898 matches found
CVE-2016-10523
MQTT before 3.4.6 and 4.0.x before 4.0.5 allows specifically crafted MQTT packets to crash the application, making a DoS attack feasible with very little bandwidth...
Get Free VPN Service With New PornHub App
Pornhub wants you to keep your porn viewing activities private, and it is ready to help you out with its all-new safety and privacy free VPN service. Yes, you heard that right. Adult entertainment giant Pornhub that allows porn videos download has launched its very own free VPN service today with...
Navarino Infinity Security Bypass Vulnerability
Navarino Infinity is a maritime bandwidth management and optimization solution from Navarino Greece. The solution can be used to equip many types of vessels. A security vulnerability exists in Navarino Infinity version 2.1.7. A remote attacker could exploit the vulnerability to bypass the...
NetScaler SD-WAN Best Practices
Purpose and Scope The intention of this article is to provide the best practices when NetScaler SD-WAN solution is designed, planned, and executed in the your network. Network Infrastructure Design and Configuration Verifying ISP Link Health For new deployments, prior to SD-WAN deployment and/or...
[SECURITY] Fedora 26 Update: x2goserver-4.0.1.22-2.fc26
X2Go is a server based computing environment with - session resuming - low bandwidth support - session brokerage support - client side mass storage mounting support - audio support - authentication by smartcard and USB stick This package contains the main daemon and tools for X2Go server-side...
[SECURITY] Fedora 27 Update: x2goserver-4.0.1.22-2.fc27
X2Go is a server based computing environment with - session resuming - low bandwidth support - session brokerage support - client side mass storage mounting support - audio support - authentication by smartcard and USB stick This package contains the main daemon and tools for X2Go server-side...
New Lossless Compression Codec (MDRLE) Added to HDX Thinwire Graphics
There are 3 Thinwire bitmap encoding modes used in current XenApp and XenDesktop Server OS and Desktop OS VDA graphics remoting: Full screen H.264 Thinwire Plus Thinwire Plus with selective H.264 Legacy GDI remoting uses the XPDM Remoting driver and so does not use a Thinwire bitmap encoder Curre...
Cross site scripting
Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page...
CVE-2018-5967
Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page...
CVE-2018-5967
Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page...
CVE-2018-5967
CVE-2018-5967 affects Netis WF2419 devices (v2.2.36123) where the Description field on the Bandwidth Control Rule Settings page is vulnerable to XSS. The root cause is inadequate filtering of user-supplied data in that Description parameter, allowing a remote attacker to inject script/HTML into t...
CVE-2018-5967
Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page...
Netis WF2419 Cross-Site Scripting Vulnerability
Netis WF2419 is a wireless router product from China Tandan Network NETIS. A cross-site scripting vulnerability exists in the Netis WF2419 version 2.2.36123, which is caused by the program failing to adequately filter user-submitted data. The vulnerability can be exploited by a remote attacker to...
Securing the Three Families of IoT
Securing the Internet of Things is difficult. One reason is the Internet of things consists of three different groups of technology. Each group has radically different architectural constraints. Securing each group requires a distinct approach. IoT 0.9 The primitive group contains all legacy...
Netis-WF2419 HTML Injection
Exploit Title: Netis-WF2419 HTML Injection Date: 20/12/2017 Exploit Author: Sajibe Kanti Vendor Homepage: http://www.netis-systems.com/ Version: Netis-WF2419 , V2.2.36123 Tested on: Windows 8.1 HTML Injection in Netis-WF2419 Netis-WF2419 is prone to an HTML-injection vulnerability because it fail...
Joyent Node.js and URONode Denial of Service Vulnerability
Joyent Node.js is a set of Joyent's web application platform built on top of Google V8 JavaScript engine. URONode is a wireless node for Linux systems. A denial of service vulnerability exists in Joyent Node.js version 0.3.2 and URONode versions prior to 1.0.5r3. A remote attacker could exploit...
[SECURITY] Fedora 27 Update: pure-ftpd-1.0.46-2.fc27
Pure-FTPd is a fast, production-quality, standard-comformant FTP server, based upon Troll-FTPd. Unlike other popular FTP servers, it has no known security flaw, it is really trivial to set up and it is especially designed for modern Linux and FreeBSD kernels setfsuid, sendfile, capabilities...
[SECURITY] Fedora 26 Update: pure-ftpd-1.0.46-2.fc26
Pure-FTPd is a fast, production-quality, standard-comformant FTP server, based upon Troll-FTPd. Unlike other popular FTP servers, it has no known security flaw, it is really trivial to set up and it is especially designed for modern Linux and FreeBSD kernels setfsuid, sendfile, capabilities...