Pan Am Flight 103: Robert Mueller’s 30-Year Search for Justice

Known as the Lockerbie bombing, in December 1988 a bomb downed a Pan Am jet, leaving 270 dead. It was the first mass killing of Americans by terrorists. As the head of the Justice Department’s criminal division, Robert Mueller oversaw the case. And for him, it was personal...

PT-2019-1520

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.0.2 through 1.0.2q PAN-OS versions prior to 7.1.25 PAN-OS versions prior to 8.0.20 PAN-OS versions prior to 8.1.8 PAN-OS versions prior to 9.0.2 MySQL Server versions 5.6.43 and earlier MySQL Server versions 5.7.25 and earli...

The vulnerability in the web interface of the GlobalProtect operating system PAN-OS allows a hacker to inject arbitrary JavaScript or HTML code.

The vulnerability in the web interface of the GlobalProtect operating system PAN-OS is due to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code...

CVE-2018-10141

GlobalProtect Portal Login page in Palo Alto Networks PAN-OS before 8.1.4 allows an unauthenticated attacker to inject arbitrary JavaScript or HTML...

CVE-2018-10141

GlobalProtect Portal Login page in Palo Alto Networks PAN-OS before 8.1.4 allows an unauthenticated attacker to inject arbitrary JavaScript or HTML...

CVE-2018-10141

Cross-Site Scripting vulnerability CVE-2018-10141 in PAN-OS GlobalProtect Portal Login page allows an unauthenticated attacker to inject arbitrary JavaScript or HTML. Affected: PAN-OS GlobalProtect portal login pages on versions prior to 8.1.4; Palo Alto advisory specifies PAN-OS 8.1.3 and earlie...

Cross-Site Scripting (XSS) in GlobalProtect Portal Login Page

A Cross-Site Scripting XSS vulnerability exists in the PAN-OS GlobalProtect Portal Login page. Ref. PAN-99830; CVE-2018-10141 Successful exploitation of this issue may allow an unauthenticated attacker to inject arbitrary JavaScript or HTML. This issue affects PAN-OS 8.1.3 and earlier. PAN-OS 8.0...

Cross-Site Scripting (XSS) in GlobalProtect Portal Login Page

A Cross-Site Scripting XSS vulnerability exists in the PAN-OS GlobalProtect Portal Login page. Ref. PAN-99830; CVE-2018-10141 Successful exploitation of this issue may allow an unauthenticated attacker to inject arbitrary JavaScript or HTML. This issue affects PAN-OS 8.1.3 and earlier. PAN-OS 8.0...

OpenSSL Vulnerabilities in PAN-OS

The OpenSSL library has been found to contain vulnerabilities CVE-2018-0732, CVE-2018-0737, and CVE-2018-0739. Palo Alto Networks software makes use of the vulnerable library and is affected. Ref PAN-98504/ CVE-2018-0732, CVE-2018-0737, and CVE-2018-0739 The OpenSSL library in use by PAN-OS is...

CVE-2018-10141: Improper Neutralization of Input During Web Page Generation

GlobalProtect Portal Login page in Palo Alto Networks PAN-OS before 8.1.4 allows an unauthenticated attacker to inject arbitrary JavaScript or HTML...

OpenSSL Vulnerabilities in PAN-OS

The OpenSSL library has been found to contain vulnerabilities CVE-2018-0732, CVE-2018-0737, and CVE-2018-0739. Palo Alto Networks software makes use of the vulnerable library and is affected. Ref PAN-98504/ CVE-2018-0732, CVE-2018-0737, and CVE-2018-0739...

CVE-2018-17404

The SBIbuddy aka com.sbi.erupee application 1.41 and 1.42 for Android might allow an attacker to sniff private information such as mobile number, PAN number from a government-issued ID, and date of birth...

Information disclosure

The SBIbuddy aka com.sbi.erupee application 1.41 and 1.42 for Android might allow an attacker to sniff private information such as mobile number, PAN number from a government-issued ID, and date of birth...

PT-2018-14017

Name of the Vulnerable Software and Affected Versions SBIbuddy aka com.sbi.erupee versions 1.41 through 1.42 Description The issue might allow an attacker to access private information, including mobile numbers, PAN numbers from government-issued IDs, and dates of birth. Recommendations For...

Information about SegmentSmack findings

Palo Alto Networks is aware of recent vulnerability disclousre, known as SegmentSmack, that affects Linux kernel 4.9 and later. At this time, our findings show that Palo Alto Networks PAN-OS devices are not vulnerable to this disclosure CVE-2018-5390. PAN-OS/Panorama platforms are not impacted by...

Information about FragmentSmack findings

Palo Alto Networks is aware of recent vulnerability disclosure, known as FragmentSmack, that affects Linux kernel 3.9 and later. At this time, our findings show that some Palo Alto Networks devices running specific versions of PAN-OS are vulnerable to this disclosure. CVE-2018-5391. This security...

Information about SegmentSmack findings

Palo Alto Networks is aware of recent vulnerability disclousre, known as SegmentSmack, that affects Linux kernel 4.9 and later. At this time, our findings show that Palo Alto Networks PAN-OS devices are not vulnerable to this disclosure CVE-2018-5390. PAN-OS/Panorama platforms are not impacted by...

Information about FragmentSmack findings

Palo Alto Networks is aware of recent vulnerability disclosure, known as FragmentSmack, that affects Linux kernel 3.9 and later. At this time, our findings show that some Palo Alto Networks devices running specific versions of PAN-OS are vulnerable to this disclosure. CVE-2018-5391. This security...

Argus Surveillance DVR 4.0.0.0 Directory Traversal Vulnerability

Exploit for cgi platform in category web applications + Credits: John Page aka hyp3rlinx + Source: http://hyp3rlinx.altervista.org/advisories/ARGUS-SURVEILLANCE-DVR-v4-UNAUTHENTICATED-PATH-TRAVERSAL-FILE-DISCLOSURE.txt + ISR: Apparition Security Greetz: Greetz: indoushka | Eduardo | GGA Vendor...

Palo Alto Networks PAN-OS 6.1.21 and earlier / 7.1.x < 7.1.19 / 8.0.x < 8.0.12 / 8.1.x < 8.1.3 Multiple Vulnerabilities

The version of Palo Alto Networks PAN-OS running on the remote host is 6.x.x or 7.1.x prior to 7.1.19 or 8.0.x prior to 8.0.12 or 8.1.x prior to 8.1.3. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid112161;...