Race condition

A vulnerability in the Border Gateway Protocol BGP processing functionality of the Cisco StarOS operating system for Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core VPC Software could allow an unauthenticated, remote attacker to cause the BGP process on an affected system to reloa...

Cisco ASR 5500 Series Routers Denial of Service Vulnerability

The Cisco ASR 5000 Series is a carrier-class platform for deploying high-demand 3G networks and migrating to Long Term Evolution LTE. A security vulnerability exists in the Cisco ASR 5000 series routers. A remote attacker can cause a denial of service by sending specific TCP packets to the StarOS...

The vulnerability of the RPD module in the Junos operating system allows a attacker to cause an emergency shutdown or restart of the application, thereby causing a service failure.

The vulnerability of the RPD module in the Junos operating system is related to incorrect data processing. Exploiting this vulnerability can allow a malicious actor to cause an unexpected shutdown or restart of an application, as well as trigger service failures through the active route addition...

Passwords at the Border

The password-manager 1Password has just implemented a travel mode that tries to protect users while crossing borders. It doesn't make much sense. To enable it, you have to create a list of passwords you feel safe traveling with, and then you can turn on the mode that only gives you access to thos...

Google Android Over-the-Border Read Denial of Service Vulnerability

Google Android is a smartphone from Google, Inc.Qualcomm is a Qualcomm component used in one of Qualcomm's devices. Google Android suffers from a denial of service vulnerability. An attacker could exploit this vulnerability to cause a denial of service...

Microsoft Windows Server 2008 R2 (x64) - SrvOs2FeaToNt SMB Remote Code Execution (MS17-010)

Microsoft Windows Server 2008 R2 x64 - SrvOs2FeaToNt SMB Remote Code Execution MS17-010 Exploit Author: Juan Sacco at KPN Red Team - http://www.kpn.com Date and time of release: May, 9 2017 - 13:00PM Found this and more exploits on my open source security project: http://www.exploitpack.com...

CVE-2017-2313

Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd routing process daemon crash and restart. Repeated crashes of the rpd daemon can result in an extended denial of service condition. The affected Junos OS...

Google Pleads for Better Cross-Border Exchange of Digital Evidence

Google said it is receiving a growing number of cross-border requests for user data to be used as evidence in criminal prosecutions. The volume of requests is also exposing weaknesses in the existing process for exchanging data between countries called the Mutual Legal Assistance Treaties MLAT,...

NSA Eternalblue SMB vulnerability analysis-vulnerability warning-the black bar safety net

Environment TROJAN: Eternalblue-2.2.0.exe TARGET: win7 sp1 32bits srv.sys 6.1.7601.17514 srvnet.sys 6.1.7601.17514 PATCH: MS17-010 The vulnerability principle srv. sys in the processing SrvOs2FeaListSizeToNt when logic is incorrect resulting in cross-border copy. We first look at the vulnerabilit...

DEBIAN-CVE-2017-7701

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-bgp.c by using a different integer data type...

quagga: VPNv4 NLRI parser memcpys to stack on unchecked length

A stack-based buffer overflow flaw was found in the way the Quagga BGP routing daemon bgpd handled Labeled-VPN SAFI routes data. A remote attacker could use this flaw to crash the bgpd daemon resulting in denial of service...

quagga: denial of service vulnerability in BGP routing daemon

A denial of service flaw was found in the Quagga BGP routing daemon bgpd. Under certain circumstances, a remote attacker could send a crafted packet to crash the bgpd daemon resulting in denial of service...

CVE-2017-3867

A vulnerability in the Border Gateway Protocol BGP Bidirectional Forwarding Detection BFD implementation of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to bypass the access control list ACL for specific TCP and UDP traffic. More Information:...

PT-2017-1543 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance versions 9.62 through 9.62.7 Cisco Adaptive Security Appliance versions prior to 9.71.1 Cisco Adaptive Security Appliance versions prior to 96.20.109 Cisco Adaptive Security Appliance versions prior to...

Eurohoo Government System set_border_color.php File Remote Command Execution Vulnerability

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. A remote code execution vulnerability exists in the setbordercolor.php file of the Ohuhu Government System due to improper filtering. An attacker can exploit this vulnerability to execute arbitrary ph...

DEBIAN-CVE-2016-9933

Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library aka libgd before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service segmentation violation via a crafted imagefilltoborder call that...

Cross-site scripting vulnerability in Wordpress plugin border-loading-bar

WordPress is a blogging platform developed using the PHP language that allows users to set up their own websites on servers that support PHP and MySQL databases. WordPress can also be used as a content management system CMS. Wordpress plugin border-loading-bar has an xss vulnerability due to...

CVE-2016-1454

Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service device reload by leveraging a peer relationship to send a crafted BGP UPDATE message, aka Bug IDs CSCuq77105 and...

WordPress plugin Border Loading Bar cross-site scripting vulnerability (CNVD-2016-07114)

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability in the WordPress plugin Border Loading Bar allows attackers to exploit t...

WordPress plugin Border Loading Bar cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability in the WordPress plugin Border Loading Bar allows attackers to exploit t...