Intel Puma Denial of Service Vulnerability (CNVD-2017-30930)

Intel Puma is a system-on-chip SoC from Intel. Intel Puma suffers from a denial of service vulnerability that allows remote attackers to cause a denial of service performance degradation by sending a moderate amount of small packets to many TCP or UDP ports...

How to verify when WEM Agent applied CPU Clamping policy

Verify whether WEM Agent applied CPU Clamping policy...

CVE-2017-9538

The 'Upload logo from external path' function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to cause a denial of service permanent display of a "Cannot exit above the top directory" error message throughout the entire web application via a ".." in the pat...

CVE-2017-9537

Persistent cross-site scripting XSS in the Add Node function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to introduce arbitrary JavaScript into various vulnerable parameters...

CVE-2017-9537

Persistent cross-site scripting XSS in the Add Node function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to introduce arbitrary JavaScript into various vulnerable parameters...

CVE-2017-9538

The 'Upload logo from external path' function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to cause a denial of service permanent display of a "Cannot exit above the top directory" error message throughout the entire web application via a ".." in the pat...

Directory traversal

The 'Upload logo from external path' function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to cause a denial of service permanent display of a "Cannot exit above the top directory" error message throughout the entire web application via a ".." in the pat...

Cross site scripting

Persistent cross-site scripting XSS in the Add Node function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to introduce arbitrary JavaScript into various vulnerable parameters...

[SECURITY] Fedora 26 Update: firefox-56.0-2.fc26

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 27 Update: nodejs-8.6.0-1.fc27

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

CVE-2017-9538

The 'Upload logo from external path' function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to cause a denial of service permanent display of a "Cannot exit above the top directory" error message throughout the entire web application via a ".." in the pat...

CVE-2017-9537

SolarWinds Network Performance Monitor 12.0.15300.90 is affected by CVE-2017-9537 (and related records) due to a persistent XSS in the Add Node function. An attacker can inject arbitrary JavaScript into multiple vulnerable parameters (e.g., City, Comments, Department) during node-adding workflows...

[SECURITY] Fedora 27 Update: firefox-55.0.3-1.fc27

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

CVE-2017-14350

A potential security vulnerability has been identified in HPE Application Performance Management BSM Platform versions 9.26, 9.30, 9.40. The vulnerability could be remotely exploited to allow code execution...

CVE-2017-14350

A potential security vulnerability has been identified in HPE Application Performance Management BSM Platform versions 9.26, 9.30, 9.40. The vulnerability could be remotely exploited to allow code execution...

CVE-2017-13982

A directory traversal vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows users to upload unrestricted files...

SolarWinds Network Performance Monitor 12.0.15300.90 Cross Site Scripting Vulnerability

Exploit for windows platform in category dos / poc ------------------------------------------------------------- Vulnerability type: Persistent Cross-Site Scripting ------------------------------------------------------------- Credit: Andy Tan CVE ID: CVE-2017-9537...

CVE-2017-13982

HPE BSM Platform Application Performance Management System Health suffers a directory traversal/unrestricted file upload flaw in versions 9.26, 9.30, and 9.40. The root cause involves the UploadManager servlet failing to validate user-supplied paths, enabling an attacker to upload arbitrary files...

TCP Stream Replay Tool: TCPCopy

Although the real live flow is important for the test of Internet server applications, it is hard to simulate it as online environments are too complex. To support more realistic testing of Internet server applications, we develop a live flow reproduction tool – TCPCopy, which could generate the...

SolarWinds Network Performance Monitor 12.0.15300.90 Cross Site Scripting

------------------------------------------------------------- Vulnerability type: Persistent Cross-Site Scripting ------------------------------------------------------------- Credit: Andy Tan CVE ID: CVE-2017-9537 ----------------------------------------------- Product: SolarWinds Network...