CVE-2014-3703

OpenStack PackStack 2012.2.1, when the Open vSwitch OVS monolithic plug-in is not used, does not properly set the libvirtvifdriver configuration option when generating the nova.conf configuration, which causes the firewall to be disabled and allows remote attackers to bypass intended access...

CVE-2014-3703

OpenStack PackStack 2012.2.1 vulnerable when the OVS monolithic plug-in is not used; PackStack-generated nova.conf may fail to set libvirt_vif_driver, which can disable the firewall and allow remote access bypass. Red Hat's RHSA-2014:1691 documents this issue and provides the fix in an updated Pa...

Meterpreter over SSH – MeterSSH

Meterpreter over SSH As penetration testers, it’s crucial to identify what types of attacks are detected and what’s not. After running into a recent penetration test with a next generation firewall, most analysis has shifted away from the endpoints and more towards network analysis. While there...

cPanel 11.18.3 - List Directories and Folders Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28300/info cPanel is prone to an information-disclosure vulnerability. An attacker can exploit this issue to determine programs that are running on the affected server and to view folders on other sites that are protected...

DNS Reverse Download and Exec Shellcode

No description provided by source. Shellcode: download and execute file via reverse DNS channel Features: Windows 7 tested UAC without work svchost.exe makes requests via getaddrinfo Firewall/Router/Nat/Proxy bypass reverse connection like dnscat do, but without sockets and stable! NO SOCKET DNS...

SyGate 5.0 Insecure UDP Source Port Firewall Bypass Weak Default Configuration Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6684/info It has been reported that the Sygate Pro firewall permits traffic originating from UDP source port 137 or 138 by default. This may allow a remote attacker to bypass the firewall. nmap -vv -P0 -sU...

UBUNTU-CVE-2012-2663

extensions/libxttcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to bypass intended firewall restrictions via crafted packets. NOTE: the CVE-2012-6638 fix makes this issue less relevant...

Cross site request forgery (csrf)

The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, which allows remote attackers to bypass intended restrictions via a request...

[iodine] Tunnel application to forward IPv4 traffic through DNS servers (IP over DNS)

iodine lets you tunnel IPv4 data through a DNS server. This can be usable in different situations where internet access is firewalled, but DNS queries are allowed. It runs on Linux, Mac OS X, FreeBSD, NetBSD, OpenBSD and Windows and needs a TUN/TAP device. The bandwidth is asymmetrical with limit...

[Tunna Framework] Tool designed to bypass firewall restrictions on remote webservers

Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments. The web application file must be uploaded on the remote server. It will be used to make a local connection with services running on t...

Oracle Linux 4 : kernel (ELSA-2010-0146)

From Red Hat Security Advisory 2010:0146 : Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System...

Juniper Junos Firewall Bypass DoS (PSN-2013-04-912)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. It is possible to bypass the firewall to create sessions for connections that should not be allowed by policy. A remote, untrusted attacker could exploit this to exhaust session resources...

Linux kernel ipv6分片拒绝服务漏洞(CVE-2012-4444)

CVE ID:CVE-2012-4444 Linux是一款开源的操作系统。 Linux Kernel net/ipv6/reassembly.c中的ip6fragqueue函数处理重叠分片存在安全漏洞，攻击者可利用此漏洞绕过目标防火墙安全限制，访问未授权资源。 0 Linux kernel 2.6.36之前版本 厂商解决方案 用户可参考如下厂商提供的安全公告获得补丁信息： https://github.com/torvalds/linux/commit/70789d7052239992824628db8133de08dc78e593...

USN-1660-1: Linux kernel vulnerability

Zhang Zuotao discovered a bug in the Linux kernel's handling of overlapping fragments in ipv6. A remote attacker could exploit this flaw to bypass firewalls and initial new network connections that should have been blocked by the firewall...

Juniper Junos lo0 Firewall Bypass (PSN-2012-07-651)

According to its self-reported version number, the remote Junos router has a firewall bypass vulnerability. This issue is present when log or syslog actions are used along with discard within a firewall filter term deployed on the lo0 loopback interface. When the receive rate is very high, some...

Oracle JVM gopher protocol - SSRF

Application: Oracle JVM Versions Affected: Oracle JVM Vendor URL: http://www.oracle.com Bugs: Security Bypass, SSRF Exploits: YES Reported: 16.07.2012 Vendor response: 18.07.2012 Date of Public Advisory: 23.10.2012 Reference: Oracle CPU October 2012 Authors: Alexander Polyakov ERPScan Description...

firewall-bypass NSE Script

Detects a vulnerability in netfilter and other firewalls that use helpers to dynamically open ports for protocols such as ftp and sip. The script works by spoofing a packet from the target server asking for opening a related connection to a target port which will be fulfilled by the firewall...

35mm Slide Gallery v6.0 Remote File Upload Vulnerability

Exploit for php platform in category web applications Author : Dr.SiLnT HilL Title : 35mm Slide Gallery v6.0 Remote File Upload Data: 27-5-2012 Download : http://www.andymack.com/freescripts/35mmSlideGallery/35mmslidegallery6.zip Email : email protected Dork : allintext: "powered by 35mm Slide...

CVE-2012-0174

CVE-2012-0174 affects Windows through tcpip.sys where outbound broadcast traffic is not properly filtered by the Windows Firewall, enabling a local attacker to observe broadcast traffic and potentially bypass firewall rules on affected systems (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1). Root ...

Astaro Security Gateway Whitelist Bypass

Advisory Information Title: Astaro Security Gateway - bypass using whitelist domain pattern weakness upSploit Ref: UPS-2011-0041 Advisory Summary Astaro Security Gateway's default Web Filtering Exceptions allow specially-named domains to bypass security features of the firewall. Vendor Astaro...