ICS-CERT Alert on Easily Hackable Road Signs

A new, remotely exploitable vulnerability in Daktronics’ Vanguard software could make it even easier for attackers to hack electronic road signs, a task that was reportedly never very difficult to begin with. Daktronics’ Vanguard dynamic highway message sign configuration software was initially...

OpenSSL and then blast a serious security vulnerability -- CCS injection-vulnerability warning-the black bar safety net

OpenSSL's ChangeCipherSpec processing and then reported a serious security vulnerability that an attacker can intercept the malicious intermediate node to encrypt and decrypt data,while forcing the use of weak key for SSL client exposed to the malicious nodes. When the software uses the OpenSSL...

SOL15325 - OpenSSL vulnerability CVE-2014-0224

Client-side componentsProduct| Versions known to be vulnerable| Versions known to be not vulnerable| Vulnerable component or feature ---|---|---|--- BIG-IP LTM| 11.0.0 - 11.5.1 10.0.0 - 10.2.4| 12.0.0 11.6.0 11.5.1 HF3 11.5.0 HF4 11.2.1 HF15| Host-initiated SSL connections COMPAT SSL ciphers BIG-...

Fedora 20 : openstack-neutron-2013.2.3-7.fc20 (2014-6520)

Fixed CVE-2014-0187 'openstack-neutron: security groups bypass through invalid CIDR' Fixed CVE-2014-0187: 'openstack-neutron: security groups bypass through invalid CIDR', bz1090136 Make neutron-vpn-agent read fwaasdriver.ini Note that Tenable Network Security has extracted the preceding...

http-vuln-cve2014-2128 NSE Script

Detects whether the Cisco ASA appliance is vulnerable to the Cisco ASA SSL VPN Authentication Bypass Vulnerability CVE-2014-2128. See also: http-vuln-cve2014-2126.nse http-vuln-cve2014-2127.nse http-vuln-cve2014-2129.nse Script Arguments tls.servername See the documentation for the tls library...

http-vuln-cve2014-2127 NSE Script

Detects whether the Cisco ASA appliance is vulnerable to the Cisco ASA SSL VPN Privilege Escalation Vulnerability CVE-2014-2127. See also: http-vuln-cve2014-2126.nse http-vuln-cve2014-2128.nse http-vuln-cve2014-2129.nse Script Arguments tls.servername See the documentation for the tls library...

http-cisco-anyconnect NSE Script

Connect as Cisco AnyConnect client to a Cisco SSL VPN and retrieves version and tunnel information. Script Arguments slaxml.debug See the documentation for the slaxml library. smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername See the documentation for the smbauth library...

Cisco Adaptive Security Appliance (ASA) SSL VPN Portal Detection (HTTP)

HTTP based detection of the SSL VPN Portal running on a Cisco Adaptive Security Appliance ASA. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

OpenConnect: User-assisted execution of arbitrary code

Background OpenConnect is a free client for Cisco AnyConnect SSL VPN software. Description A stack-based buffer overflow error has been discovered in OpenConnect. Impact A remote attacker could entice a user to connect to a malicious VPN server, possibly resulting in execution of arbitrary code...

Debian Security Advisory DSA 2922-1 (strongswan - security update)

A vulnerability has been found in the ASN.1 parser of strongSwan, an IKE/IPsec suite used to establish IPsec protected links. By sending a crafted IDDERASN1DN ID payload to a vulnerable pluto or charon daemon, a malicious remote user can provoke a null pointer dereference in the daemon parsing th...

Juniper Networks Junos OS DoS Vulnerability (JSA10620)

Juniper Networks Junos OS is prone to a denial of service DoS vulnerability for new dynamic VPN connections. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2012-5017

Cisco IOS before 15.11SY1 allows remote authenticated users to cause a denial of service device reload by establishing a VPN session and then sending malformed IKEv2 packets, aka Bug ID CSCub39268...

CVE-2012-5032

The Flex-VPN load-balancing feature in the ipsec-ikev2 implementation in Cisco IOS before 15.11SY3 does not require authentication, which allows remote attackers to trigger the forwarding of VPN traffic to an attacker-controlled destination, or the discarding of this traffic, by arranging for an...

Authentication flaw

The Flex-VPN load-balancing feature in the ipsec-ikev2 implementation in Cisco IOS before 15.11SY3 does not require authentication, which allows remote attackers to trigger the forwarding of VPN traffic to an attacker-controlled destination, or the discarding of this traffic, by arranging for an...

Design/Logic Flaw

Cisco IOS before 15.11SY1 allows remote authenticated users to cause a denial of service device reload by establishing a VPN session and then sending malformed IKEv2 packets, aka Bug ID CSCub39268...

CVE-2012-5017

Cisco IOS before 15.11SY1 allows remote authenticated users to cause a denial of service device reload by establishing a VPN session and then sending malformed IKEv2 packets, aka Bug ID CSCub39268...

CVE-2012-5032

The CVE-2012-5032 issue affects Cisco IOS with the Flex-VPN load-balancing feature in the ipsec-ikev2 implementation prior to 15.1(1)SY3. The root cause is that this feature does not require authentication, enabling an attacker to cause VPN traffic to be forwarded to an attacker-controlled destin...

CVE-2012-5032

The Flex-VPN load-balancing feature in the ipsec-ikev2 implementation in Cisco IOS before 15.11SY3 does not require authentication, which allows remote attackers to trigger the forwarding of VPN traffic to an attacker-controlled destination, or the discarding of this traffic, by arranging for an...

CVE-2012-5017

CVE-2012-5017 affects Cisco IOS before 15.1(1)SY1. The issue arises in the VPN/IKEv2 processing where remote authenticated users can trigger a denial of service (device reload) by establishing a VPN session and sending malformed IKEv2 packets. Connected documents confirm the vulnerable condition,...

Comtrend CT 5361T Cross Site Request Forgery / Cross Site Scripting

Author: TUNISIAN CYBER + Exploit Title: Comtrend CT 5361T Multiple Vulnerabilities + Date: 21-04-2014 + Category: WebApp + CVE:CVE-2014-2923 CVE-2014-2924 + Tested on: Windows 7 Pro + Vendor: http://www.comtrend.com/ + Product:...