Command Execution Vulnerability in EG3210 at Riptide Networks Inc.

EG3210 is a new generation multi-service security gateway of RG-EG3200 series, which is a comprehensive gateway device designed for small and medium-sized network outlets. A command execution vulnerability exists in the RG-EG3210, which can be exploited by attackers to execute commands...

[SECURITY] Fedora 38 Update: prometheus-podman-exporter-1.11.0-1.fc38

Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information...

[SECURITY] Fedora 39 Update: prometheus-podman-exporter-1.11.0-1.fc39

Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information...

[SECURITY] Fedora 40 Update: prometheus-podman-exporter-1.11.0-1.fc40

Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information...

Ruijie Networks RG-NBR700GW 安全漏洞

Ruijie Networks RG-NBR700GW is an Internet Behavior Management router from Ruijie Networks China. A security vulnerability exists in Ruijie Networks RG-NBR700GW version 10.34b12, which stems from a lack of cookie authentication when resetting the password, resulting in an administrator password...

Unspecified Vulnerability in Palo Alto Networks GlobalProtect (CNVD-2024-20756)

Palo Alto Networks GlobalProtect is a suite of network protection software from Palo Alto Networks, USA. The software provides firewall monitoring and threat prevention. A security vulnerability exists in Palo Alto Networks GlobalProtect that originates from the ability of an authenticated,...

F5 Networks BIG-IP : DNS vulnerability (K000139092)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000139092 advisory. - Certain DNSSEC aspects of the DNS protocol in RFC 4033, 4034, 4035, 6840, and related RFCs allow remote attackers to...

GoPlus Report: Blockchain Networks Using API Security Data to Mitigate Web3 Threats

By Uzair Amir Singapore, 28 March 2024 - GoPlus Labs, the leading Web3 security infrastructure provider, has unveiled a groundbreaking report… This is a post from HackRead.com Read the original post: GoPlus Report: Blockchain Networks Using API Security Data to Mitigate Web3 Threats...

Ruijie Networks RG-EG350 操作系统命令注入漏洞

Ruijie Networks RG-EG350 is a multi-service integrated gateway product from China's Ruijie Networks that solves the current egress challenges of small and medium-sized networks. An OS command injection vulnerability exists in Ruijie Networks RG-EG350 20240318 and earlier versions, which originate...

Ruijie Networks RG-EG350 操作系统命令注入漏洞

Ruijie Networks RG-EG350 is a multi-service integrated gateway product from China's Ruijie Networks that solves today's small and medium-sized network egress challenges. An OS command injection vulnerability exists in Ruijie Networks RG-EG350 20240318 and earlier versions, which originates from a...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-48788 Fortinet FortiClient EMS SQL Injection Vulnerability CVE-2021-44529 Ivanti Endpoint Manager Cloud Service Appliance EPM CSA Code Injection Vulnerabilit...

[SECURITY] Fedora 40 Update: libreswan-4.14-1.fc40

Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

GO-2024-2659 Data exfiltration from internal networks in github.com/docker/docker

dockerd forwards DNS requests to the host loopback device, bypassing the container network namespace's normal routing semantics, networks marked as 'internal' can unexpectedly forward DNS requests to an external nameserver. By registering a domain for which they control the authoritative...

New StrelaStealer Phishing Attacks Hit Over 100 Organizations in E.U. and U.S.

Cybersecurity researchers have detected a new wave of phishing attacks that aim to deliver an ever-evolving information stealer referred to as StrelaStealer. The campaigns impact more than 100 organizations in the E.U. and the U.S., Palo Alto Networks Unit 42 researchers said in a new report...

F5 Networks BIG-IP : BIND vulnerability (K000138990)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.5 / 17.1.2. It is, therefore, affected by a vulnerability as referenced in the K000138990 advisory. The DNS message parsing code in named includes a section whose computational complexity is overly high. It does not...

Unspecified Vulnerability in Palo Alto Networks GlobalProtect (CNVD-2024-20435)

Palo Alto Networks GlobalProtect is a suite of network protection software from Palo Alto Networks, USA. The software provides firewall monitoring and threat prevention. A security vulnerability exists in Palo Alto Networks GlobalProtect that stems from the ability of a local user to exploit a...

The vulnerability of the network communication library of the software-hardware systems for Siemens Fire Safety products, namely Siemens Cerberus PRO EN, Sinteso EN, and Sinteso Mobile, allows a perpetrator to cause service interruptions.

The vulnerability of the network communication libraries of the Siemens Cerberus PRO EN, Sinteso EN, and Sinteso Mobile fire safety systems relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2024-29018

A vulnerability was found in Moby due to excessive data output in external DNS requests from "internal" networks, enabling unauthorized access to sensitive system information by remote attackers. This flaw allows attackers to gain access to sensitive information by exploiting incorrect resource...

CVE-2024-29018

Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. Moby's networking implementation allows for many networks, each with their own IP address range and gateway, to be defined. This feature i...

AZL-40034 CVE-2024-29018 affecting package moby-engine for versions less than 24.0.9-9

Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. Moby's networking implementation allows for many networks, each with their own IP address range and gateway, to be defined. This feature i...