CVE-2016-5235

A Cross Site Scripting XSS vulnerability in versions of F5 WebSafe Dashboard 3.9.x and earlier, aka F5 WebSafe Alert Server, allows an unauthenticated user to inject HTML via a crafted alert...

PT-2019-18224 · F5 · F5 Big-Ip +3

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 11.5.2 through 11.6.4 F5 BIG-IP versions 12.1.0 through 12.1.4.2 F5 BIG-IP versions 13.0.0 through 13.1.1.5 F5 BIG-IP versions 14.0.0 through 14.1.0.5 F5 BIG-IP version 15.0.0 F5 BIG-IQ versions 5.1.0 through 5.4.0 F5 BIG-I...

Three Network Security Questions with CEITEC’s CIO

Ireneo Demanarig is the Chief Information Officer at CEITEC S.A. located in Porto Alegre, Rio Grande do Sul, Brazil. CEITEC is a microelectronics manufacturer that specializes in solutions such as automatic identification RFID and smartcards, application-specific integrated circuits ASICs aimed a...

F5 Networks Endpoint Inspector – Browser-to-RCE?

If a bug falls in the forest, and the vendor denies that it’s a bug, is it still a bug? TL;DR? The F5 Endpoint Inspector is an application which can be called from a web browser to scan a client for compliance. We found it can be abused to run arbitrary code, triggered by visiting a malicious...

PoC Released for Outlook Flaw that Microsoft Patched 6 Month After Discovery

As we reported two days ago, Microsoft this week released an updated version of its Outlook app for Android that patches a severe remote code execution vulnerability CVE-2019-1105 that impacted over 100 million users. However, at that time, very few details of the flaw were available in the...

Linux Kernel CVE-2019-11477 Integer Overflow Vulnerability

Description Linux Kernel is prone to a remote integer-overflow vulnerability. An attacker can exploit this issue to cause denial-of-service conditions. Technologies Affected Bluecoat Mail Threat Defense 1.1 Bluecoat Malware Analysis Appliance 4.2 Bluecoat PacketShaper S-Series 11.10 Bluecoat...

Exploit for Integer Overflow or Wraparound in F5 Nginx

CVE-2017-7529-POC Affected Vulnerabilities This vulner...

F5 Networks BIG-IP : GNU C library strxfrm/strcoll overflow vulnerabilities (K16416)

The GNU C glibc strxfrm function is prone to a remote integer-overflow vulnerability that leads to buffer overflow vulnerability. The GNU C glibc strcoll function is prone to a stack-based buffer-overflow vulnerability. Impact A locally authenticated attacker could run code that exposes the...

F5 Networks BIG-IP : jQuery vulnerability (K62532311)

jQuery before 1.9.0 is vulnerable to Cross-site Scripting XSS attacks. The jQuerystrInput function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '' character anywhere in the string, giving...

F5 Networks BIG-IP : Linux kernel vulnerability (K74374841)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.6.5.1 / 12.1.5 / 13.1.3 / 14.0.1.1 / 14.1.2.4 / 15.0.0. It is, therefore, affected by a vulnerability as referenced in the K74374841 advisory. - The Linux kernel, versions 3.9+, is vulnerable to a denial of service atta...

F5 Networks BIG-IP : OpenSSL and Intel processor SMT side-channel vulnerability (PortSmash) (K49711130)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.2.1 / 15.0.0. It is, therefore, affected by a vulnerability as referenced in the K49711130 advisory. - Simultaneous Multi-threading SMT in processors can enable local users to exploit software vulnerable to timing...

F5 Networks BIG-IP : GNU Binutils vulnerability (K13534168)

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in dexpression1 in cp-demangle.c after many recursive calls. CVE-2019-9070 Impact Successful exploitation of this vulnerability may lead to disclosure of sensitive information,...

Rockwell Automation RightSight Transmitted Beam 20m Receiver 42EF-R9LDB-F5 Photoelectric Sensor

Binary data 752430.prm...

Rockwell Automation RightSight Sharp Cutoff Diffused 42EF-S1LDA-F5 Photoelectric Sensor

Binary data 752432.prm...

Rockwell Automation RightSight Glass Fiber Optic 42EF-G1LDA-F5 Photoelectric Sensor

Binary data 752428.prm...

PT-2019-18199 · F5 · F5 Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 11.5.2 through 11.5.8 F5 BIG-IP versions 11.6.1 through 11.6.3.4 F5 BIG-IP versions 12.1.0 through 12.1.4 F5 BIG-IP versions 13.0.0 through 13.1.1.4 F5 BIG-IP versions 14.0.0 through 14.1.0.1 Description: A user with the...

PT-2019-18196 · F5 · F5 Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 12.1.0 through 12.1.4 F5 BIG-IP versions 13.0.0 through 13.1.1.4 F5 BIG-IP versions 14.0.0 through 14.1.0.1 Description: The internal methods used to prevent arbitrary file overwrites in Appliance Mode were not fully...

F5 Networks BIG-IP : NodeJS vulnerability (K37111863)

Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by default: When the debugger is enabled with node --debug or node debug, it listens to port 5858 on all interfaces by default. This may allow remote computers to attach to the debug port and evaluate...

F5 Networks BIG-IP : DNS vulnerability (K24401914)

On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, DNS query TCP connections that are aborted before receiving a response from a DNS cache may cause TMM to restart. CVE-2019-6612 Impact A BIG-IP virtual server associated with a TCP and DNS profile that...

F5 Networks BIG-IP : CGNAT/PPTP vulnerability (K47527163)

When processing certain rare data sequences occurring in PPTP VPN traffic, the BIG-IP system may execute incorrect logic. The TMM may restart and produce a core file as a result of this condition. The BIG-IP system provisioned with the CGNAT module and configured with a virtual server using a PPT...