Cisco IOS XE SNMP Subsystem Denial of Service Vulnerability

Cisco IOS XE is an operating system developed by the American company Cisco Cisco for its network equipment. A security vulnerability exists in the SNMP subsystem of Cisco IOS XE. A remote attacker can exploit this vulnerability to cause a denial of service device reload by sending a large number...

Vulnerabilities of the Cisco Evolved Programmable Network Manager, a software tool for managing network services, and the Cisco Prime Infrastructure, a software tool for managing network lifecycle. These vulnerabilities allow attackers to obtain confidential information, enhance their privileges, or circumvent existing RBAC restrictions.

The vulnerability of the application programming interface of the Cisco Evolved Programmable Network Manager and the Cisco Prime Infrastructure network lifecycle management tool relates to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to circumvent...

North Korean Hackers Steal thousands of Military files from S. Korea

Hackers aligned with North Korea have always been accused of attacking and targeting South Korean organizations, financial institutions, banks and media outlets. Recent reports indicate that North Korean hackers have hacked into more than 140,000 computers of at least 160 South Korean government...

CVE-2016-2014

HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to modify data or cause a denial of service via unspecified vectors...

Siemens SINEMA Server Privilege Escalation Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-215-02 Siemens SINEMA Server Privilege Escalation Vulnerability that was published August 2, 2016, on the NCCIC/ICS-CERT web site. --------- Begin Update A Part 1 of 2 -------- Security researcher rgod working...

The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure

The vulnerability of the Cisco IOS operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to trigger a service failure device reboot through an SNMP request...

The vulnerability of the NX-OS network operating system allows a hacker to induce a maintenance failure.

The vulnerability of the NX-OS network operating system exists due to insufficient checking of PDU fragments in SNMP packets. Exploiting this vulnerability can allow a malicious actor to trigger a service failure reloading of the SNMP application by using a specially crafted packet...

The vulnerability of Oracle Communications Applications’ network management and organization software allows attackers to compromise the confidentiality of information.

The vulnerability of the Oracle Communications Convergence component of the Oracle Communications Applications software and network management suite is related to code errors. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of information through...

USN-2921-1 squid3 vulnerabilities

Sebastian Krahmer discovered that Squid incorrectly handled certain SNMP requests. If SNMP is enabled, a remote attacker could use this issue to cause Squid to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2014-6270 Alex Rousskov discovered that Squid incorrectl...

Protecting Personal Information: Freedom Box

FreedomBox is a personal server that protects your privacy. It hosts on demand applications such as file sharing, shared calendaring, instant messaging, secure voice conference calling, blog and wiki. FreedomBox is a free software stack, a subset of the Debian universal operating system, that can...

Manage Engine OPutils 8.0 Cross Site Request Forgery / Cross Site Scripting

================================================== CSRF and XsS In Manage Engine oputils ================================================== . contents:: Table Of Content Overview ======== Title : CSRF and XSS In Manage Engine OPutils Author: Kaustubh G. Padwad Plugin Homepage:...

ManageEngine OPutils 8.0 - Multiple Vulnerabilities

=================================================================================== Privilege escalation Vulnerability in ManageEngine oputils =================================================================================== Overview ======== Title:- Privilege escalation Vulnerability in...

The vulnerability of Oracle Communications Applications’ network management and organization software allows attackers to compromise the integrity, availability, and confidentiality of information.

The vulnerability of the Oracle Communications Applications’ network management and organization software component is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to compromise the integrity, availability, and confidentiality of information by making...

Critical Flaws Found in NETGEAR Network Management System

Netgear, one of the most popular router manufacturers, has been vulnerable to two different flaws that could allow hackers to compromise your corporate network and connected devices. Reported critical vulnerabilities reside in the Netgear's ProSafe NMS300 Model Network Management System – a...

Netgear NMS300 ProSafe Network Management System - Multiple Vulnerabilities

Remote code execution / arbitrary file download in NETGEAR ProSafe Network Management System NMS300 Discovered by Pedro Ribeiro [email protected], Agile Information Security http://www.agileinfosec.co.uk/ ========================================================================== Disclosure:...

NETGEAR ProSafe Network Management System 300 Arbitrary File Upload

Netgear's ProSafe NMS300 is a network management utility that runs on Windows systems. The application has multiple vulnerabilities that can allow an unauthenticated remote attacker to execute code as SYSTEM user. Vulnerabilities include authentication bypass, SQL injection, arbitrary file upload...

NETGEAR NMS300 ProSafe Network Management System - Multiple Vulnerabilities

NETGEAR NMS300 ProSafe Network Management System - Multiple Vulnerabilities Remote code execution / arbitrary file download in NETGEAR ProSafe Network Management System NMS300 Discovered by Pedro Ribeiro [email protected], Agile Information Security http://www.agileinfosec.co.uk/...

Unauthorized Access Vulnerability in DMS Integrated Management System of Shanghai Toothwood Communication Technology Co.

Toothwood Technology yamutech claims to be the leading integrated DNS service provider with the widest coverage area and the largest number of users in China. Multiple overstepping access vulnerabilities exist in the DMS, the network management module of yamutech's DNS equipment, allowing an...

Juniper Networks Junos OS J-Web Embedthis Software AppWeb Denial of Service Vulnerability

Juniper Networks Junos on SRX Series devices is a network operating system that runs on SRX Series service gateway devices.J-Web is one of the network management tools.Embedthis Software AppWeb is an Embedthis Software Inc. Fast and compact web server. A security vulnerability in Embedthis Softwa...

SevOne NMS 5.3.6.0 - Remote Command Execution

!/usr/bin/env python Exploit Title: SevOne NMS = 5.3.6.0 reverse shell remote root Date: 01/14/2016 Exploit Author: @iamsecurity Vendor Homepage: https://www.sevone.com/ Software Link: https://www.sevone.com/download2/free/vimage/SevOne-Download.ova Version: 5.3.6.0 """sevone.py: Simple reverse...