267 matches found
NX-OS Software Buffer Overflow Vulnerability in Multiple Cisco Products
Cisco Nexus 2000 Series Switches and so on are different series of switch devices of Cisco Cisco, U.S.A. NX-OS Software is a set of data center-grade operating system software used by the switches running in it. A buffer overflow vulnerability exists in the Internet Group Management Protocol IGMP...
Design/Logic Flaw
A vulnerability in the Internet Group Management Protocol IGMP Snooping feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code and gain full control of an affected system. The attacker could also cause an affected system to reload, resulting in...
CVE-2018-0292
A vulnerability in the Internet Group Management Protocol IGMP Snooping feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code and gain full control of an affected system. The attacker could also cause an affected system to reload, resulting in...
CVE-2018-0292
A vulnerability in the Internet Group Management Protocol IGMP Snooping feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code and gain full control of an affected system. The attacker could also cause an affected system to reload, resulting in...
CVE-2018-0292
CVE-2018-0292 – Cisco NX-OS IGMP Snooping RCE/DoS : A buffer overflow in the IGMP Snooping subsystem of Cisco NX-OS Software could be exploited by an unauthenticated, adjacent attacker to execute arbitrary code and gain full control of an affected system, or cause a reload (DoS). Affected are Nex...
CVE-2018-0292
A vulnerability in the Internet Group Management Protocol IGMP Snooping feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code and gain full control of an affected system. The attacker could also cause an affected system to reload, resulting in...
Cisco NX-OS Software Internet Group Management Protocol Snooping Remote Code Execution and Denial of Service Vulnerability
A vulnerability in the Internet Group Management Protocol IGMP Snooping feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code and gain full control of an affected system. The attacker could also cause an affected system to reload, resulting in...
Erosion of ISP Privacy Rules Sparks New Anti-Snooping Efforts
Since Congress voted to prevent the implementation of new ISP privacy protections there has been a committed and sometimes loud call for new rules. The fear is, without adequate safeguards in place, ISPs will be free to build detailed customer profiles that include names, addresses and online...
Cisco TelePresence Server API Privilege Vulnerability
A vulnerability in Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to emulate Cisco TelePresence Server endpoints. The vulnerability is due to how session identification information is maintained by a specific API of the affected software. An attacker could...
Charger Mobile Ransomware Removed from Google Play
Security researchers have identified a new and evasive mobile ransomware strain called Charger on the Google Play app store. The Charger malware was bundled with an SMS-snooping app called EnergyRescue that pawned itself off as a battery management utility, according to Check Point security...
Mozilla's First Internet Health Report Tackles Security, Privacy
In its first-ever Internet Health Report, the non-profit Mozilla Foundation warned of the dangers of concentrated power among too few internet companies, cyber snooping by nosey governments and new threats posed by connected devices that can further erode privacy. Mozilla released the report this...
WhatsApp Says 'Backdoor' Claim Bogus
Claims of a backdoor in WhatsApp that could be used for third-party snooping were shot down by WhatsApp, which called the allegations false. On Friday, news outlet The Guardian reported that a cryptography researcher had discovered a backdoor in WhatsApp’s messaging service that could “allow...
GitLab: Mailgun misconfiguration leads to email snooping and postmaster@-access on email.mg.gitlab.com
Hi, Previously a blog post went out about Uber's Sendgrid issues: http://blog.pentestnepal.tech/post/149985438982/reading-ubers-internal-emails-uber-bug-bounty Also, a report from @uranium238 went out due to a similar issue with Slack that I know uses Mailgun: https://hackerone.com/reports/163938...
Upcoming Tor Design Battles Hidden Services Snooping
More than 100 malicious Tor Hidden Services Directories HSDirs were found to be snooping on the services they host, and in some cases, operators were actively using the data collected to attack the services. While at first blush, the discovery would seem to put another dent in the privacy and...
Edward Snowden Designs an iPhone Case to Detect & Block Wireless Snooping
We just cannot imagine our lives without smartphones, even for a short while, and NSA whistleblower Edward Snowden had not owned a smartphone since 2013 when he began leaking NSA documents that exposed the government's global surveillance program. Snowden fears that cellular signals of the...
The vulnerability of the Cisco Wireless LAN Controller 2500 software allows a malicious individual to cause service failure.
The vulnerability in the implementation of IGMP for Cisco Wireless LAN Controllers WLCs, when the IGMPv3 Snooping feature is enabled, allows malicious actors operating remotely to trigger service interruptions such as reading beyond the boundaries and rebooting the device by using a specially...
The vulnerability of the Cisco Wireless LAN Controller 4100 software allows a malicious individual to cause service failure.
The vulnerability in the implementation of IGMP for Cisco Wireless LAN Controllers WLCs, when the IGMPv3 Snooping feature is enabled, allows malicious actors operating remotely to trigger service interruptions such as reading beyond the boundaries and rebooting the device by using a specially...
The vulnerability of the Cisco Wireless LAN Controller 2500 software allows a malicious individual to cause service failure.
The vulnerability in the monitoring service of Multimedia Delivery MLD for Cisco Wireless LAN Controllers WLC – when the MLDv2 Snooping function is enabled – allows malicious actors operating remotely to trigger a service failure rebooting the device by using improperly crafted IPv6 MLDv2 packets...
The vulnerability of the Cisco Wireless LAN Controller 4100 software allows a malicious individual to cause service failure.
The vulnerability in the monitoring service of Multimedia Delivery MLD for Cisco Wireless LAN Controllers WLC – when the MLDv2 Snooping function is enabled – allows malicious actors operating remotely to trigger a device reboot by using improperly crafted IPv6 MLDv2 packets...
The vulnerability of the Cisco Wireless LAN Controller 2000 software allows a malicious individual to cause service failure.
The vulnerability in the implementation of IGMP for Cisco Wireless LAN Controllers WLCs, when the IGMPv3 Snooping feature is enabled, allows malicious actors operating remotely to trigger service interruptions such as reading beyond the boundaries and rebooting the device by using a specially...