96 matches found
Maximize security insights by integrating threat intelligence data from Akamai with your SIEM
Since 2005, when Gartner coined the term, SIEM Security Information and Event Management solutions have grown in importance for the security industry. SIEM solutions provide a centralized view to easily access and analyze security information from multiple sources, and then prioritize mitigation...
cef-italy.it XSS vulnerability
Vulnerable URL: http://cef-italy.it/ambitiauto.php?id=%3Csvg/onload=alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:...
cef.es XSS vulnerability
Vulnerable URL: http://www.cef.es/files/200x200.swf?clickTag=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 113455 VIP website status:| No Check cef.e...
ARTLAS - Apache Real Time Logs Analyzer System
Real time Apache log analyzer, based on top 10 OWASP vulnerabilities, identifies attempts of exploration in your web application, and notify you or your incident team on Telegram, Zabbix and Syslog/SIEM. ARTLAS uses the regular expression from the PHP-IDS project, to identify the attempts of...
ArcSight Log Poisoning
Exploit Title: ArcSight Log Poisoning on F5 CEF log Date: Jun 25th 2015 Exploit Author: Andrea Menin linkedin.com/in/andreamenin Video: https://www.youtube.com/watch?v=SgFHt37pLw Description: ------------ Change the attacker address value on ArcSight report by poisoning F5 log. An Attacker can...
CVE-2015-0609: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in the Common Classification Engine CCE in the Measurement, Aggregation, and Correlation Engine MACE implementation in Cisco IOS 15.42T3 and earlier allows remote attackers to cause a denial of service device reload via crafted network traffic that triggers improper handling of the...
Race condition
Race condition in the Measurement, Aggregation, and Correlation Engine MACE implementation in Cisco IOS 15.42T3 and earlier allows remote attackers to cause a denial of service device reload via crafted network traffic that triggers improper handling of the timing of process switching and Cisco...
Race condition
Race condition in the object-group ACL feature in Cisco IOS 15.52T and earlier allows remote attackers to bypass intended access restrictions via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding CEF switching, aka Bug ID...
CVE-2015-0608: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in the Measurement, Aggregation, and Correlation Engine MACE implementation in Cisco IOS 15.42T3 and earlier allows remote attackers to cause a denial of service device reload via crafted network traffic that triggers improper handling of the timing of process switching and Cisco...
CVE-2015-0610: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in the object-group ACL feature in Cisco IOS 15.52T and earlier allows remote attackers to bypass intended access restrictions via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding CEF switching, aka Bug ID...
PT-2015-4754
Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.52T and earlier Description A race condition in the object-group ACL feature allows remote attackers to bypass intended access restrictions via crafted network traffic that triggers improper handling of the timing of...
Cisco IOS CEF Packet Information Disclosure (Bug ID CSCdu20643)
Binary data 2213.prm...
Cisco IOS CEF Packet Information Disclosure (Bug ID CSCdu20643)
Binary data 2215.prm...
CVE-2002-0339
Cisco IOS CVE-2002-0339 affects IOS 11.1CC–12.2 with Cisco Express Forwarding (CEF) enabled. The issue leaks fragments of previously processed packets by padding MAC-level packets to match the IP length, using data from earlier packets. Impact is information disclosure via network access; attacke...
CVE-2002-0339: Undefined Security Weakness
Cisco IOS 11.1CC through 12.2 with Cisco Express Forwarding CEF enabled includes portions of previous packets in the padding of a MAC level packet when the MAC packet's length is less than the IP level packet length...
Cisco IOS discloses fragments of previous packets when Express Forwarding is enabled
Overview A vulnerability exists in multiple versions of Cisco's Internetworking Operating System IOS software that allows an attacker to collect fragments of previously processed packets. Description Many networking devices running Cisco IOS with Cisco Express Forwarding CEF enabled contain a...