A10 Networks AX Loadbalancer Directory Traversal

This module exploits a directory traversal flaw found in A10 Networks Soft AX Loadbalancer version 2.6.1-GR1-P5/2.7.0 or less. When handling a file download request, the xml/downloads class fails to properly check the 'filename' parameter, which can be abused to read any file outside the virtual...

A10 Networks Loadbalancer Directory Traversal

----------- Author: ----------- xistence ------------------------- Affected products: ------------------------- A10 Networks Loadbalancer SoftAX /xml/downloads/?filename=/a10data/tmp/. By sending a GET request to "https:///xml/downloads/?filename=/a10data/tmp/../.." and thus keeping /a10data/tmp,...

microsoft disrupts zeroaccess botnet

Microsoft’s crusade against botnets raged on yesterday as the Redmond, Wash., computer giant and a coalition of law enforcement agencies and Internet security companies disrupted the notorious ZeroAccess botnet. ZeroAccess, or Sirefef as Microsoft likes to call it, is a malware platform that...