FreeBSD : FreeBSD -- pf incorrectly matches different ICMPv6 states in the state table (f140cff0-771a-11ef-9a62-002590c1f29c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f140cff0-771a-11ef-9a62-002590c1f29c advisory. In ICMPv6 Neighbor Discovery ND, the ID is always 0. When pf is configured to allow ND and block incomi...

CVE-2024-45229

Versa Director exposes certain REST APIs (login, banner, device registration) without authentication. A GET request with invalid arguments can be exploited by Directors connected to the Internet to obtain authentication tokens of other logged-in users, which can be used to call additional APIs on...

Chicago API Security Summit 2024

Thank You Chicago! Earlier this week we had the pleasure of hosting a regional API Security Summit in Chicago well, actually in Lombard. These summits bring together the local cybersecurity community for half-day of API Security-focused content, including expert speakers and panelists. While this...

Weak Password Vulnerability in Next-Generation Firewall SG-6000 of Shanshi Netcom Technology (Beijing) Co.

Ltd. is a company specializing in technological innovation in the field of network security. A weak password vulnerability exists in the SG-6000 next-generation firewall of Shanshi Netcom Technology Beijing Co. Ltd, which can be exploited by attackers to obtain sensitive information...

RHSA-2022:8869 Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (puppet-firewall) security update

Bulletin has no description...

RHSA-2022:5116 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (puppet-firewall) security update

Bulletin has no description...

RHSA-2011:0953 Red Hat Security Advisory: system-config-firewall security update

Bulletin has no description...

Command Execution Vulnerability in anysec 2nd Generation Firewall System of Shenzhen Zhongke Netway Technology Co. Ltd (CNVD-2024-41199)

Ltd. is a high-tech enterprise focusing on the research, development and production of network security products. Shenzhen Zhongke Networthy Technology Co., Ltd. anysec second-generation firewall system has a command execution vulnerability that can be exploited by an attacker to gain control of...

SQL Injection Vulnerability in anysec Second Generation Firewall System of Shenzhen Zhongke NetWizard Technology Co.

Ltd. is a high-tech enterprise focusing on the research, development and production of network security products. Shenzhen Zhongke NetWizard Technology Co., Ltdanysec second generation firewall system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive...

Command Execution Vulnerability in FW Next Generation Firewall of Shanghai Bingfeng Computer Network Technology Co.

Shanghai Bingfeng Computer Network Technology Co., Ltd. specializes in the research and development and sales of VPN, firewall, Internet behavior management and other network security products, and is committed to providing China's network communication operators and enterprises and institutions...

Command Execution Vulnerability in anysec 2nd Generation Firewall System of Shenzhen Zhongke Netway Technology Co. Ltd (CNVD-2024-41198)

Ltd. is a high-tech enterprise focusing on the research, development and production of network security products. Shenzhen Zhongke Networthy Technology Co., Ltd. anysec second-generation firewall system has a command execution vulnerability that can be exploited by an attacker to gain control of...

Arbitrary File Read Vulnerability in anysec 2nd Generation Firewall System of Shenzhen Zhongke Netway Technology Co. Ltd (CNVD-2024-41191)

Ltd. is a high-tech enterprise focusing on the research, development and production of network security products. Shenzhen Zhongke NetWizard Technology Co., Ltdanysec second-generation firewall system has an arbitrary file reading vulnerability, which can be exploited by attackers to obtain...

GHSA-CX7F-G6MP-7HQM Path traversal vulnerability in functional web frameworks

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application...

DEBIAN-CVE-2024-38816

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application...

CVE-2024-38816

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application...

UBUNTU-CVE-2024-38816

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application...

CVE-2020-24061

Cross Site Scripting XSS Vulnerability in Firewall menu in Control Panel in KASDA KW5515 version 4.3.1.0, allows attackers to execute arbitrary code and steal cookies via a crafted script...

Wordfence Intelligence Weekly WordPress Vulnerability Report (September 2, 2024 to September 8, 2024)

Did you know Wordfence runs aBug Bounty Program for all WordPress plugins and themes at no cost to vendors? Through October 7th, 2024, XSS vulnerabilities in all plugins and themes with =1,000 Active Installs are in scope for all researchers. In addition, through October 14th, 2024 , r esearchers...

CVE-2020-24061

Cross Site Scripting XSS Vulnerability in Firewall menu in Control Panel in KASDA KW5515 version 4.3.1.0, allows attackers to execute arbitrary code and steal cookies via a crafted script...

KASDA KW5515 安全漏洞

The KASDA KW5515 is a wireless router from KASDA. A security vulnerability exists in the KASDA KW5515 version 4.3.1.0, which originates from a cross-site scripting vulnerability in the Firewall menu in the control panel, allowing an attacker to execute arbitrary code and steal cookies via special...