Fedora: Security Advisory for cacti-spine (FEDORA-2020-90f1c8229e)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for cacti-spine (FEDORA-2020-0fc6dd0fd2)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security Bulletin: Vulnerability in IBM® Java SDK affects WebSphere Application Server and IBM Tivoli Netcool Performance Manager October 2019

Summary There is vulnerability in IBM® SDK Java™ Technology Edition, Version that is used by Tivoli Netcool Performance Manager. This issues is disclosed as part of the IBM Java SDK updates for October 2019. Information about a security vulnerability affecting IBM WebSphere Application Server has...

PT-2020-9352

Name of the Vulnerable Software and Affected Versions: SolarWinds Network Performance Monitor versions 2018, NPM 12.3, NetPath 1.1.3 Description: The issue allows cross-site scripting XSS by authenticated users. This is achieved via a crafted onerror attribute of a VIDEO element in an action for ...

CVE-2019-12954: Improper Neutralization of Input During Web Page Generation

SolarWinds Network Performance Monitor Orion Platform 2018, NPM 12.3, NetPath 1.1.3 allows XSS by authenticated users via a crafted onerror attribute of a VIDEO element in an action for an ALERT...

qus-performance.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1093345 Security Researcher geeknik Helped patch 8722 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting qus-performance.com websit...

[SECURITY] Fedora 31 Update: firefox-73.0-2.fc31

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

At 21 Tbps, reaching new levels of IPv6 traffic!

While setting a new record of 140 Tbps of peak traffic delivered on February 11th, Akamai reached another new milestone in the process: 21 Tbps of peak IPv6 traffic delivered! The global adoption of IPv6 is important to the future of the Internet and Akamai has been committed to helping move IPv6...

Important: Red Hat Bug Fix Advisory: Satellite 6.6.2 Async Bug Fix Update

Updated Satellite 6.6 packages that fix several bugs are now available for Red Hat Satellite. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other clien...

Security Bulletin: Vulnerability affecting IBM Network Performance Insight (CVE-2019-12402)

Summary IBM Network Performance Insight has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-12402 DESCRIPTION: The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This...

Security Bulletin: Vulnerability affecting IBM Network Performance Insight (CVE-2019-16335)

Summary IBM Network Performance Insight has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-16335 DESCRIPTION: A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different...

Security Bulletin: Vulnerabilities affect IBM Network Performance Insight (CVE-2019-14379, CVE-2019-17531, CVE-2019-14439 and CVE-2019-14540)

Summary IBM Network Performance Insight has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-14379 DESCRIPTION: SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used because of...

peakperformance.com Cross Site Scripting vulnerability

Security Researcher raviakp1004 Helped patch 511 vulnerabilities Received 4 Coordinated Disclosure badges Received 4 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting peakperformance.com website and its users. Following...

APM Mesh Enterprise Manager Data Modification DoS

The vulnerability of the APM Mesh component of the Enterprise Manager for Fusion Middleware lies in its lack of access control mechanisms. Exploiting this vulnerability could allow a malicious actor to gain access to modify, add, or delete data, obtain unauthorized access to protected information...

xglance-bin Local Root Privilege Escalation

!/bin/sh Exploit Title: xglance-bin root privesc Exploit Author: Robert Jaroszuk and Marco Ortisi RedTimmy Security Date: February 2020 Tested on: RHEL 5.x/6.x/7.x/8.x CVE: CVE-2014-2630 Disclamer: This exploit is for educational purpose only More details on...

xglance-bin 11.00 - Privilege Escalation Exploit

Exploit Title: xglance-bin 11.00 - Privilege Escalation Exploit Author: Robert Jaroszuk and Marco Ortisi RedTimmy Security Tested on: RHEL 5.x/6.x/7.x/8.x CVE: CVE-2014-2630 Disclamer: This exploit is for educational purpose only More details on...

xglance-bin 11.00 - Privilege Escalation

xglance-bin 11.00 - Privilege Escalation Exploit Title: xglance-bin 11.00 - Privilege Escalation Exploit Author: Robert Jaroszuk and Marco Ortisi RedTimmy Security Date: 2020-02-01 Tested on: RHEL 5.x/6.x/7.x/8.x CVE: CVE-2014-2630 Disclamer: This exploit is for educational purpose only More...

Exploit for CVE-2014-2630

perf-exploiter CVE-2014-2630 In one of our recent penetrat...

Nfstream - A Flexible Network Data Analysis Framework

nfstream is a Python package providing fast, flexible, and expressive data structures designed to make working with online or offline network data both easy and intuitive. It aims to be the fundamental high-level building block for doing practical, real world network data analysis in Python...

Security Bulletin: A vulneraqbility in SQLite affects IBM Cloud Application Performance Managment Response Time Monitoring Agent (CVE-2019-16168)

Summary SQLite is vulnerable to a denial of service, caused by missing validation of a sqlitestat1 sz field in whereLoopAddBtreeIndex in sqlite3.c. By providing specially-crafted input, a remote attacker could exploit this vulnerability to cause the application to crash. Vulnerability Details...