CVE-2016-6534

Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script. Versions before 8.5.12G might be affected in non-default configurations...

CVE-2016-5074

CloudView NMS before 2.10a has a format string issue exploitable over SNMP...

CVE-2016-5078

Paessler PRTG before 16.2.24.4045 has XSS via SNMP...

CVE-2016-5073

CloudView NMS before 2.10a has XSS via SNMP...

CVE-2016-5077

Netikus EventSentry before 3.2.1.44 has XSS via SNMP...

Moxa MXview v2.8 Denial Of Service Exploit

Exploit for windows platform in category dos / poc + Credits: John Page AKA hyp3rlinx Vendor: ============ www.moxa.com Product: =========== MXView v2.8 Download: http://www.moxa.com/product/MXstudio.htm MXview Industrial Network Management Software. Auto discovery of network devices and physical...

Moxa MXview 2.8 - Denial of Service

Moxa MXview 2.8 - Denial of Service + Credits: John Page AKA hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MOXA-MXVIEW-v2.8-DENIAL-OF-SERVICE.txt + ISR: ApparitionSec Vendor: ============ www.moxa.com Product: =========== MXView v2.8 Download:...

Moxa MXview v2.8 Remote Private Key Disclosure Exploit

Exploit for windows platform in category remote exploits + Credits: John Page AKA HYP3RLINX Vendor: ============ www.moxa.com Product: =========== MXview V2.8 Download: http://www.moxa.com/product/MXstudio.htm MXview Industrial Network Management Software. Auto discovery of network devices and...

Moxa MXview 2.8 Private Key Disclosure

Credits: John Page AKA HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MOXA-MXVIEW-v2.8-REMOTE-PRIVATE-KEY-DISCLOSURE.txt + ISR: APPARITIONSEC Vendor: ============ www.moxa.com Product: =========== MXview V2.8 Download:...

Siemens RUGGEDCOM NMS Equipment Vulnerable to CSRF, XSS

Enterprise network management equipment made by Siemens suffers from vulnerabilities that could allow an attacker to perform administrative actions. Two flaws, a cross-site scripting XSS vulnerability and a cross-site request forgery CSRF vulnerability, exist in the company’s RUGGEDCOM NMS line o...

Siemens RuggedCom NMS Cross-Site Request Forgery Vulnerability

RUGGEDCOM NMS is a Siemens enterprise solution for monitoring, configuring and maintaining RUGGEDCOM mission-critical networks. A cross-site request forgery vulnerability exists in Siemens RuggedCom NMS versions prior to 2.1, which can be exploited by an attacker to trigger a malicious request,...

Cisco ASR 1000 Series Routers Denial of Service Vulnerability

Cisco ASR 1000 Series Aggregation Services Routers running Cisco IOS XE Software is a set of operating systems from Cisco that run in ASR 1000 Series routers. A security vulnerability exists in the 'Simple Network Management Protocol SNMP' function of Cisco IOS XE Software in Cisco ASR 1000 Serie...

CVE-2017-3820

A vulnerability in Simple Network Management Protocol SNMP functions of Cisco ASR 1000 Series Aggregation Services Routers running Cisco IOS XE Software Release 3.13.6S, 3.16.2S, or 3.17.1S could allow an authenticated, remote attacker to cause high CPU usage on an affected device, resulting in a...

DEBIAN-CVE-2017-5483

The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1parse...

ALPINE-CVE-2017-5483

The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1parse...

UBUNTU-CVE-2017-5483

The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1parse...

SIEMENS SIMATIC CP 1543-1 Device Denial of Service Vulnerability

The SIEMENS SIMATIC CP 1543-1 is a communication processor with integrated firewall, VPN, security protocols, data encryption, and other security features that provides network connectivity and secure communication for s7-1500 controllers. A denial of service vulnerability exists in the SIEMENS...

Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL Injection Vulnerability

Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network Manager EPNM are both products of the U.S. Cisco Cisco.PI is a set of solutions for wireless management through Cisco Prime LAN Management Solution LMS and Cisco Prime Network Control System NCS technologies; EPNM is a network...

IoT Botnets Are The New Normal of DDoS Attacks

If you’ve been on the wrong end of what passes for a modern-day DDoS attack, you’re well familiar with the firepower of the almighty DVR. That’s right, the innocuous set-top box responsible for the posterity of your Game of Thrones seasons 1-6 is behind some of the biggest swarming attacks agains...

SNMP Default Group Name Vulnerability in Fibre Channel Switch SW200 Devices

This product is a Fibre Channel switch. An SNMP default group name vulnerability exists in the Fibre Channel Switch SW200 device. An attacker can exploit the vulnerability to obtain sensitive system information, posing information leakage and operational security risks...