Internet Explorer Security Feature Bypass Vulnerability

A restricted ports security feature bypass vulnerability exists for Internet Explorer. An attacker could take advantage of the vulnerability to trick a user into connecting to a remote system. To exploit the vulnerability, an attacker would have to either convince a user to visit a malicious...

The vulnerability of Cisco PIX software allows a malicious individual to trigger a service failure.

The vulnerability in Cisco PIX systems with open telnet or SSH ports allows attackers to induce service failures by attempting to connect to services at a very high frequency...

The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a service failure

Cisco IOS software contains a vulnerability in the Internet Key Exchange IKE protocol. This vulnerability allows a malicious attacker to send specially crafted IKE packets to any of the UDP ports 500, 848, 4500, or 4848. This causes the router to restart and trigger a “service failure”...

qemu: incorrect banked access bounds checking in vga module

An out-of-bounds read/write access flaw was found in the way QEMU's VGA emulation with VESA BIOS Extensions VBE support performed read/write operations using I/O port methods. A privileged guest user could use this flaw to execute arbitrary code on the host with the privileges of the host's QEMU...

SOL73112451 - Oracle Java SE vulnerability CVE-2016-3427

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

drchrono: node.drchrono.com - Information Disclosure and Windows Host Exposed

This host has the following TCP ports open; 21 - FTP 22 - SSH 135 - Windows RPC Dynamic 445 - Microsoft DS 3389 - Remote Desktop 5986 - PowerShell Remoting 47001 - WinRM The server appears to be secured well on the whole. However the services SSH and FTP do all give out some information. Please s...

CVE-2016-1407

Cisco IOS XR through 5.3.2 mishandles Local Packet Transport Services LPTS flow-base entries, which allows remote attackers to cause a denial of service session drop by making many connection attempts to open TCP ports, aka Bug ID CSCux95576...

CVE-2016-1407

Cisco IOS XR through 5.3.2 mishandles Local Packet Transport Services LPTS flow-base entries, which allows remote attackers to cause a denial of service session drop by making many connection attempts to open TCP ports, aka Bug ID CSCux95576...

Code injection

Cisco IOS XR through 5.3.2 mishandles Local Packet Transport Services LPTS flow-base entries, which allows remote attackers to cause a denial of service session drop by making many connection attempts to open TCP ports, aka Bug ID CSCux95576...

CVE-2016-1407

Cisco IOS XR through 5.3.2 mishandles Local Packet Transport Services LPTS flow-base entries, which allows remote attackers to cause a denial of service session drop by making many connection attempts to open TCP ports, aka Bug ID CSCux95576...

Cisco IOS XR < 6.1.1 on ASR 9000 LPTS DoS

The version of Cisco IOS XR running on the remote ASR 9000 device is prior to 6.1.1. It is, therefore, affected by a denial of service vulnerability in the Local Packet Transport Services LPTS network stack due to improper handling of flow base entries, in which too many known entries for a...

Cisco IOS XR LPTS Denial of Service Vulnerability (/cisco-sa-20160519-ios-xr)

A vulnerability in the Local Packet Transport Services LPTS network stack of Cisco IOS XR for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause a limited denial of service DoS condition on an affected platform. Copyright C 2016 Greenbone...

mail.tanzaniaports.com XSS vulnerability

Vulnerable URL: https://mail.tanzaniaports.com/webmail/?color=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Cisco IOS XR Software LPTS Denial of Service Vulnerability

A vulnerability in the Local Packet Transport Services LPTS network stack of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a limited denial of service DoS condition on an affected platform. The vulnerability is due to improper handling of flow base entries by LPTS...

VMSA-2016-0005:VMware product updates address CRITICAL and HIGH security issues

VMSA-2016-0005.5 VMware product updates address critical and important security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0005.5 VMware Security Advisory Synopsis: VMware product updates address critical and important security issues. VMware Security Advisory...

Generate TCP/UDP Outbound Traffic On Multiple Ports

This module generates TCP or UDP traffic across a sequence of ports, and is useful for finding firewall holes and egress filtering. It only generates traffic on the port range you specify. It is up to you to run a responder or packet capture tool on a remote endpoint to determine which ports are...

qemu: incorrect banked access bounds checking in vga module

An out-of-bounds read/write access flaw was found in the way QEMU's VGA emulation with VESA BIOS Extensions VBE support performed read/write operations using I/O port methods. A privileged guest user could use this flaw to execute arbitrary code on the host with the privileges of the host's QEMU...

kernel: kvm: reporting emulation failures to userspace

It was found that reporting emulation failures to user space could lead to either a local CVE-2014-7842 or a L2-L1 CVE-2010-5313 denial of service. In the case of a local denial of service, an attacker must have access to the MMIO area or be able to access an I/O port. Please note that on certain...

Linux kernel IPC Routing Kernel Module Denial of Service Vulnerability

Linux kernel is an open source operating system. The 'msmipcrouterbindcontrolport' function in the net/ipcrouter/ipcroutercore.c file in the IPC router kernel module of the Linux kernel used in Qualcomm Innovation Center QuIC Android contributions for MSM and other products failed to verify wheth...

CVE-2016-2059

The msmipcrouterbindcontrolport function in net/ipcrouter/ipcroutercore.c in the IPC router kernel module for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not verify that a port is a client port, which allows...