385 matches found
5 Years of Fighting DDoS with the Power of Akamai
Additional analysis and research provided by Principal Architect, Tom Emmons Earlier this year, Akamai celebrated the fifth anniversary of the Prolexic acquisition. The merger was officially completed in February of 2014, and a lot has happened since then. In this post, we want to spend a moment...
CVE-2018-15506
In BubbleUPnP 0.9 update 30, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing XXE attack. Remote, unauthenticated attackers can use this vulnerability to: 1 Access arbitrary files from the filesystem with the same permission as the user account...
Xxe
In BubbleUPnP 0.9 update 30, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing XXE attack. Remote, unauthenticated attackers can use this vulnerability to: 1 Access arbitrary files from the filesystem with the same permission as the user account...
CVE-2018-15506
BubbleUPnP 0.9 update 30 is affected by an XML External Entity Processing (XXE) vulnerability in the SSDP/UPnP XML parsing engine. Remote, unauthenticated attackers could (1) read arbitrary files with the running user’s permissions, (2) initiate SMB connections to capture NetNTLM credentials, and...
PT-2019-9113
Name of the Vulnerable Software and Affected Versions BubbleUPnP version 0.9 update 30 Description The XML parsing engine for SSDP/UPnP functionality in the affected software is vulnerable to an XML External Entity Processing XXE attack. This allows remote, unauthenticated attackers to access...
CVE-2018-15506: Improper Restriction of XML External Entity Reference
In BubbleUPnP 0.9 update 30, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing XXE attack. Remote, unauthenticated attackers can use this vulnerability to: 1 Access arbitrary files from the filesystem with the same permission as the user account...
ThreatList: DDoS Attack Sizes Drop 85 Percent Post FBI Crackdown
The average size of distributed denial of service DDoS attacks decreased significantly, dropping by 85 percent in the fourth quarter of 2018. Researchers with NexusGuard said in a Tuesday report shared with Threatpost, that the number of DDoS attacks also dipped significantly, sinking by almost 1...
CVE
CVE-2019-14363 - Netgear WNDR3400v3 Stack-Based Buffer Ove...
CVE-2018-13417
In Vuze Bittorrent Client 5.7.6.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing XXE attack. Remote, unauthenticated attackers can use this vulnerability to: 1 Access arbitrary files from the filesystem with the same permission as the user...
CVE-2018-13415
In Plex Media Server 1.13.2.5154, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing XXE attack. Remote, unauthenticated attackers can use this vulnerability to: 1 Access arbitrary files from the filesystem with the same permission as the user...
CVE-2018-13415
CVE-2018-13415 affects Plex Media Server 1.13.2.5154, specifically the XML parsing engine used for SSDP/UPnP. The vulnerability is an XML External Entity Processing (XXE) flaw that allows unauthenticated attackers on the same network to: (1) read arbitrary files on the host filesystem, (2) establ...
PT-2018-11811
Name of the Vulnerable Software and Affected Versions Vuze Bittorrent Client version 5.7.6.0 Description The XML parsing engine for SSDP/UPnP functionality in Vuze Bittorrent Client is vulnerable to an XML External Entity Processing XXE attack. This allows remote, unauthenticated attackers to...
CVE-2018-13415: Improper Restriction of XML External Entity Reference
In Plex Media Server 1.13.2.5154, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing XXE attack. Remote, unauthenticated attackers can use this vulnerability to: 1 Access arbitrary files from the filesystem with the same permission as the user...
PT-2018-11809
Name of the Vulnerable Software and Affected Versions Plex Media Server version 1.13.2.5154 Description The XML parsing engine for SSDP/UPnP functionality in the affected software is susceptible to an XML External Entity Processing XXE attack. This allows remote, unauthenticated attackers to acce...
CVE-2018-13417: Improper Restriction of XML External Entity Reference
In Vuze Bittorrent Client 5.7.6.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing XXE attack. Remote, unauthenticated attackers can use this vulnerability to: 1 Access arbitrary files from the filesystem with the same permission as the user...
Universal Media Server XXE Vulnerability
In Universal Media Server UMS, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML external entity XXE processing attack. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...
Vuze Bittorrent Client 5.7.6.0 - SSDP Processing XML External Entity Injection Vulnerability
Exploit for jsp platform in category web applications Vuze Bittorrent Client 5.7.6.0 - SSDP Processing XML External Entity Injection Reserved CVE: CVE-2018-13417 Vulnerability Overview The XML parsing engine for Vuze Bittorrent Client's SSDP/UPNP functionality is vulnerable to an XML External...
Plex Media Server 1.13.2.5154 - SSDP Processing XML External Entity Injection Vulnerability
Exploit for jsp platform in category web applications Plex Media Server 1.13.2.5154 - SSDP Processing XML External Entity Injection Reserved CVE: CVE-2018-13415 Vulnerability Overview The XML parsing engine for Plex Media Server's SSDP/UPNP functionality is vulnerable to an XML External Entity...
Xxe
In Universal Media Server UMS 7.1.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing XXE attack. Remote, unauthenticated attackers can use this vulnerability to: 1 Access arbitrary files from the filesystem with the same permission as the user...
CVE-2018-13416
In Universal Media Server UMS 7.1.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing XXE attack. Remote, unauthenticated attackers can use this vulnerability to: 1 Access arbitrary files from the filesystem with the same permission as the user...