11338 matches found
HPESBHF03874 rev.1 - Certain HPE Products using Intel-based Processors, L1 Terminal Fault (L1TF) Speculative Side-channel Vulnerabilities, Local Disclosure of Information
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL580 Gen10 Server - Prior to 1.4206-20-20184 Jul 2018 HPE ProLiant DL560 Gen10 Server - Prior to 1.4206-20-20184 Jul 2018 HPE ProLiant DL380 Gen10 Server - Pri...
F5 Networks BIG-IP : F5 BIG-IP TMM vulnerability (K31404801)
In versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL categorization feature may cause the Traffic Management Microkernel TMM to produce a core file when it receives malformed URLs during categorization. CVE-2017-6169. Impact An attacker may be able to...
F5 Networks BIG-IP : BIG-IP TMM vulnerability (K77671456)
The Traffic Management Microkernel TMM may restart when processing a specific sequence of packets on IPv6 virtual servers. CVE-2018-5510 Note : This vulnerability does not affect IPv4 virtual servers. Impact The Traffic Management Microkernel TMM generates a core file and restarts. If configured ...
F5 Networks BIG-IP : BIG-IP SSL profile vulnerability (K53931245)
Under certain conditions, virtual servers configured with Client SSL or Server SSL profiles that make use of network hardware security module HSM functionality are exposed and impacted by this issue. CVE-2018-5524 Impact Malformed Transport Layer Security TLS requests sent to virtual servers usin...
F5 Networks BIG-IP : TMM with HTTP/2 vulnerability (K45320419)
Maliciously crafted HTTP/2 request frames can lead to denial of service. There is data plane exposure for virtual servers when the HTTP2 profile is enabled. There is no control plane exposure to this issue. CVE-2018-5514 Impact The BIG-IP system may temporarily fail to process traffic as it...
F5 Networks BIG-IP : TMM vulnerability (K07369970)
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 13.0.0, undisclosed requests made to BIG-IP virtual servers which make use of the 'HTTP/2 profile' may result in a disruption of service to TMM. CVE-2017-6151...
F5 Networks BIG-IP : TMM vulnerability (K64208870)
Malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with the non-default 'normalize URI' configuration options used in iRules and/or BIG-IP LTM policies. CVE-2018-15319 Impact An attacker may be able to disrupt traffic or cause the...
[SECURITY] [DLA 1561-1] phpldapadmin security update
Package : phpldapadmin Version : 1.2.2-5.2+deb8u1 CVE ID : CVE-2017-11107 Debian Bug : 867719 It was discovered that there was a cross-site scripting XSS vulnerability in phpldapadmin, a web-based interface for administering LDAP servers. For Debian 8 "Jessie", this problem has been fixed in...
CVE-2018-15319
CVE-2018-15319 affects F5 BIG-IP TMM when HTTP profiles or iRules use the non-default Normalize URI options. Affected: BIG-IP 14.0.0–14.0.0.2, 13.0.0–13.1.1.1, 12.1.0–12.1.3.6. Root cause: certain HTTP URI/Use normalized URI configurations allow malicious requests to trigger TMM restart. Impact: ...
ThreatList: Dead Web Apps Haunt 70 Percent of FT 500 Firms
A study of abandoned websites owned by leading global corporations hammers home the point that old web applications need to be properly mitigated or retired. Otherwise, these resources often haunt a firm long after they have been forgotten. Researchers at High-Tech Bridge used the Financial Times...
HPESBHF03894 rev.1 - HPE Integrated Lights-Out 5 (iLO 5) Firmware Updates, Local Bypass of Security Restrictions
Potential Security Impact: Local: Bypass Security Restrictions SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers - Prior to v1.37 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2018-7113 |...
HPESBHF03869 rev.1 - HPE Windows Firmware Installer for certain HPE Gen9,Gen8, G7, and G6 Servers, Local Disclosure of Privileged Information
Potential Security Impact: Local: Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 2 iLO 2 Firmware for ProLiant G6 Servers - Prior to v2.33 HPE Integrated Lights-Out 3 iLO 3 Firmware for ProLiant G7 Servers - Prior to...
ServersCheck Monitoring Software 14.3.3 Cross Site Scripting Vulnerability
Exploit for multiple platform in category web applications + ServersCheck Monitoring Software 14.3.3 Cross Site Scripting Vulnerability + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source:...
DarkPulsar FAQ
What's it all about? In March 2017, a group of hackers calling themselves "the Shadow Brokers" published a chunk of stolen data that included two frameworks: DanderSpritz and FuzzBunch. The Fuzzbunch framework contains various types of plugins designed to analyze victims, exploit vulnerabilities,...
libssh Authentication Bypass Makes it Trivial to Pwn Rafts of Servers
The libssh open-source project has issued an update to address an authentication bypass vulnerability in the server code — to say that it’s trivial to exploit is an understatement. The flaw CVE-2018-10933 exists in libssh versions 0.6 and above being used in server mode – and it allows anyone to...
Improper certificate validation in org.apache.httpcomponents:httpclient
http/conn/ssl/AbstractVerifier.java in Apache Commons HttpClient before 4.2.3 does not properly verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via...
Microsoft Windows - FSCTL_FIND_FILES_BY_SID Information Disclosure Exploit
Exploit for windows platform in category dos / poc Windows: FSCTLFINDFILESBYSID Information Disclosure Platform: Windows 10 1709, 1803 Class: Information Disclosure / Elevation of Privilege Summary: The FSCTLFINDFILESBYSID control code doesn’t check for permissions to list a directory leading to...
SAP BusinessObjects BI Platform Servers Information Disclosure Vulnerability
SAP BusinessObjects Business Intelligence BI Platform Servers is a suite of business intelligence software and enterprise performance solutions from SAP. The product has a report generation, analysis, data visualization, etc. Software Development Kit SDK is one of the software development kit. An...
FitMetrix Exposes Millions of Customer Details, Accessed by Criminals
FitMetrix, which makes performance-tracking software that gym owners can brand and offer to their customers, has exposed millions of customers’ records, because they were maintaining completely open cloud servers. To boot, the records were accessed by cybercriminals prior to the public access...
