SonicWALL Network Security Manager (NSM) authorization issue vulnerability

SonicWALL Network Security Manager NSM versions 4.3.1 and earlier have an authorization issue vulnerability. This vulnerability stems from improper access control in the export settings. It may allow remote, authenticated attackers to obtain sensitive information, potentially gain administrator...

SonicWALL Network Security Manager (NSM) command injection vulnerability

SonicWALL Network Security Manager NSM versions 4.3.1 and earlier have a command injection vulnerability. This vulnerability stems from OS command injections, which may allow remote authentication attackers to execute arbitrary OS commands, resulting in remote code execution...

shodan-dorks

Shodan dorks Descripción: Este repositorio de GitHub proporciona una variedad de consultas de búsqueda, conocidas como "dorks", para Shodan, una potente herramienta utilizada para buscar dispositivos conectados a Internet. Los dorks están diseñados para ayudar a los investigadores de seguridad a...

opensnitch

¡Únete a la comunidad del proyecto en nuestro servidor! OpenSnitch es un cortafuegos firewall de aplicaciones para GNU/Linux. •• Características principales • Descarga • Instalación • Ejemplos de uso • En la prensa •• Características principales Filtrado interactivo de conexiones salientes...

zeek

El Monitor de Seguridad de Red Zeek Un marco de trabajo potente para el análisis de tráfico de red y la monitorización de seguridad. Características clave — Documentación — Primeros pasos — Desarrollo — Licencia Características clave Análisis en profundidad Zeek incluye analizadores para muchos...

hackbox

HackB0x v2.0 HackBox es la combinación de herramientas y técnicas increíbles. HackBox es una herramienta completa y potente que combina una variedad de técnicas de vanguardia para capacitar a los profesionales de la seguridad en su misión de identificar y corregir vulnerabilidades en aplicaciones...

arp-validator

arp-validator Herramienta de seguridad para detectar ataques de envenenamiento ARP Características Utiliza un enfoque más rápido en la detección de ataques de envenenamiento ARP en comparación con enfoques pasivos Detecta no solo la presencia de envenenamiento ARP sino también el mapeo IP-MAC...

cilium

.. raw:: html |cii| |go-report| |clomonitor| |artifacthub| |slack| |go-doc| |rtd| |apache| |bsd| |gpl| |fossa| |gateway-api| |codespaces| Cilium ist eine Netzwerk-, Observability- und Sicherheitslösung mit einer eBPF-basierten Datenebene. Es bietet ein einfaches flaches Layer-3-Netzwerk mit der...

Quantum Computing for Network Security Classification: Near-Term Classification and Long-Term Memory Efficiency

Quantum computing has already been explored in several network-security applications. However, how quantum computing may contribute to network-security classification in both the near term and the longer term has not been systematically discussed. This paper studies this question through two...

The Hidden Security Risks of Devices You Forgot Were Connected

IoT and OT devices can create hidden security gaps. Learn how asset visibility helps organizations find forgotten devices and reduce network security risks now...

[SECURITY] Fedora 45 Update: nss-3.129.0-1.fc45

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

CVE-2026-73445: Improper Input Validation

On affected platforms running Arista EOS, an issue with the gRPC Network Security Interface gNSI Authz Rotate RPC may cause an incorrect Authz policy which was uploaded in the ongoing RPC stream to become active. This does not affect Bootz. This issue was discovered internally by Arista and the...

CVE-2026-73447: Improper Neutralization of Special Elements used in an OS Command

A privileged attacker can exploit certain operation to execute arbitrary commands with root privileges, leading to full device compromise. An authenticated user can exploit gRPC Network Security Interface gNSI Certz service on Arista EOS-based products to escalate privileges and execute arbitrary...

CVE-2026-73454: Improper Neutralization of Special Elements used in a Command

On affected platforms running Arista EOS with gRPC Network Security Interface gNSI Credentialz configured, a specially crafted request can cause unintended modifications to the target account's properties. This may result in the account being assigned elevated privileges or access beyond what an...

zeek v9.0.0

The Zeek Network Security Monitor A powerful framework for network traffic analysis and security monitoring. Key Features — Documentation — Getting Started — Development — License Key Features In-depth Analysis Zeek ships with analyzers for many protocols, enabling high-level semantic analysis at...

CVE-2026-76682 Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways

A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow. Successful exploitation could allow an attacker to cause a denial-of-service or potentially execute arbitrary code on th...

firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus Desktop Bus setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication,...

CVE-2026-45769

A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring engine. A remote attacker can exploit this vulnerability by sending repeated crafted User Datagram Protocol UDP traffic to the IKEv2 parser. This can cause the...

CVE-2026-76682: Buffer Copy without Checking Size of Input

A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow. Successful exploitation could allow an attacker to cause a denial-of-service or potentially execute arbitrary code on th...

Astra Linux – Vulnerability in nss

A flaw was discovered in the way NSS handled CCS ChangeCipherSpec messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, resulting in a denial of service for servers compiled with the NSS library. The greatest threat posed by this vulnerability is related to system...