Lucene search
+L

19003 matches found

Packet Storm
Packet Storm
added 2021/09/28 12:00 a.m.501 views

FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 Configuration Disclosure

FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 Unauthenticated Config Download Vendor: FatPipe Networks Inc. Product web page: https://www.fatpipeinc.com Affected version: WARP / IPVPN / MPVPN 10.2.2r38 10.2.2r25 10.2.2r10 10.1.2r60p82 10.1.2r60p71 10.1.2r60p65 10.1.2r60p58s1 10.1.2r60p58 10.1.2r60p55...

7.4AI score
SaveExploits0
zdt
zdt
added 2021/09/28 12:00 a.m.185 views

FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - Remote Privilege Escalation Exploit

Exploit Title: FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - Remote Privilege Escalation Date: 25.07.2021 Exploit Author: LiquidWorm Vendor Homepage: https://www.fatpipeinc.com !/usr/bin/env python3 FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 Remote Privilege Escalation Vendor: FatPipe Networks Inc...

0.3AI score
SaveExploits0
zdt
zdt
added 2021/09/28 12:00 a.m.184 views

FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - (Add Admin) Cross-Site Request Forgery Vulnerability

Exploit Title: FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - 'Add Admin' Cross-Site Request Forgery CSRF Exploit Author: LiquidWorm Vendor Homepage: https://www.fatpipeinc.com !-- FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 CSRF Add Admin Exploit Vendor: FatPipe Networks Inc. Product web page:...

0.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2021/09/28 12:00 a.m.204 views

FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 Privilege Escalation

!/usr/bin/env python3 FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 Remote Privilege Escalation Vendor: FatPipe Networks Inc. Product web page: https://www.fatpipeinc.com Affected version: WARP / IPVPN / MPVPN 10.2.2r38 10.2.2r25 10.2.2r10 10.1.2r60p82 10.1.2r60p71 10.1.2r60p65 10.1.2r60p58s1...

0.5AI score
SaveExploits0
zdt
zdt
added 2021/09/28 12:00 a.m.196 views

FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - Hidden Backdoor Account (Write Access) Vulnerability

Exploit Title: FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - Hidden Backdoor Account Write Access Exploit Author: LiquidWorm Vendor Homepage: https://www.fatpipeinc.com FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 Hidden Backdoor Account Write Access Vendor: FatPipe Networks Inc. Product web page:...

0.4AI score
SaveExploits0
zdt
zdt
added 2021/09/28 12:00 a.m.163 views

FatPipe Networks WARP 10.2.2 - Authorization Bypass Vulnerability

Exploit Title: FatPipe Networks WARP 10.2.2 - Authorization Bypass Exploit Author: LiquidWorm Vendor Homepage: https://www.fatpipeinc.com FatPipe Networks WARP 10.2.2 Authorization Bypass Vendor: FatPipe Networks Inc. Product web page: https://www.fatpipeinc.com Affected version: WARP 10.2.2r38...

0.7AI score
SaveExploits0
Exploit DB
Exploit DB
added 2021/09/28 12:00 a.m.248 views

FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - Hidden Backdoor Account (Write Access)

Exploit Title: FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - Hidden Backdoor Account Write Access Date: 25.07.2021 Exploit Author: LiquidWorm Vendor Homepage: https://www.fatpipeinc.com FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 Hidden Backdoor Account Write Access Vendor: FatPipe Networks Inc. Produc...

5.3AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
added 2021/09/27 12:00 a.m.259 views

FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 Hidden Backdoor Account (Write Access)

Summary FatPipe Networks invented the concept of router-clustering, which provides the highest level of reliability, redundancy, and speed of Internet traffic for Business Continuity and communications. FatPipe WARP achieves fault tolerance for companies by creating an easy method of combining tw...

9.8CVSS7.2AI score0.05598EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
added 2021/09/27 12:00 a.m.402 views

FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 CSRF Add Admin Exploit

Summary FatPipe Networks invented the concept of router-clustering, which provides the highest level of reliability, redundancy, and speed of Internet traffic for Business Continuity and communications. FatPipe WARP achieves fault tolerance for companies by creating an easy method of combining tw...

9.8CVSS7.2AI score0.39824EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2021/09/27 12:00 a.m.29 views

F5 Networks BIG-IP : BIG-IP APM XSS vulnerability (K41997459)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.4.4 / 15.1.4 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K41997459 advisory. - On version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x,...

