Juniper Networks Junos OS IP firewall filter access control error vulnerability

Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A security vulnerability exists in the Juniper Networks Junos OS IP firewall filter, which can be exploited by remote attackers to submit a special request that can bypass security...

Security Advisory - Information Leakage Vulnerability in some Huawei Firewall Product

There is an information leakage vulnerability in some Huawei firewall products. Due to improper processing of the initialization vector used in a specific encryption algorithm, an attacker who gains access to this cryptographic primitive may exploit this vulnerability to cause the value of the...

DLL Hijacking Vulnerability in Jiangmin Firewall

JFW is a network security protection tool designed by Beijing JMX Technology Co., Ltd. to address the safety of individual users on the Internet. JFW has a DLL hijacking vulnerability, which can be exploited by attackers to execute arbitrary code...

Sql injection

Imperva SecureSphere Web Application Firewall WAF before 12-august-2010 allows SQL injection filter bypass...

WAFW00F v2.0 - Allows One To Identify And Fingerprint Web Application Firewall (WAF) Products Protecting A Website

The Web Application FirewallFingerprinting Tool. — FromEnable Security How does it work? To do its magic, WAFW00F does the following: Sends a normal HTTP request and analyses the response; this identifies a number of WAF solutions. If that is not successful, it sends a number of potentially...

WatchGuard XMT515 Cross-Site Scripting Vulnerability

WatchGuard XMT515 is a firewall router product from WatchGuard USA. A cross-site scripting vulnerability exists in WatchGuard XMT515 version 12.1.3 and earlier. The vulnerability stems from the lack of proper validation of client-side data by the WEB application. An attacker can exploit the...

Huawei USG9500 Credential Mismanagement Vulnerability

Huawei USG9500 is a data center firewall product from Huawei, China. A security vulnerability exists in the Huawei USG9500, which arises from the program failing to properly manage credentials. An attacker could exploit the vulnerability to cause information leakage or corruption, compromising th...

WindowsFirewallRuleset - Windows Firewall Ruleset Powershell Scripts

About WindowsFirewallRuleset Windows firewall rulles organized into individual powershell scripts according to: 1. Rule group 2. Traffic direction 3. IP version IPv4 / IPv6 4. Further sorted according to programs and services such as for example: 2. ICMP traffic 3. Browser rules 4. rules for...

F5 Networks BIG-IP : TMOS vulnerability (K03126093)

On BIG-IP 15.0.0 and 14.1.0-14.1.0.6, under certain conditions, network protections on the management port do not follow current best practices. CVE-2019-6664 Impact BIG-IP The defaultfirewall rules for the management interface are not reliably reinstalled after first boot. As a result, the...

SonicOS Elevation of Privilege Vulnerability

SonicWall SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWall, Inc. An authorization issue vulnerability exists in SonicWall SonicOS. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in a network...

Apple macOS Mojave Application Firewall Component Input Validation Error Vulnerability

Apple macOS Mojave is a specialized operating system developed by Apple for Mac computers.Application Firewall is one of the application firewall components. An input validation error vulnerability exists in the Application Firewall component in Apple macOS Mojave versions prior to 10.14.5. An...

Huawei USG9500 Denial of Service Vulnerability (CNVD-2020-00216)

Huawei USG9500 is a data center firewall product from Huawei, China. A denial of service vulnerability exists in the implementation of X.509 in Huawei USG9500 V500R001C30 and V500R001C60 versions. An attacker can exploit this vulnerability to cause a denial of service dead loop with a malicious...

ESXi firewall changes required to process a Veeam backup from storage snapshot with Cisco HyperFlex IOvisor

Challenge To process a Veeam backup from storage snapshot with Cisco HyperFlex IOvisor, adjustments may have to be to the ESXi firewall settings. The process outlined below applies to all HyperFlex clusters running HX Data Platform 3.0 or later. Solution Before you add the HyperFlex Cluster into...

SQL Injection Bypass Vulnerability in D-Shield Firewall (CNVD-2020-04854)

D Shield Firewall is a free IIS firewall software, this software protects websites and servers from intrusion. D Shield Firewall suffers from a SQL injection bypass vulnerability. An attacker can exploit the vulnerability to gain access to sensitive database information...

SQL Injection Bypass Vulnerability in D-Shield Firewalls

D Shield Firewall is a free IIS firewall software, this software protects websites and servers from intrusion. D Shield Firewall suffers from a SQL injection bypass vulnerability. An attacker can exploit the vulnerability to gain access to sensitive database information...

Huawei USG9500 Missing Integrity Check Vulnerability

Huawei USG9500 is a data center firewall product from Huawei, China. A security vulnerability exists in the Huawei USG9500 V500R001C30 version and V500R001C60 version, which stems from a lack of integrity checks in the program. An attacker can exploit the vulnerability to make malicious...

Unspecified Vulnerability in Forcepoint NGFW Security Management Center

Forcepoint NGFW Security Management Center SMC is a Forcepoint product that provides unified, centralized management capabilities for Forcepoint's next-generation firewalls. A security vulnerability exists in Forcepoint NGFW SMC versions prior to 6.5.12 and prior to 6.7.1. An attacker could explo...

F5 BIG-IP ASM Resource Management Error Vulnerability

F5 BIG-IP ASM is a Web Application Firewall WAF from F5 USA that provides secure remote access, protects email, and simplifies Web access control while enhancing network and application performance. A security vulnerability exists in the F5 BIG-IP ASM. A remote attacker could exploit the...

BetterBackdoor - A Backdoor With A Multitude Of Features

A backdoor is a tool used to gain remote access to a machine. Typically, backdoor utilities such as NetCat have 2 main functions: to pipe remote input into cmd or bash and output the response. This is useful, but it is also limited. BetterBackdoor overcomes these limitations by including the...

Security Bulletin: Multiple Vulnerabilities in Kubernetes affects IBM Watson Studio Local

Summary Multiple Vulnerabilities in Kubernetes affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2019-5736 DESCRIPTION: runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary and consequently obtain host root...