Sql injection

SQL injection vulnerability in the MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to execute arbitrary SQL commands via Relay Service Server...

Authentication flaw

MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to bypass authentication to alter settings in Relay Service Server...

Hardcoded credentials

MaLion for Windows and Mac versions 3.2.1 to 5.2.1 uses a hardcoded cryptographic key which may allow an attacker to alter the connection settings of Terminal Agent and spoof the Relay Service...

CVE-2017-10818

CVE-2017-10818 affects Intercom MaLion for Windows and Mac (versions 3.2.1–5.2.1). The vulnerability stems from a hard-coded cryptographic key, which may allow an attacker to alter the Terminal Agent’s connection settings and spoof the Relay Service. The NVD entry documents a high/critical risk p...

CVE-2017-10818

MaLion for Windows and Mac versions 3.2.1 to 5.2.1 uses a hardcoded cryptographic key which may allow an attacker to alter the connection settings of Terminal Agent and spoof the Relay Service...

CVE-2017-10817

MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to bypass authentication to alter settings in Relay Service Server...

CVE-2017-10817

MaLion for Windows and Mac (versions 5.0.0–5.2.1) contains an authentication bypass vulnerability that allows remote attackers to change settings in the Relay Service Server. The issue is documented in CVE-2017-10817 and is reflected in NVD entries with high to critical impact (CVSSv3.1: base sco...

Juniper vSRX and SRX Series Appliances Junos OS Denial of Service Vulnerability

Juniper vSRX and SRX are both products of Juniper Networks, Inc. vSRX is a firewall emulator. srx is a firewall appliance. junos OS is one of the operating systems. dhcp is one of the dynamic host configuration protocols. A security vulnerability exists in Junos OS versions 12.1X46, 12.3X48, and...

Design/Logic Flaw

On all vSRX and SRX Series devices, when the DHCP or DHCP relay is configured, specially crafted packet might cause the flowd process to crash, halting or interrupting traffic from flowing through the devices. Repeated crashes of the flowd process may constitute an extended denial of service...

CVE-2017-10605

On Junos OS for vSRX/SRX Series, DHCP or DHCP relay can trigger flowd crashes via specially crafted DHCP packets, causing traffic interruption and potential extended DoS with failover implications. Affected releases include 12.1X46 before 12.1X46-D67, 12.3X48 before 12.3X48-D50, and 15.1X49 befor...

NTLM, LDAP&RDP Relay vulnerability analysis-vulnerability warning-the black bar safety net

Over the past few months, the Preempt research team found and reported two of Microsoft's NT LAN Manager NTLM vulnerability. These vulnerabilities have the same problem, IE NTLM does not correctly handle two different protocols. These issues are very important, because even turn on LDAP server...

Denial of Service Vulnerability in Multiple IBM Products

IBM MQ formerly known as IBM WebSphere MQ is a messaging middleware product from IBM. The product focuses on providing a reliable and proven messaging backbone for Service Oriented Architecture SOA. A security vulnerability exists in IBM MQ versions 9.0.1 through 9.0.2. An attacker could exploit...

Critical Flaws Found in Windows NTLM Security Protocol – Patch Now

As part of this month's Patch Tuesday, Microsoft has released security patches for a serious privilege escalation vulnerability which affect all versions of its Windows operating system for enterprises released since 2007. Researchers at behavioral firewall specialist Preempt discovered two...

Microsoft Addresses NTLM Bugs That Facilitate Credential Relay Attacks

NTLM has a long history of serious vulnerabilities and of causing anxiety for Windows and UNIX server admins. Their collective angst is unlikely to lessen today with the disclosure of a pair of new vulnerabilities in the protocol suite. Microsoft today patched one of the issues among its Patch...

Code injection

Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay not the exit relay's family, which might allow remote attackers to defeat intended anonymity properties by leveraging the existence of large families...

CVE-2017-0377

Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay not the exit relay's family, which might allow remote attackers to defeat intended anonymity properties by leveraging the existence of large families...

CVE-2017-0377

Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay not the exit relay's family, which might allow remote attackers to defeat intended anonymity properties by leveraging the existence of large families...

CVE-2017-0377

Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay not the exit relay's family, which might allow remote attackers to defeat intended anonymity properties by leveraging the existence of large families...

CVE-2017-0377

Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay not the exit relay's family, which might allow remote attackers to defeat intended anonymity properties by leveraging the existence of large families...

CVE-2017-0377

Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay not the exit relay's family, which might allow remote attackers to defeat intended anonymity properties by leveraging the existence of large families...