13947 matches found
Anti-DDoS Solution Based on iptables: nShield
Anti-DDoS Solution Based on iptables An Easy and Simple Anti-DDoS solution for VPS, Dedicated Servers and IoT devices based on iptables Requirements Linux System with python, iptables Nginx Will be installed automatically by install.sh Quickstart cd /home/ && git clone...
Remote Denial of Service Vulnerability in Multiple Zyxel Products
ZyXEL USG50 and so on are products of ZyXEL Technology Corporation.ZyXEL USG50 is a firewall product.ZyXEL NWA3560-N is a switch product. A remote denial of service vulnerability exists in multiple Zyxel products. An attacker could exploit this vulnerability to cause high CPU consumption, resulti...
F5 Networks BIG-IP : BIG-IP Azure cloud vulnerability (K61757346)
In some circumstances, a BIG-IP Azure cloud instance may contain a default administrative password which can be used to remotely log in to the BIG-IP system. The affected administrative account is the Azure instance administrative user created at deployment. The root and admin accounts are not...
Threat Outbreak Alert RuleID29198: Email Messages Distributing Malicious Software on May 19, 2017
Medium Alert ID: 53901 First Published: 2017 May 19 15:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29198 may contain the following files: Name | Size...
Protecting Your Small Business From WannaCry
May 12, 2017 saw the world’s first ever worm-based ransomware attack, WannaCry. Typically ransomware spreads via email as spam and phishing attacks, and relies on human intervention to initiate the infection. However, WannaCry is different in that it combines ransomware with a recently published...
Juniper Networks NorthStar Controller Application Authentication Bypass Vulnerability
Juniper Networks NorthStar Controller Application is a traffic planning controller from Juniper Networks, Inc. The controller optimizes service provider transport networks by establishing open industry standard protocols. An authentication bypass vulnerability exists in Juniper Networks NorthStar...
NETGEAR ProSAFE Devices Detection (SNMP)
This script performs SNMP based detection of NETGEAR ProSAFE devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
What Are Domain Generation Algorithms (DGAs) And Why You Should Care?
Last time I talked about how a proactive approach to defending against targeted threats using cloud-based recursive DNS and threat intelligence just makes sense. Taking this proactive approach early in the killchain can help mitigate known and unknown threats before any IP connection, file downlo...
BSA-2017-271
Security Advisory ID : BSA-2017-271 Component : MD5 Algorithm Revision : 1.0: Interim The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of MD5 in the signature...
Microsoft Windows 8/8.1/2012 R2 (x64) - 'EternalBlue' SMB Remote Code Execution (MS17-010)
!/usr/bin/python from impacket import smb, ntlm from struct import pack import sys import socket ''' EternalBlue exploit for Windows 8 and 2012 by sleepya The exploit might FAIL and CRASH a target system depended on what is overwritten The exploit support only x64 target EDB Note: Shellcode - x64...
Microsoft Windows 88.12012 R2 (x64) - EternalBlue SMB Remote Code Execution (MS17-010)
Microsoft Windows 88.12012 R2 x64 - EternalBlue SMB Remote Code Execution MS17-010 !/usr/bin/python from impacket import smb, ntlm from struct import pack import sys import socket ''' EternalBlue exploit for Windows 8 and 2012 by sleepya The exploit might FAIL and CRASH a target system depended o...
SNMP Protocol Community String Authentication Privilege Bypass Vulnerability in Lenovo NetroStar Power V Firewall
Lenovo Power V Firewall is a comprehensive UTM that combines firewall, IPSec VPN, SSL VPN, intrusion detection and protection system, anti-virus, vulnerability scanning, active defense, traffic control, log auditing, centralized management, and other multi-functions. The Lenovo Power V Firewall h...
SNMP Protocol Community String Authentication Privilege Bypass Vulnerability in Riptide RG-WALL-160S Firewall
RG-WALL 160S is a 100 Gigabit firewall product launched by Ruijie Network. The RG-WALL-160S firewall has a SNMP protocol community string authentication privilege bypass vulnerability. It allows an attacker to bypass SNMP access control by utilizing arbitrary strings or integer values to write...
Dynamic Application Profiling: What It Is and Why You Want Your WAF to Have It
Because web applications are unique, they have distinct structures and dynamics, and – unfortunately – different vulnerabilities. A web application security device, therefore, must understand the structure and usage of the protected applications. Depending on the complexity of the protected...
PT-2017-7240 · Undefined · Undefined
"Source": "CVE FEED", "Title": "CVE-2024-7821 - CVE-2015-7585: Cisco ASA Cross-Site Request Forgery CSRF Vulneability", "Content": "CVE ID : CVE-2024-7821 Published : Sept. 4, 2024, 10:15 a.m. | 19 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE...
Veritas Netbackup 8.0 File Write / Remote Code Execution / Bypass
Veritas Netbackup 8.0 - Multiple Vulnerabilities ------------------------------------------------- Introduction ============ Multiple vulnerabilities were identified in Veritas Netbackup https://www.veritas.com/product/backup-and-recovery/netbackup-8. The vulnerabilities were discovered during a...
Hands-On Review: Converged Networking and Security with Cato Networks
Nobody likes to do router and firewall management. It often requires a lot of hard labor just keeping the infrastructure up and running. If you ever had to set up IPsec tunnels between different firewall brands, change a firewall rule and hope nothing breaks, upgrade to the latest software or...
CVE-2017-8760
An issue was discovered on Accellion FTA devices before FTA912180. There is XSS in courier/1000@/index.html with the authparams parameter. The device tries to use internal WAF filters to stop specific XSS Vulnerabilities. However, these can be bypassed by using some modifications to the payloads,...
Akamai IT Challenge - 100 apps on EAA in 100 days
About a month or so ago I shared a quick video interview with Joe DeFelice. Joe is a Sr. Director Enterprise Security & Infrastructure Engineering here at Akamai. In the video Joe outlines a few of the major initiatives he and the team are working on, including moving towards eliminating the VPN...