Huawei EulerOS: Security Advisory for mutt (EulerOS-SA-2021-1098)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities

Summary The Planning Analytics Workspace component of IBM Planning Analytics is affected by vulnerabilities . These have been addressed in IBM Planning Analytics Local v2.0 - Planning Analytics Workspace Release 60. Vulnerability Details CVEID: CVE-2020-4881 DESCRIPTION: IBM Planning Analytics ou...

CVE-2020-4881

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server hostname verification for SSL/TLS communication. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force...

Null pointer dereference

A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to send a specific packet causing the packet forwarding engine PFE to crash and restart, resulting in a Denial of Service DoS. By continuously sending these specific packets, an attacker can repeatedly disabl...

CVE-2021-0206 Junos OS: NFX Series, SRX Series: PFE may crash upon receipt of specific packet when SSL Proxy is configured.

A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to send a specific packet causing the packet forwarding engine PFE to crash and restart, resulting in a Denial of Service DoS. By continuously sending these specific packets, an attacker can repeatedly disabl...

CVE-2021-0206

CVE-2021-0206 is a NULL pointer dereference in Juniper Junos OS that can crash the Packet Forwarding Engine (PFE) on NFX/SRX platforms when SSL Proxy is enabled, causing a DoS. Exploitation requires sending specific packets over the network. Affected ranges include Junos OS on NFX/SRX: 18.3 befor...

CVE-2020-35733

An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts an invalid X.509 certificate chain to a trusted root Certification Authority...

Design/Logic Flaw

An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts an invalid X.509 certificate chain to a trusted root Certification Authority...

CVE-2020-35733

An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts an invalid X.509 certificate chain to a trusted root Certification Authority...

CVE-2020-35733

An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts an invalid X.509 certificate chain to a trusted root Certification Authority...

CVE-2020-35733

An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts an invalid X.509 certificate chain to a trusted root Certification Authority...

CVE-2020-35733

An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts an invalid X.509 certificate chain to a trusted root Certification Authority...

CVE-2020-35733

CVE-2020-35733 affects Erlang/OTP prior to 23.2.2. The issue is in the ssl application where an invalid X.509 certificate chain can be accepted and trusted to a root CA, enabling certificate verification bypass in TLS connections. Multiple vendor advisories reference the same root cause and advis...

Netsia SEBA+ 0.16.1 Authentcation Bypass / Add Root User

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Netsia SEBA+ %q This module exploits an authentication bypass in Netsia SEBA+, triggered by add new root/admin user. HTTP requests made to the...

PT-2021-7691 · Ericsson +2 · Erlang/Otp +2

Name of the Vulnerable Software and Affected Versions: Erlang/OTP versions prior to 23.2.2 Description: An issue was discovered in the ssl application, which accepts and trusts an invalid X.509 certificate chain to a trusted root Certification Authority. This could allow a remote attacker to gain...

Fortinet FortiOS < 6.0.11 / 6.2 < 6.2.5 / 6.4 < 6.4.2 Information Disclosure (FG-IR-20-103)

The remote host is running a version of FortiOS prior to 6.0.11, 6.2.x prior to 6.2.5, or 6.4.x prior to 6.4.2. It is, therefore, affected by an information disclosure vulnerability. A remote, authenticated attacker can exploit this, by executing 'get vpn ssl monitor', in order to read the SSL VP...

Install Apache Zeppelin and connect it to AWS Athena for data exploration, visualization and collaboration

Introduction Apache Zeppelin is a Web-based, open source, notebook system that enables data-driven, interactive data analytics and collaborative documents with SQL. At Imperva Research Group we use it on a daily basis to query data from the Threat Research Data Lake using AWS Athena query engine...

Weak Password Vulnerability in Kirin Fortress of Beijing COSCO Kirin Technology Co.

Beijing COSCO KyLin Technology Co., Ltd. is a software development company mainly focusing on R&D. The main products of the company are COSCO KyLin Barrier Machine, KyLin SSL VPN, KyLin Dynamic Password System, KyLin Cloud Desktop and so on. A weak password vulnerability exists in COSCO KyLin's...

Wprecon - A Vulnerability Recognition Tool In CMS Wordpress, 100% Developed In Go

Hello! Welcome. Wprecon Wordpress Recon, is a vulnerability recognition tool in CMS Wordpress, 100% developed in Go. Notice: Why is the project out of updates these days ?! What happens is that I am doing the vulnerability scanner. Branch Dev Compile and Install Features Random Agent Detection WA...

MGASA-2021-0009 Updated busybox packages fix a security vulnerability

Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download any file over HTTPS using "busybox wget https://compromised-domain.com/important-file"...