Huawei USG9500 Denial of Service Vulnerability (CNVD-2020-00216)

Huawei USG9500 is a data center firewall product from Huawei, China. A denial of service vulnerability exists in the implementation of X.509 in Huawei USG9500 V500R001C30 and V500R001C60 versions. An attacker can exploit this vulnerability to cause a denial of service dead loop with a malicious...

SQL Injection Bypass Vulnerability in D-Shield Firewall (CNVD-2020-04854)

D Shield Firewall is a free IIS firewall software, this software protects websites and servers from intrusion. D Shield Firewall suffers from a SQL injection bypass vulnerability. An attacker can exploit the vulnerability to gain access to sensitive database information...

SQL Injection Bypass Vulnerability in D-Shield Firewalls

D Shield Firewall is a free IIS firewall software, this software protects websites and servers from intrusion. D Shield Firewall suffers from a SQL injection bypass vulnerability. An attacker can exploit the vulnerability to gain access to sensitive database information...

Huawei USG9500 Missing Integrity Check Vulnerability

Huawei USG9500 is a data center firewall product from Huawei, China. A security vulnerability exists in the Huawei USG9500 V500R001C30 version and V500R001C60 version, which stems from a lack of integrity checks in the program. An attacker can exploit the vulnerability to make malicious...

Unspecified Vulnerability in Forcepoint NGFW Security Management Center

Forcepoint NGFW Security Management Center SMC is a Forcepoint product that provides unified, centralized management capabilities for Forcepoint's next-generation firewalls. A security vulnerability exists in Forcepoint NGFW SMC versions prior to 6.5.12 and prior to 6.7.1. An attacker could explo...

F5 BIG-IP ASM Resource Management Error Vulnerability

F5 BIG-IP ASM is a Web Application Firewall WAF from F5 USA that provides secure remote access, protects email, and simplifies Web access control while enhancing network and application performance. A security vulnerability exists in the F5 BIG-IP ASM. A remote attacker could exploit the...

BetterBackdoor - A Backdoor With A Multitude Of Features

A backdoor is a tool used to gain remote access to a machine. Typically, backdoor utilities such as NetCat have 2 main functions: to pipe remote input into cmd or bash and output the response. This is useful, but it is also limited. BetterBackdoor overcomes these limitations by including the...

Security Bulletin: Multiple Vulnerabilities in Kubernetes affects IBM Watson Studio Local

Summary Multiple Vulnerabilities in Kubernetes affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2019-5736 DESCRIPTION: runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary and consequently obtain host root...

Equinox Control Expert

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Equinox Equipment: Control Expert Vulnerability: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' 2. RISK EVALUATION Successful exploitation of this vulnerability...

ReconCobra - Complete Automated Pentest Framework For Information Gathering

ReconCobra Reconcobra is Foot printing software for Ultimate Information Gathering Kali, Parrot OS, Black Arch, Termux, Android Led TV Interface Software have 82 Options with full automation with powerful information gathering capability In-Action !https://blogger.googleuser...

Out-of-bounds read vulnerability in multiple Huawei products (CNVD-2020-36735)

Huawei AP2000 and others are products of Huawei, China.Huawei AP2000 is a wireless access point device.Huawei IPS Module is an intrusion prevention system IPS module.NGFW Module is a next-generation firewall NGFW module. An out-of-bounds read vulnerability exists in multiple Huawei products. The...

Buffer overflow vulnerability in multiple Huawei products (CNVD-2020-36734)

Huawei AP2000 and others are products of Huawei, China.Huawei AP2000 is a wireless access point device.Huawei IPS Module is an intrusion prevention system IPS module.NGFW Module is a next-generation firewall NGFW module. A buffer overflow vulnerability exists in multiple Huawei products. An...

Buffer overflow vulnerability in multiple Huawei products (CNVD-2020-36733)

Huawei AP2000 and others are products of Huawei, China.Huawei AP2000 is a wireless access point device.Huawei IPS Module is an intrusion prevention system IPS module.NGFW Module is a next-generation firewall NGFW module. A buffer error vulnerability exists in multiple Huawei products that arises...

Webshell bypass vulnerability in D-Shield firewall (CNVD-2020-04087)

D Shield Firewall is a free IIS firewall software, this software protects websites and servers from intrusion. A webshell bypass vulnerability exists in D-Shield Firewall. An attacker can exploit this vulnerability to gain access to the target server's administrative privileges...

Webshell bypass vulnerability in D-Shield firewall (CNVD-2020-04088)

D Shield Firewall is a free IIS firewall software, this software protects websites and servers from intrusion. A webshell bypass vulnerability exists in D-Shield Firewall. An attacker can exploit this vulnerability to gain access to the target server's administrative privileges...

Webshell bypass vulnerability in D-Shield firewall (CNVD-2020-04086)

D Shield Firewall is a free IIS firewall software, this software protects websites and servers from intrusion. A webshell bypass vulnerability exists in D-Shield Firewall. An attacker can exploit this vulnerability to gain access to the target server's administrative privileges...

Webshell bypass vulnerability in D-Shield firewall (CNVD-2020-04085)

D Shield Firewall is a free IIS firewall software, this software protects websites and servers from intrusion. A webshell bypass vulnerability exists in D-Shield Firewall. An attacker can exploit this vulnerability to gain access to the target server's administrative privileges...

CVE-2019-19340

A flaw was found in Ansible Tower 3.6.1 and 3.5.3 where enabling RabbitMQ manager by setting it with '-e rabbitmqenablemanager=true' exposes the RabbitMQ management interface publicly, as expected. If the default admin user is still active, an attacker could guess the password and gain access to...

CVE-2019-5257

Certain Huawei products AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace have a resource management vulnerability. An attacker who logs in to the board may send crafted messages from the internal network...

VMware Carbon Black TAU Malware Analysis: Tofsee Botnet Resurfaces

Tofsee is a botnet which has not been reported on since the following analysis in September of 2016 by the Cert Polka team and Cisco Talos. This updated campaign employs new techniques in order to aggressively send large volumes of spam emails primarily targeting the adult dating scene. This new...