The vulnerability of the Juniper ATP intrusion prevention system allows a intruder to elevate their privileges and execute arbitrary code.

The vulnerability of the Juniper ATP intrusion prevention system lies in the storage of pre-installed registration data in a file. Exploiting this vulnerability allows a remote attacker to increase their privileges and execute arbitrary code...

Cisco SA520W Security Appliance Path Traversal Vulnerability

The Cisco SA520W Security Appliance is designed for organizations with fewer than 100 employees. Combines firewall, VPN and optional Intrusion Prevention System IPS, email and Web security features. A path traversal vulnerability exists in the Cisco SA520W Security Appliance, which can be exploit...

Cisco SA520W Security Appliance - Path Traversal

Cisco SA520W Security Appliance - Path Traversal Title: Cisco SA520W Security Appliance - Path Traversal Author: Nassim Asrir Contact: [email protected] / https://www.linkedin.com/in/nassim-asrir-b73a57122/ Vendor: https://www.cisco.com/ About Product: =============== Cisco SA 500 Series Securit...

Cisco SA520W Security Appliance Path Traversal

Title: Cisco SA520W Security Appliance - Path Traversal Author: Nassim Asrir Contact: [email protected] / https://www.linkedin.com/in/nassim-asrir-b73a57122/ Vendor: https://www.cisco.com/ About Product: =============== Cisco SA 500 Series Security Appliances are designed for businesses with few...

SonicWall SonicOS NSA UTM Firewall - Bypass & Persistent Vulnerability

Exploit for cgi platform in category web applications Document Title: =============== SonicWall SonicOS NSA - Bypass & Persistent Vulnerability Product & Service Introduction: =============================== Achieve a deeper level of security with the SonicWALL Network Security Appliance NSA Seri...

IKEv2 Protocol Memory Leakage Vulnerability in Multiple Huawei Products

Huawei IPS Module, NGFW Module, NIP6300/6600 series products and Secospace USG series are the new generation of professional intrusion prevention and firewall products launched by Huawei for enterprise, IDC, campus network and carrier customers. A memory leak vulnerability exists in the IKEv2...

IKEv2 protocol memory out-of-bounds access vulnerability in multiple Huawei products (CNVD-2017-38286)

Huawei IPS Module, NGFW Module, NIP6300/6600 series products and Secospace USG series are the new generation of professional intrusion prevention and firewall products launched by Huawei for enterprise, IDC, campus network and carrier customers. A memory out-of-bounds access vulnerability exists ...

This Holiday Season - Buy One IoT Device, Get Free CVEs

As the Internet of Things gains steam and continues to develop, so are adversaries and the threats affecting these systems. Companies throughout the world are busy deploying low cost Internet-connected computing devices aka the Internet of Things to solve business problems and improve our lives. ...

IPS as a Service Blocks WannaCry Spread Across the WAN

One of the most devastating aspects of the recent WannaCry ransomware attack was its self-propagating capability exploiting a vulnerability in the file access protocol, SMB v1. Most enterprises defences are externally-facing, focused on stopping incoming email and web attacks. But, once attackers...

Linux is secure…right?

“There are no threats for Linux servers. Aren’t they built to be secure?” “Linux servers are secure and hardened, why do we need additional security controls on those?” “I do understand there are threats out there but I am not aware of any major attacks on Linux servers” If you find yourself...

Suricata Security Bypass Vulnerability

Suricata is a set of network intrusion detection system IDS, intrusion prevention system IPS and network security monitoring engine developed by the Open Information Security Foundation OISF and its supported vendors, which supports multi-threading, built-in IPv6, and the ability to load...

CVE-2017-3842

A vulnerability in the web-based management interface of the Cisco Intrusion Prevention System Device Manager IDM could allow an unauthenticated, remote attacker to view sensitive information stored in certain HTML comments. More Information: CSCuh91455. Known Affected Releases: 7.21V7...

CVE-2017-3842

CVE-2017-3842 affects Cisco IDS IDM web management interface. An unauthenticated remote attacker could view sensitive information stored in HTML comments due to improper masking of data. Affected release: IDM 7.2(1)V7. The Cisco advisory notes there are no workarounds; remediation requires applyi...

Cisco Intrusion Prevention System Device Manager Information Leakage Vulnerability

Cisco Intrusion Prevention System is an intrusion prevention system. A remote information leakage vulnerability exists in Cisco Intrusion Prevention System Device Manager. An attacker could exploit this vulnerability to obtain sensitive information and launch further attacks...

CVE-2016-6376

The Adaptive Wireless Intrusion Prevention System wIPS feature on Cisco Wireless LAN Controller WLC devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allows remote attackers to cause a denial of service device restart via a malformed wIPS packet, aka Bug ID...

The vulnerability of Cisco IPS software allows a malicious actor to trigger a service failure.

The vulnerability in the produce-verbose-alert function of the Cisco IPS intrusion prevention system allows malicious actors operating remotely to cause a service failure a malfunction in the Analysis Engine process by using fragmented packets...

The vulnerability of Cisco IPS software allows a malicious actor to trigger a service failure.

The vulnerability in the implementation of the access list management mechanism in the Cisco IPS intrusion prevention system allows malicious actors operating remotely to cause a service failure a malfunction in the MainApp process by sending specially crafted packets to port 7000...

The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a service failure

Cisco IOS software contains errors in the implementation of Cisco IOS Intrusion Prevention System and Cisco IOS Zone-Based Firewall components. During their operation, creating multiple sessions may trigger the error ID CSCtdi79848 and a “service failure” by the router due to exhaustion of...

pytbull - Intrusion Detection/Prevention System (IDS/IPS) Testing Framework

pytbull is an Intrusion Detection/Prevention System IDS/IPS Testing Framework for Snort, Suricata and any IDS/IPS that generates an alert file. It can be used to test the detection and blocking capabilities of an IDS/IPS, to compare IDS/IPS, to compare configuration modifications and to...

Buffer Overflow Vulnerability in Multiple Huawei Products

Huawei IPS Module and others are intrusion prevention and intrusion detection products from Huawei, China. A buffer overflow vulnerability exists in multiple Huawei products. An attacker could exploit this vulnerability to cause a denial of service or execute arbitrary code by constructing a...