Juniper Networks Junos OS安全漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability in Juniper Networks Junos OS, which arises from an exception mishandling...

Juniper Junos OS Vulnerability (JSA11225)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11225 advisory. - In an MPLS P2MP environment a Loop with Unreachable Exit Condition vulnerability in the routing protocol daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allow...

Juniper Junos OS Vulnerability (JSA11242)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11242 advisory. - An Incorrect Permission Assignment for Critical Resource vulnerability of a certain file in the filesystem of Junos OS allows a local authenticated attacker to cause routi...

Juniper Networks Junos OS 安全漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS contains a security vulnerability that arises from a cyclic flaw in the Juniper Networks Junos O...

Juniper Networks Junos OS和Junos OS Evolved 缓冲区错误漏洞

Juniper Networks Junos OS and Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system for the company's hardware devices. Juniper Networks Junos OS is a network operating system for Juniper Networks hardware devices that provides a secur...

Telecom giant behind routing SMS discloses 5-year-long data breach

By Deeba Ahmed The target of the data breach Syniverse works with carriers like T-Mobile, Verizon, Twilio, and AT&T in routing SMS text messages. This is a post from HackRead.com Read the original post: Telecom giant behind routing SMS discloses 5-year-long data breach...

Why Facebook, Instagram, and WhatsApp All Went Down Today

The problem relates to something called BGP routing, and it took down every part of Facebook's business...

OnionShare 安全漏洞

OnionShare is an open source tool for securely and anonymously sharing files, hosting websites, and chatting with friends using the Tor network. Used to securely and anonymously share files, host websites, and chat with friends using the Tor network, OnionShare has a file upload vulnerability tha...

Xiaomi AX3600 Command Injection Vulnerability (CNVD-2021-91956)

Xiaomi AX3600 is a router.A security vulnerability exists in Xiaomi AX3600 firmware version 1.1.12 and earlier, which stems from a command injection in the meshd program in the routing system. An attacker could exploit this vulnerability to execute commands with administrator privileges...

NLnet Labs Routinator 输入验证错误漏洞

NLnet Labs Routinator is an RPKI Resource Public Key Infrastructure authenticator written in Rust from Stichting NLnet Stichting Nlnet Labs in the Netherlands. A security vulnerability exists in NLnet Labs Routinator before 0.10.0, which stems from the fact that an invalid RTR load is generated i...

CVE-2020-14109

There is command injection in the meshd program in the routing system, resulting in command execution under administrator authority on Xiaomi router AX3600 with ROM version = 1.1.12...

Command injection

There is command injection in the meshd program in the routing system, resulting in command execution under administrator authority on Xiaomi router AX3600 with ROM version = 1.1.12...

CVE-2020-14109

There is command injection in the meshd program in the routing system, resulting in command execution under administrator authority on Xiaomi router AX3600 with ROM version = 1.1.12...

Siemens RUGGEDCOM ROX Information Disclosure Vulnerability

RUGGEDCOM products offer a level of reliability that sets the standard for communication networks deployed in harsh environments.The RUGGEDCOM RX1400 is a multi-protocol intelligent node that combines Ethernet switching, routing, and application hosting functionality with a variety of wide-area...

Siemens RUGGEDCOM ROX Elevation of Privilege Vulnerability

RUGGEDCOM products offer a level of reliability that sets the standard for communication networks deployed in harsh environments.The RUGGEDCOM RX1400 is a multi-protocol intelligent node that combines Ethernet switching, routing, and application hosting functionality with a variety of wide-area...

Unspecified Vulnerability in Siemens RUGGEDCOM ROX

RUGGEDCOM products offer a level of reliability that sets the standard for communication networks deployed in harsh environments.The RUGGEDCOM RX1400 is a multi-protocol intelligent node that combines Ethernet switching, routing, and application hosting functionality with a variety of wide-area...

Juniper Junos OS DoS (JSA11184)

The version of Junos OS installed on the remote host is affected by a denial of service vulnerability as referenced in the JSA11184 advisory. - Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on PTX platforms and QFX10K Series with Paradise PE chipset-based line cards...

Incorrect Authorization with specially crafted requests

Envoy, which Pomerium is based on, contains two authorization related vulnerabilities: - CVE-2021-32777: incorrectly transform a URL containing a fragment element, causing a mismatch in path-prefix based authorization decisions. - CVE-2021-32779: incorrectly handle duplicate headers, dropping all...

GHSA-CFC2-WJCM-C8FM Incorrect Authorization with specially crafted requests

Envoy, which Pomerium is based on, contains two authorization related vulnerabilities: - CVE-2021-32777: incorrectly transform a URL containing a fragment element, causing a mismatch in path-prefix based authorization decisions. - CVE-2021-32779: incorrectly handle duplicate headers, dropping all...

CVE-2021-39206

Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, contains two authorization related vulnerabilities CVE-2021-32777 and CVE-2021-32779. This may lead to incorrect routing or authorization policy decisions. With specially crafted requests, incorrect...