Cisco NX-OS on Nexus-OS Buffer Overflow Vulnerability

Cisco NX-OS is a data center-class operating system from Cisco that embodies modular design, perpetuity, and maintainability. Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.37.1 A buffer overflow vulnerability in MDS SAN-OS 7.1 allows remote attackers to cause a denial of service via a...

CVE-2015-4323

Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.30ZN0.9; Nexus 3000 devices 6.02U51.41, 7.03I20.373, and 7.30ZN0.83; Nexus 4000 devices 4.12E11b; Nexus 7000 devices 6.214S1; Nexus 9000 devices 7.30ZN0.9; and MDS 9000 devices 6.2 13 and 7.10ZN91.99 and MDS SAN-OS...

Buffer overflow

Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.30ZN0.9; Nexus 3000 devices 6.02U51.41, 7.03I20.373, and 7.30ZN0.83; Nexus 4000 devices 4.12E11b; Nexus 7000 devices 6.214S1; Nexus 9000 devices 7.30ZN0.9; and MDS 9000 devices 6.2 13 and 7.10ZN91.99 and MDS SAN-OS...

CVE-2015-4323

Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.30ZN0.9; Nexus 3000 devices 6.02U51.41, 7.03I20.373, and 7.30ZN0.83; Nexus 4000 devices 4.12E11b; Nexus 7000 devices 6.214S1; Nexus 9000 devices 7.30ZN0.9; and MDS 9000 devices 6.2 13 and 7.10ZN91.99 and MDS SAN-OS...

CVE-2015-4323

Cisco NX-OS ARP DoS (CVE-2015-4323): Buffer overflow in ARP input handling caused by incorrect MTU validation on Nexus/NX-OS platforms (Nexus 1000V, Nexus 3000/4000, 7000/9000, MDS SAN-OS). An unauthenticated, adjacent attacker can send a crafted ARP packet to trigger a denial of service (device ...

Scientific Linux Security Update : net-snmp on SL6.x i386/x86_64 (20150722)

A denial of service flaw was found in the way snmptrapd handled certain SNMP traps when started with the '-OQ' option. If an attacker sent an SNMP trap containing a variable with a NULL type where an integer variable type was expected, it would cause snmptrapd to crash. CVE-2014-3565 This update...

ShopEx服务器配置不当（可shell可泄漏内外信息）

简要描述： 第一次来玩这个站。。。 详细说明： fastcgi的9000端口问题，是shopex的爬虫服务器 然后确定ip地址 看看arp信息 虽然域名是sarShopEx 漏洞证明： 查看passwd文件。。。 通过hosts文件得知域名是sradar.cn下的二级域名，该域名也是属于shopEx的。。。...

CentOS 6 : net-snmp (CESA-2015:1385)

Updated net-snmp packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

RedHat Update for net-snmp RHSA-2015:1385-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: net-snmp security and bug fix update

Updated net-snmp packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

Unspecified Vulnerability in the 802.11n Wireless Network Standard Frame Aggregation Mechanism

802.11 protocol group is the International Electrotechnical and Electronics Engineering Society IEEE for wireless local area network standard. 802.11n is in 802.11g and 802.11a above the development of a technology, the most important feature is the rate of enhancement, the theoretical rate of up...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix one security issue and three bugs are now available for Red Hat Enterprise Linux 6.4 Advanced Update Support. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

RHEL 6 : kernel (RHSA-2015:1030)

Updated kernel packages that fix one security issue and three bugs are now available for Red Hat Enterprise Linux 6.4 Advanced Update Support. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

Researchers Exploit Windows Group Policy Bug Patched in February

Researchers from Core Security were able to exploit a security vulnerability in Windows Group Policy — MS15-011 — that was patched in February by Microsoft. Nicolas Economou, a senior exploit writer at Core Security, explained in a blog entry last week that Microsoft had in fact fixed the bug,...

Use sslsplit to sniff tls/ssl connections-vulnerability warning-the black bar safety net

I recently demonstrated how to use mitmproxty perform MiTM attack on HTTPSconnection. When mitmproxy work to support HTTP-based communication, it does not know the other based on the TLS/SSL traffic, such as FTPS, SSL SMTP through SSL IMAP or some other covering TLS/SSL Protocol. SSLsplit is a...

packETH – Ethernet Packet Generator

packETH Ethernet Packet Generator packETH is GUI and CLI packet generator tool for ethernet. It allows you to create and send any possible packet or sequence of packets on the ethernet link. It is very simple to use, powerful and supports many adjustments of parameters while sending sequence of...

CVE-2014-6381

Juniper WLC devices with WLAN Software releases 8.0.x before 8.0.4, 9.0.x before 9.0.2.11, 9.0.3.x before 9.0.3.5, and 9.1.x before 9.1.1, when "Proxy ARP" or "No Broadcast" features are enabled in a clustered setup, allows remote attackers to cause a denial of service device disconnect via...

Design/Logic Flaw

Juniper WLC devices with WLAN Software releases 8.0.x before 8.0.4, 9.0.x before 9.0.2.11, 9.0.3.x before 9.0.3.5, and 9.1.x before 9.1.1, when "Proxy ARP" or "No Broadcast" features are enabled in a clustered setup, allows remote attackers to cause a denial of service device disconnect via...

Isowall - A mini-firewall that completely isolates a target device from the local network

This is a mini-firewall that completely isolates a target device from the local network. This is for allowing infected machines Internet access, but without endangering the local network. Building This project depends upon libpcap, and of course a C compiler. On Debian, the following should work:...

The sword refers to the Android and iOS system DoubleDirect middle attack-vulnerability warning-the black bar safety net

A security researcher found a new man in the middle attack technique, it targets mostly run of the Android system and iOS system of smartphone and tablets. This is called DoubleDirect of art belonging to the middleman（MITM attack. An attacker can use this technique to put the victim to visit...