Sql injection

SQL injection vulnerability in the MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to execute arbitrary SQL commands via Relay Service Server...

Hardcoded credentials

MaLion for Windows and Mac versions 3.2.1 to 5.2.1 uses a hardcoded cryptographic key which may allow an attacker to alter the connection settings of Terminal Agent and spoof the Relay Service...

CVE-2017-10817

MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to bypass authentication to alter settings in Relay Service Server...

CVE-2017-10818

MaLion for Windows and Mac versions 3.2.1 to 5.2.1 uses a hardcoded cryptographic key which may allow an attacker to alter the connection settings of Terminal Agent and spoof the Relay Service...

Authentication flaw

MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to bypass authentication to alter settings in Relay Service Server...

CVE-2017-10818

CVE-2017-10818 affects Intercom MaLion for Windows and Mac (versions 3.2.1–5.2.1). The vulnerability stems from a hard-coded cryptographic key, which may allow an attacker to alter the Terminal Agent’s connection settings and spoof the Relay Service. The NVD entry documents a high/critical risk p...

CVE-2017-10817

MaLion for Windows and Mac (versions 5.0.0–5.2.1) contains an authentication bypass vulnerability that allows remote attackers to change settings in the Relay Service Server. The issue is documented in CVE-2017-10817 and is reflected in NVD entries with high to critical impact (CVSSv3.1: base sco...

CVE-2017-10817

MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to bypass authentication to alter settings in Relay Service Server...

CVE-2017-10818

MaLion for Windows and Mac versions 3.2.1 to 5.2.1 uses a hardcoded cryptographic key which may allow an attacker to alter the connection settings of Terminal Agent and spoof the Relay Service...

CVE-2017-10817: Improper Authentication

MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to bypass authentication to alter settings in Relay Service Server...

CVE-2017-10816: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to execute arbitrary SQL commands via Relay Service Server...

PT-2017-11524

Name of the Vulnerable Software and Affected Versions MaLion for Windows and Mac versions 5.0.0 through 5.2.1 Description The issue allows remote attackers to execute arbitrary SQL commands via the Relay Service Server. This is a SQL injection vulnerability. Recommendations For versions 5.0.0...

PT-2017-11525

Name of the Vulnerable Software and Affected Versions MaLion for Windows and Mac versions 5.0.0 through 5.2.1 Description The issue allows remote attackers to bypass authentication and alter settings in the Relay Service Server. Recommendations For versions 5.0.0 through 5.2.1, update to a versio...

CVE-2017-10818: Use of Hard-coded Credentials

MaLion for Windows and Mac versions 3.2.1 to 5.2.1 uses a hardcoded cryptographic key which may allow an attacker to alter the connection settings of Terminal Agent and spoof the Relay Service...

PT-2017-11526

Name of the Vulnerable Software and Affected Versions MaLion for Windows and Mac versions 3.2.1 through 5.2.1 Description The issue concerns a hardcoded cryptographic key in MaLion, which may allow an attacker to alter the connection settings of Terminal Agent and spoof the Relay Service...

Juniper vSRX and SRX Series Appliances Junos OS Denial of Service Vulnerability

Juniper vSRX and SRX are both products of Juniper Networks, Inc. vSRX is a firewall emulator. srx is a firewall appliance. junos OS is one of the operating systems. dhcp is one of the dynamic host configuration protocols. A security vulnerability exists in Junos OS versions 12.1X46, 12.3X48, and...

Design/Logic Flaw

On all vSRX and SRX Series devices, when the DHCP or DHCP relay is configured, specially crafted packet might cause the flowd process to crash, halting or interrupting traffic from flowing through the devices. Repeated crashes of the flowd process may constitute an extended denial of service...

CVE-2017-10605: Improper Input Validation

On all vSRX and SRX Series devices, when the DHCP or DHCP relay is configured, specially crafted packet might cause the flowd process to crash, halting or interrupting traffic from flowing through the devices. Repeated crashes of the flowd process may constitute an extended denial of service...

CVE-2017-10605

On Junos OS for vSRX/SRX Series, DHCP or DHCP relay can trigger flowd crashes via specially crafted DHCP packets, causing traffic interruption and potential extended DoS with failover implications. Affected releases include 12.1X46 before 12.1X46-D67, 12.3X48 before 12.3X48-D50, and 15.1X49 befor...

NTLM, LDAP&RDP Relay vulnerability analysis-vulnerability warning-the black bar safety net

Over the past few months, the Preempt research team found and reported two of Microsoft's NT LAN Manager NTLM vulnerability. These vulnerabilities have the same problem, IE NTLM does not correctly handle two different protocols. These issues are very important, because even turn on LDAP server...