Lucene search
+L

8514 matches found

HackRead
HackRead
added 2020/01/10 8:37 p.m.72 views

Getting a VPN in Japan

By David Balaban Virtual private networks VPN are very popular in Japan however.... This is a post from HackRead.com Read the original post: Getting a VPN in Japan...

1.9AI score
SaveExploits0
ThreatPost
ThreatPost
added 2020/01/10 12:58 p.m.73 views

Oil-and-Gas APT Pivots to U.S. Power Plants.

A known APT group with ties to the Iran-linked APT33, dubbed Magnallium, has expanded its targeting from the global oil-and-gas industry to specifically include electric companies in North America. That’s according to a report from Dragos, released Thursday, which noted that the discovery is part...

0.7AI score
SaveExploits0References11
OpenVAS
OpenVAS
added 2020/01/09 12:00 a.m.28 views

Fedora Update for openconnect FEDORA-2019-6969467639

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.6AI score0.03445EPSS
SaveExploits0References2
ThreatPost
ThreatPost
added 2020/01/07 5:04 p.m.219 views

Sodinokibi Ransomware Behind Travelex Fiasco: Report

The Sodinokibi ransomware strain is apparently behind the New Year’s Eve attack on foreign currency-exchange giant Travelex, which has left its customers and banking partners stranded without its services. The criminals behind the attack are demanding a six-figure sum in return for the decryption...

7.5CVSS0.99999EPSS
SaveExploits34References18
Fortinet
Fortinet
added 2020/01/03 12:00 a.m.51 views

Protect

A Host Header Redirection vulnerability exists in FortiOS SSL-VPN web portal: when an attacker submits specially crafted HTTP requests, the SSL-VPN web portal may respond with a redirection to websites specified by the attacker...

5.8CVSS6.1AI score0.0192EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/12/23 12:00 a.m.60 views

EulerOS 2.0 SP5 : NetworkManager (EulerOS-SA-2019-2698)

According to the version of the NetworkManager packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure CWE-200 vulnerability in DNS resolver that can result in...

7.5CVSS6.5AI score0.01782EPSS
SaveExploits0References2
OSV
OSV
added 2019/12/19 1:15 a.m.7 views

CVE-2019-7487

Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary by an attacker within the parent path could allow code execution...

7.8CVSS7.2AI score0.00462EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2019/12/18 1:34 p.m.35 views

14 Ways to Evade Botnet Malware Attacks On Your Computers

Cybercriminals are busy innovators, adapting their weapons and attack strategies, and ruthlessly roaming the web in search of their next big score. Every manner of sensitive information, such as confidential employee records, customers' financial data, protected medical documents, and government...

7.2AI score
SaveExploits0
NVD
NVD
added 2019/12/11 3:15 p.m.18 views

CVE-2019-14899

A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point, or an adjacent user, to determine if a connected user is using a VPN, make positive inferences about the websites they are visiting, and determine the correct sequence and...

7.4CVSS7.4AI score0.00838EPSS
SaveExploits0References15
UbuntuCve
UbuntuCve
added 2019/12/11 3:15 p.m.48 views

CVE-2019-14899

A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point, or an adjacent user, to determine if a connected user is using a VPN, make positive inferences about the websites they are visiting, and determine the correct sequence and...

7.4CVSS7.2AI score0.00838EPSS
SaveExploits0References3
Prion
Prion
added 2019/12/11 3:15 p.m.28 views

Design/Logic Flaw

A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point, or an adjacent user, to determine if a connected user is using a VPN, make positive inferences about the websites they are visiting, and determine the correct sequence and...

4.9CVSS7.7AI score0.00838EPSS
SaveExploits0References15Affected Software5
Hacker One
Hacker One
added 2019/12/11 3:14 p.m.34 views

Nord Security: Potential leak of server side software at repogohi.nordvpn.com

Summary: I found a public Git Repository at https://repogohi.nordvpn.com/. It looks like the software components in this repository are part of the VPN Servers. So I'm afraid there's a certain risk. The following packages are among others publicly available: openvpn-xor2.4.5-stretch1nordamd64.deb...

6.9AI score
SaveExploits0
Cvelist
Cvelist
added 2019/12/11 2:45 p.m.29 views

CVE-2019-14899

A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point, or an adjacent user, to determine if a connected user is using a VPN, make positive inferences about the websites they are visiting, and determine the correct sequence and...

7.4CVSS8.1AI score0.00838EPSS
SaveExploits0References15
CVE
CVE
added 2019/12/11 2:45 p.m.237 views

CVE-2019-14899

CVE-2019-14899 is a routing-path/kernel issue affecting macOS (and cited across Linux, FreeBSD, OpenBSD, iOS, Android). The root cause is a VPN-tunnel routing problem that allows a local/adjacent attacker to inject into active VPN connections, enabling data injection and potential VPN hijacking. ...

7.4CVSS7.3AI score0.00838EPSS
SaveExploits0References15Affected Software3
CheckPoint Security
CheckPoint Security
added 2019/12/11 5:00 a.m.30 views

Check Point Response to CVE-2019-14899 (Inferring and hijacking VPN-tunneled TCP connections)

...

4.9CVSS0.5AI score0.00838EPSS
SaveExploits0Affected Software6
RedhatCVE
RedhatCVE
added 2019/12/10 9:57 p.m.77 views

CVE-2019-14899

A flaw was found in openvpn. A malicous access point or adjacent user can determine if a connected user is using a VPN by making positive inferences about the websites they are visiting, and determining the correct sequence and acknowledgement numbers in use, which allows the attacker to inject...

7.4CVSS3AI score0.00838EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2019/12/10 12:00 a.m.43 views

EulerOS 2.0 SP2 : NetworkManager (EulerOS-SA-2019-2371)

According to the version of the NetworkManager packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure CWE-200 vulnerability in DNS resolver that can result in...

7.5CVSS6.5AI score0.01782EPSS
SaveExploits0References2
HackRead
HackRead
added 2019/12/09 3:54 p.m.39 views

Fake VPN website delivering password-stealing malware

By Waqas A VPN virtual private network is a sensible option if you want to use the Internet discreetly without giving away your IP address. This is a post from HackRead.com Read the original post: Fake VPN website delivering password-stealing malware...

1.8AI score
SaveExploits0
GithubExploit
GithubExploit
added 2019/12/07 5:09 p.m.146 views

Exploit for Path Traversal in Ivanti Connect_Secure

pulsexploit Automated script for Pulse Secure SSL VPN exploit...

10CVSS9.4AI score0.99999EPSS
SaveExploits22
Wired Threat Level
Wired Threat Level
added 2019/12/07 2:00 p.m.88 views

Why the iPhone 11 Tracks Your Location Even When You Tell It Not To

Russian disinformation, a VC hack, vulnerable VPNs, and more are in the week’s top security news...

1.3AI score
SaveExploits0
Rows per page
Query Builder