Cyberoam UTM Command Execution

SECURITY ADVISORY: cyberoam-utm-command-executaion Affected Software: Cyberoam CR50ia 10.01.0 build 678 Vulnerability: OS Command Execution Severity: High Release Date: Unreleased I. Background "Cyberoam Unified Threat Management appliances offer assured security, connectivity and productivity to...

Juniper Junos MGD-CLI Arbitrary Command Execution (PSN-2011-11-418)

According to its self-reported version number, the version of Junos running on the remote device has a command execution vulnerability. A flaw in the logical model governing inter-process communications between the management daemon MGD and the command-line interpreter CLI could result in arbitra...

Open Handset Alliance Android Privilege Escalation Vulnerability

Description Open Handset Alliance Android is prone to a privilege-escalation vulnerability because it fails to properly handle certain socket messages. Successfully exploiting this issue can allow attackers to corrupt memory and execute arbitrary code with superuser privileges, leading to a...

Apple iOS 4.0.2 - Networking Packet Filter Rules Privilege Escalation

Apple iOS 4.0.2 - Networking Packet Filter Rules Privilege Escalation // source: https://www.securityfocus.com/bid/45010/info // // Apple iOS is prone to a local privilege-escalation vulnerability. // // Local attackers running malicious code can exploit this issue to elevate their privileges...

ZYXEL P-330W - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/27024/info ZyXEL P-330W 802.11g Secure Wireless Internet Sharing Router is prone to multiple cross-site scripting vulnerabilities and cross-site request-forgery vulnerabilities because it fails to properly sanitize user-supplied input. These issues affect...

Axis Communications 207W Network Camera - Web Interface axis-cgiadminrestart.cgi Cross-Site Request Forgery

Axis Communications 207W Network Camera - Web Interface axis-cgiadminrestart.cgi Cross-Site Request Forgery source: https://www.securityfocus.com/bid/25678/info Axis Communications 207W Network Camera is prone to multiple vulnerabilities in the web interface. Three issues were reported: a...

Yoggie Pico and Pico Pro Backticks - Remote Code Execution

source: https://www.securityfocus.com/bid/24743/info Yoggie Pico and Pico Pro are prone to a remote code-execution vulnerability because the device fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary code with superuser privileges. A...

Citrix Access Gateway appliances vulnerable to information disclosure

Overview A vulnerability exists in Citrix Access Gateway appliances that may allow an attacker to access data and compromise the system. Description Citrix Access Gateway products are universal SSL VPN appliances providing a secure, always-on, single point-of-access to an organization's...

Thomson SpeedTouch 500 Series - NewUser Function 31 Variable Persistent User Creation

Thomson SpeedTouch 500 Series - NewUser Function 31 Variable Persistent User Creation source: https://www.securityfocus.com/bid/16839/info The SpeedTouch 500 series are prone to a cross-site scripting vulnerability. This issue is due to a failure in the devices to properly sanitize user-supplied...

Cisco IOS System Timers Remote Overflow (CSCei61732)

The remote host is a CISCO router containing a version of IOS that is vulnerable to a heap overflow attack. An attacker may exploit this flaw to crash the remote device or to execute arbitrary code remotely. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid20134;...