8514 matches found
New Linux vulnerability puts VPN connections at risk of hijacking
By Waqas Researchers believe that vulnerability can specifically affect VPN users by hijacking encrypted traffic. Here's how it happens... This is a post from HackRead.com Read the original post: New Linux vulnerability puts VPN connections at risk of hijacking...
Linux Bug Opens Most VPNs to Hijacking
A vulnerability in most Linux distros has been uncovered that allows a network-adjacent attacker to hijack VPN connections and inject rogue data into the secure tunnels that victims are using to communicate with remote servers. According to researchers at University of New Mexico and Breakpointin...
New Linux Bug Lets Attackers Hijack Encrypted VPN Connections
A team of cybersecurity researchers has disclosed a new severe vulnerability affecting most Linux and Unix-like operating systems, including FreeBSD, OpenBSD, macOS, iOS, and Android, that could allow remote 'network adjacent attackers' to spy on and tamper with encrypted VPN connections. The...
CVE-2019-14899
creationtimestamp| type| source ---|---|--- 2019-12-05 21:38:24+00:00| seen| https://t.me/ctinow/18348 2019-12-06 12:07:14+00:00| seen| https://t.me/ctinow/18363 2019-12-09 08:19:50+00:00| seen| https://t.me/thehackernews/553 2019-12-16 13:54:00+00:00| seen|...
Israeli firm buys Private Internet Access (PIA) VPN raising privacy concerns
By Sudais Private Internet Access VPN users don't look happy with the development... This is a post from HackRead.com Read the original post: Israeli firm buys Private Internet Access PIA VPN raising privacy concerns...
CVE-2019-17387
An authentication flaw in the AVPNCRP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated privileges through arbitrary code execution on Windows, Linux, and macOS...
CVE-2019-17388
Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker to execute arbitrary code by gaining elevated privileges through file modifications...
CVE-2019-17387
An authentication flaw in the AVPNCRP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated privileges through arbitrary code execution on Windows, Linux, and macOS...
Design/Logic Flaw
Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker to execute arbitrary code by gaining elevated privileges through file modifications...
CVE-2019-17388
Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker to execute arbitrary code by gaining elevated privileges through file modifications...
CVE-2019-17388
CVE-2019-17388 applies to the Aviatrix VPN Client (up to version 2.2.10) and is caused by weak file permissions in the installation directory on Windows and Linux. This project-level issue allows a local attacker to modify files to gain elevated privileges and execute arbitrary code. Public docum...
CVE-2019-17387
An authentication flaw in the AVPNCRP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated privileges through arbitrary code execution on Windows, Linux, and macOS...
CVE-2019-17387
Aviatrix VPN Client AVPNC_RP service (versions up to 2.2.10) contains an authentication flaw that allows local attackers to execute arbitrary code and escalate privileges on Windows, Linux, and macOS. The vulnerability is described as a local privilege escalation via an authentication weakness, w...
CVE-2019-17387
An authentication flaw in the AVPNCRP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated privileges through arbitrary code execution on Windows, Linux, and macOS. Recent assessments: kevthehermit at March 05, 2020 9:39am UTC reported: VPN clients are commonly found ...
remote.walink.org Improper Access Control vulnerability
Open Bug Bounty ID: OBB-1030029 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
remotelink.nortonhealthcare.org Improper Access Control vulnerability
Open Bug Bounty ID: OBB-1030028 Security Researcher 0xSkywalker Helped patch 3 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting remotelink.nortonhealthcare.org website and its users. Following coordinated and responsible vulnerability disclosure...
The snooping girl on a train, again. How to compromise a business
So, I’m on a train, again, sat at a four-seat table, next to two men facing each other. From their conversation and interactions I’ve concluded that they are colleagues. The chap to my left is clearly working on implementation plans for a building management system, for a company I know yeah, I g...
480.1 million mobile VPN downloaded worldwide in 12 months
By Sudais More and more people are using VPN now. This report reveals shocking stats on how these VPNs have become essential for our online life. This is a post from HackRead.com Read the original post: 480.1 million mobile VPN downloaded worldwide in 12 months...
CVE-2019-15705
An Improper Input Validation vulnerability in the SSL VPN portal of FortiOS versions 6.2.1 and below, and 6.0.6 and below may allow an unauthenticated remote attacker to crash the SSL VPN service by sending a crafted POST request...
CVE-2019-15705
An Improper Input Validation vulnerability in the SSL VPN portal of FortiOS versions 6.2.1 and below, and 6.0.6 and below may allow an unauthenticated remote attacker to crash the SSL VPN service by sending a crafted POST request...