Cortex XDR Agent DoS

The vulnerability of the Cortex XDR Agent, which is responsible for network traffic analysis, network detection, and response, is related to code errors. Exploiting this vulnerability can allow attackers to cause system services under Windows to fail...

Cortex XDR Agent Registration Data Access

The vulnerability of the Cortex XDR Agent’s network traffic analysis, network detection, and response capabilities is related to insufficient protection of password hashes. Exploiting this vulnerability could allow attackers to gain unauthorized access to protected information by loading speciall...

BruteShark - Network Analysis Tool

BruteShark is a Network Forensic Analysis Tool NFAT that performs deep processing and inspection of network traffic mainly PCAP files, but it also capable of directly live capturing from a network interface. It includes: password extracting, building a network map, reconstruct TCP sessions, extra...

Aruba AOS-CX command injection vulnerability

Aruba AOS-CX is a modern programmable network from Aruba, USA. The Aruba AOS-CX has a security vulnerability that can be exploited by an attacker to run code through the network analysis engine...

IBM SiteProtector Appliance Information Disclosure Vulnerability

The IBM Security SiteProtector System is a centralized management system from IBM USA, Inc. It is used for unified management and analysis of network, server and desktop endpoint security agents and small networks or devices.A security vulnerability exists in the IBM SiteProtector Appliance that...

SUSE: Security Advisory (SUSE-SU-2017:1664-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Building Multilayered Security for Modern Threats

Considering recent announcements of major attacks caused by external malicious actors, including a ransomware attack on a U.S. gasoline pipeline, the need for increased security posture is as important as ever, and multilayered security remains the key. With rampant ransomware attacks and other...

CANalyse - A Vehicle Network Analysis And Attack Tool

CANalyse is a tool built to analyze the log files to find out unique datasets automatically and able to connect to simple user interfaces such as Telegram. Basically, while using this tool the attacker can provide a bot-ID and use the tool over the internet through telegram-bot. CANalyse is made ...

CompTIA Security Certification Prep — Lifetime Access for just $30

At long last, top companies are starting to take cybersecurity seriously. As a consequence, technical recruiters are looking for people with hacking skills and certifications to prove it. CompTIA is seen as the gold standard when it comes to cybersecurity exams, with several certifications to...

Filter Expressions for Wireshark When Using NetScaler Appliance

This article describes how to use filter expression for Wireshark to analyze the network packet trace recorded when using a NetScaler appliance. Filter Expressions for Wireshark NetScaler appliance inserts its own header called NetScaler Packet Trace, in the frame containing NetScaler specific...

CVE-2020-15357

Network Analysis functionality in Askey AP5100WDualSIG1.01.097 and all prior versions allows remote attackers to execute arbitrary commands via a shell metacharacter in the ping, traceroute, or route options...

CVE-2020-15357

Network Analysis functionality in Askey AP5100WDualSIG1.01.097 and all prior versions allows remote attackers to execute arbitrary commands via a shell metacharacter in the ping, traceroute, or route options...

Code injection

Network Analysis functionality in Askey AP5100WDualSIG1.01.097 and all prior versions allows remote attackers to execute arbitrary commands via a shell metacharacter in the ping, traceroute, or route options...

CVE-2020-15357

CVE-2020-15357 affects the Askey AP5100W_Dual_SIG_1.01.097 and all prior versions. The vulnerability involves remote command execution via a shell metacharacter in the options for ping, traceroute, or route, indicating a shell injection in network-analysis functionality. The connected documents c...

CVE-2020-15357: Improper Neutralization of Special Elements used in an OS Command

Network Analysis functionality in Askey AP5100WDualSIG1.01.097 and all prior versions allows remote attackers to execute arbitrary commands via a shell metacharacter in the ping, traceroute, or route options...

PT-2020-14388

Name of the Vulnerable Software and Affected Versions Askey AP5100W Dual SIG versions 1.01.097 and earlier Description The Network Analysis functionality allows remote attackers to execute arbitrary commands via a shell metacharacter in the ping, traceroute, or route options. This issue can be...

Denial of Service Vulnerability in Kolai Network Analysis System 2020

Kelai's network analysis system is a "tool" for network failure analysis, digital security forensics, protocol analysis and learning scenarios. Kelai Network Analysis System 2020 has a denial-of-service vulnerability, which can be exploited by an attacker to cause a system crash BSOD with a...

tcpdump smb_fdata() DoS

The vulnerability of the smbfdata function smbutil.c in the tool for capturing and analyzing network traffic, tcpdump, is caused by an uncontrolled recursion. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

tcpdump ICMP Induced DoS

The vulnerability of the icmpprint function print-icmp.c in the tcpdump tool for capturing and analyzing network traffic involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Cisco Network Analysis Module Detection Consolidation

Consolidation of Cisco Network Analysis Module detections. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc";...