EUVD-2001-1410

Malware in sbrugna...

EUVD-2001-0758

Malware in sbrugna...

EUVD-2000-0416

Malware in sbrugna...

EUVD-2000-0417

Malware in sbrugna...

SonicWall SSL-VPN 8.0.0.0 - 'visualdoor' Remote Code Execution (Unauthenticated)

Exploit Title: SonicWall SSL-VPN 8.0.0.0 - 'shellshock/visualdoor' Remote Code Execution Unauthenticated Exploit Author: Darren Martyn Vendor Homepage: https://www.home-assistant.io/ Version: SMA 8.0.0.4 Blog post: https://darrenmartyn.ie/2021/01/24/visualdoor-sonicwall-ssl-vpn-exploit/...

A week in security (November 18 – 24)

Last week on Malwarebytes Labs, we looked at stalkerware’s legal enforcement problem, announced our cooperation with other security vendors and advocacy groups to launch Coalition Against Stalkerware, published our fall 2019 review of exploit kits, looked at how Deepfake on LinkedIn makes for...

Hacker Releases 2TB of Data from Cayman National Bank

By Waqas The hacker published over 2TB of data belonging to the bank’s 1400 customers including roughly 640,000 emails. This is a post from HackRead.com Read the original post: Hacker Releases 2TB of Data from Cayman National Bank...

jackiecooperporsche.com XSS vulnerability

Open Bug Bounty ID: OBB-436231 Description| Value ---|--- Affected Website:| jackiecooperporsche.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

caymangoodtaste.com XSS vulnerability

Open Bug Bounty ID: OBB-257317 Description| Value ---|--- Affected Website:| caymangoodtaste.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

caymangoodtaste.com XSS vulnerability

Open Bug Bounty ID: OBB-255483 Description| Value ---|--- Affected Website:| caymangoodtaste.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cayman 3220-H DSL Router 1.0/GatorSurf 5.3 DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1219/info Large usernames or passwords sent to the router's HTTP interface restart the router. Router log will show restart not in response to admin command Open the router interface with your browser. Username:...

CVE-2001-1430

CVE-2001-1430 concerns the Cayman 3220-H DSL Router (1.0) shipped with no password, enabling remote attackers to gain unauthorized access. The vulnerability stems from the device shipping without credentials, leading to potential compromise of confidentiality, integrity, and availability as indic...

CVE-2001-1430

Cayman 3220-H DSL Router 1.0 ship without a password set, which allows remote attackers to gain unauthorized access...

CVE-2001-0773

Cayman 3220-H DSL Router 1.0 allows remote attacker to cause a denial of service crash via a series of SYN or TCP connect requests...

CVE-2001-0773

CVE-2001-0773 affects Cayman 3220-H DSL Router 1.0. A vulnerability allows remote DoS via a sequence of TCP connect() requests or SYN packets, potentially exploited from LAN or WAN in conjunction with a bouncing vulnerability, causing the gateway to crash. Root cause relates to how the device han...

CVE-2001-0773

Cayman 3220-H DSL Router 1.0 allows remote attacker to cause a denial of service crash via a series of SYN or TCP connect requests...

Cayman gateways ship with null administrative and user level passwords

Overview Cayman gateways ship without a default password on the admin and user accounts. As long as the gateway is not addressable via the WAN, this can only be accessed and set by anyone on the LAN side. With admin access, the gateway settings can be configured by an intruder. Description Cayman...

Cayman gateways are vulnerable to a denial of service via a portscan

Overview Cayman gateways are vulnerable to a denial of service. An attacker can send a number of TCP connect requests or SYN packets, in conjunction with a "Bouncing" vulnerability, and can cause a denial of service to the gateway. Description The gateway will crash after receiving a number of TC...

Cayman gateways are vulnerable to a denial of sevices via a long username or password

Overview Cayman gateways are vulnerable to a denial of service via the entry of a long username or password sent to the HTTP interface. Description Cayman gateways automatically restart upon the entry of a large79+ chars username or password to the HTTP interface. The log will show "restart not i...

Cayman gateways vulnerable to a denial of service via oversized ICMP echo (ping) requests.

Overview Cayman gateways vulnerable to a denial of service via oversized ICMP echo ping requests. Installing the newest version of the vendor software will resolve this vulnerability. Description Cayman gateways running versions 5.5 Build R0, 5.3 Build R2, 5.3 Build R1 are vulnerable to an...