilege escalation Vulnerability in...

The vulnerability of Oracle Communications Applications’ network management and organization software allows attackers to compromise the integrity, availability, and confidentiality of information.

The vulnerability of the Oracle Communications Applications’ network management and organization software component is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to compromise the integrity, availability, and confidentiality of information by making...

Critical Flaws Found in NETGEAR Network Management System

Netgear, one of the most popular router manufacturers, has been vulnerable to two different flaws that could allow hackers to compromise your corporate network and connected devices. Reported critical vulnerabilities reside in the Netgear's ProSafe NMS300 Model Network Management System – a...

NETGEAR NMS300 ProSafe Network Management System - Multiple Vulnerabilities

NETGEAR NMS300 ProSafe Network Management System - Multiple Vulnerabilities Remote code execution / arbitrary file download in NETGEAR ProSafe Network Management System NMS300 Discovered by Pedro Ribeiro [email protected], Agile Information Security http://www.agileinfosec.co.uk/...