937 matches found
Juniper Networks Releases Critical Security Update for Routers
Juniper Networks has released out-of-band security updates to address a critical security flaw that could lead to an authentication bypass in some of its routers. The vulnerability, tracked as CVE-2024-2973, carries a CVSS score of 10.0, indicating maximum severity. "An Authentication Bypass Usin...
Exploit for PHP External Variable Modification in Juniper Junos
PoC exploit for CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847. This exploit targets Juniper JunOS within SRX and EX Series products, achieving Remote Code Execution RCE by chaining four vulnerabilities. The exploit involves uploading an arbitrary PHP file to a restricted director...
CVE-2024-3873
A vulnerability was found in SMI SMI-EX-5414W up to 1.0.03. It has been classified as problematic. This affects an unknown part of the component Web Interface. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to t...
CVE-2024-3873
The CVE-2024-3873 entry describes a CSRF vulnerability in the Web Interface of SMI SMI-EX-5414W (versions up to 1.0.03). The issue arises from the Web Interface component, can be exploited remotely, and the exploit has been disclosed publicly. Affected product is SMI-EX-5414W; root cause is a mis...
CVE-2024-3873 SMI SMI-EX-5414W Web Interface cross-site request forgery
A vulnerability was found in SMI SMI-EX-5414W up to 1.0.03. It has been classified as problematic. This affects an unknown part of the component Web Interface. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to t...
PT-2024-28175 · Smi · Smi-Ex-5414W
Name of the Vulnerable Software and Affected Versions: SMI SMI-EX-5414W versions up to 1.0.03 Description: A vulnerability was found in the Web Interface component of the affected software, leading to cross-site request forgery. The manipulation can be initiated remotely. Recommendations: For SMI...
SMI SMI-EX-5414W 跨站请求伪造漏洞
The SMI SMI-EX-5414W is a router from SMI. A cross-site request forgery vulnerability exists in SMI SMI-EX-5414W 1.0.03 and earlier versions, which stems from a problem with the Web Interface component that allows an attacker to remotely launch an attack...
CVE-2024-30388
An Improper Isolation or Compartmentalization vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS on QFX5000 Series and EX Series allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. If a specific malformed LACP packet is received by a QFX5000...
CVE-2024-30388
An Improper Isolation or Compartmentalization vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS on QFX5000 Series and EX Series allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. If a specific malformed LACP packet is received by a QFX5000...
CVE-2024-30388 Junos OS: QFX5000 Series and EX Series: Specific malformed LACP packets will cause flaps
An Improper Isolation or Compartmentalization vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS on QFX5000 Series and EX Series allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. If a specific malformed LACP packet is received by a QFX5000...
CVE-2024-30388 Junos OS: QFX5000 Series and EX Series: Specific malformed LACP packets will cause flaps
An Improper Isolation or Compartmentalization vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS on QFX5000 Series and EX Series allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. If a specific malformed LACP packet is received by a QFX5000...
CVE-2024-30388
CVE-2024-30388 (Junos OS, PFE) : An improper isolation vulnerability in the Packet Forwarding Engine on QFX5000 Series and EX Series allows an unauthenticated adjacent attacker to trigger an LACP flap by receiving a specific malformed LACP packet, causing traffic loss (DoS). Affected: Junos OS on...
PT-2024-5061
Name of the Vulnerable Software and Affected Versions: Junos OS versions 20.4R3-S4 through 20.4R3-S8 Junos OS versions 21.2R3-S2 through 21.2R3-S6 Junos OS versions 21.4R2 through 21.4R3-S4 Junos OS versions 22.1R2 through 22.1R3-S3 Junos OS versions prior to 22.2R3-S1 Junos OS versions prior to...
SUSE CVE-2024-26706
In the Linux kernel, the following vulnerability has been resolved: parisc: Fix random data corruption from exception handler The current exception handler implementation, which assists when accessing user space memory, may exhibit random data corruption if the compiler decides to use a different...
DEBIAN-CVE-2024-26706
In the Linux kernel, the following vulnerability has been resolved: parisc: Fix random data corruption from exception handler The current exception handler implementation, which assists when accessing user space memory, may exhibit random data corruption if the compiler decides to use a different...
Russian Hackers Stole Microsoft Source Code—and the Attack Isn’t Over
Plus: An ex-Google engineer gets arrested for allegedly stealing trade secrets, hackers breach the top US cybersecurity agency, and X’s new feature exposes sensitive user data...
[SECURITY] Fedora 40 Update: jaxb-stax-ex-2.1.0-8.fc40
This project contains a few extensions to complement JSR-173 StAX API in the following areas: - Enable parser instance reuse which is important in the high-performance environment like Eclipse Implementation of JAXB and Eclipse Metro - Improve the support for reading from non-text XML infoset, su...
Exploit for PHP External Variable Modification in Juniper Junos
CVE-2023-36845 A PHP External Variable Modification vulnerab...
Juniper SRX Firewalls&EX switches - PreAuth Remote Code Execution Exploit
Exploit Title: juniper-SRX-Firewalls&EX-switches PreAuth-RCE PoC Description: This code serves as both a vulnerability detector and a proof of concept for CVE-2023-36845. It executes the phpinfo function on the login page of the target device, allowing to inspect the PHP configuration. also this...