6.1CVSS6AI score0.00581EPSS
SaveExploits0References2
Zero Science Lab
Zero Science Lab
added 2021/09/27 12:00 a.m.285 views

FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 Remote Privilege Escalation

Summary FatPipe Networks invented the concept of router-clustering, which provides the highest level of reliability, redundancy, and speed of Internet traffic for Business Continuity and communications. FatPipe WARP achieves fault tolerance for companies by creating an easy method of combining tw...

8.8CVSS7.3AI score0.01604EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
added 2021/09/27 12:00 a.m.282 views

FatPipe Networks WARP 10.2.2 Authorization Bypass

Summary FatPipe Networks invented the concept of router-clustering, which provides the highest level of reliability, redundancy, and speed of Internet traffic for Business Continuity and communications. FatPipe WARP achieves fault tolerance for companies by creating an easy method of combining tw...

5.3CVSS6AI score0.02703EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
added 2021/09/27 12:00 a.m.336 views

FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 Unauthenticated Config Download

Summary FatPipe Networks invented the concept of router-clustering, which provides the highest level of reliability, redundancy, and speed of Internet traffic for Business Continuity and communications. FatPipe WARP achieves fault tolerance for companies by creating an easy method of combining tw...

7.5CVSS7AI score0.01794EPSS
SaveExploits1
ICS
ICS
added 2021/09/23 12:00 a.m.47 views

Trane Symbio (Update B)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Low attack complexity Vendor: Trane Equipment: Symbio 700 and Symbio 800 controllers Vulnerability: Code Injection 2. UPDATE INFORMATION The updated advisory is a follow-up to the original advisory titled ICSA-21-266-01 Trane Symbio that was published...

7.6CVSS8.2AI score0.00272EPSS
SaveExploits0References5
CISA
CISA
added 2021/09/23 12:00 a.m.17 views

CISA Releases Guidance: IPv6 Considerations for TIC 3.0

The federal government has prioritized the transition of federal networks to Internet Protocol version 6 IPv6 since the release of Office of Management and Budget OMB Memorandum 05-22 in 2005. In 2020, OMB renewed its focus on IPv6 through the publication of OMB Memorandum 21-07. That memorandum...

6.6AI score
SaveExploits0References4
Imperva Blog
Imperva Blog
added 2021/09/22 3:28 p.m.24 views

Imperva An Eight-Time Magic Quadrant Leader for Web Application and API Protection

2021 has seen a lot of change. Billionaires now go where only governments and Red Bull gimmicks could go before. The 2020 Olympics didn’t take place in 2020. Tom Brady won his 7th Super Bowl for a completely new franchise those of you in the US get this reference. Similar change in application...

0.4AI score
SaveExploits0
ICS
ICS
added 2021/09/22 11:13 a.m.12 views

Festo SBRD-Q/SBOC-Q/SBOI-Q

SUMMARY The affected product families are cameras SBOC/SBOI and the Controller SBRD. The vulnerabilities are located within the Ethernet IP Stack from EIPStackGroup OpENer Ethernet/IP. 2. IMPACT Please consult the CVEs listed above and ICSA-21-105-02. 3. MITIGATION - Minimize network exposure...

6.7AI score
SaveExploits0References12
OSV
OSV
added 2021/09/21 6:28 p.m.29 views

GHSA-74J8-88MM-7496 Confused Deputy in Kubernetes

A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or ValidatingWebhookConfiguration requests are able to redirect kube-apiserver requests to private networks of the apiserver. If that user can view kube-apiserver logs when the lo...

4.1CVSS4.4AI score0.021EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2021/09/21 6:28 p.m.66 views

Confused Deputy in Kubernetes

A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or ValidatingWebhookConfiguration requests are able to redirect kube-apiserver requests to private networks of the apiserver. If that user can view kube-apiserver logs when the lo...

4.1CVSS4.9AI score0.021EPSS
SaveExploits0References6Affected Software1
Akamai Blog
Akamai Blog
added 2021/09/21 1:00 p.m.17 views

What Is a TCP Three-Way Handshake?

The TCP three-way handshake is one of the critical building blocks of the internet. It facilitates the smooth and consistent flow of information across and among different networks without compromising security...

7.1AI score
SaveExploits0
Rows per page
Query Builder