PT-2025-5670 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash was reported due to a segmentation fault on an unknown address. The crash occurred in the ndpi free flow data function, which is located in the...

Authentication flaw

A flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is set to FORWARD mode, authentication is no longer enforced, allowing any user who can connect to the OpenShift Console in an OpenShift cluster to retrieve flows without...

About Anomalous Data Transfer detection in InsightIDR

By Shivangi Pandey Shivangi is a Senior Product Manager for D&R at Rapid7. Data exfiltration is an unauthorized movement or transfer of data occurring on an organization’s network. This can occur when a malicious actor gains access to a corporation’s network with the intention of stealing or...

PT-2022-37173 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash, specifically a Segv on an unknown address. The crash state includes functions such as ndpi free flow data, ndpi flow fre...

CVE-2022-21861

Task Flow Data Engine Elevation of Privilege Vulnerability...

Privilege escalation

Task Flow Data Engine Elevation of Privilege Vulnerability...

CVE-2022-21861 Task Flow Data Engine Elevation of Privilege Vulnerability

...

CVE-2022-21861: Undefined Security Weakness

Task Flow Data Engine Elevation of Privilege Vulnerability...

PT-2022-15171 · Unknown +1 · Task Flow Data Engine +1

Name of the Vulnerable Software and Affected Versions: Task Flow Data Engine affected versions not specified Description: An elevation-of-privilege issue allows attackers to affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for th...

IBM QRadar SIEM Hardcoded Credentials Vulnerability

QRadar SIEM is an IBM enterprise security information and event management product that consolidates log event and network flow data from thousands of devices, endpoints and applications scattered across the network. A hard-coded credentials vulnerability exists in IBM QRadar SIEM versions 7.3 an...

Monitoring Large-Scale Networks: YAF

Monitoring Large-Scale Networks Why does the world need another network flow event generator? yaf was originally intended as an experimental implementation tracking developments in the IETF IPFIX working group, specifically bidirectional flow representation, archival storage formats, and structur...

MIRcon 2014 – Day 2 Highlights

MIRcon 2014 It seemed fitting that the last day of MIRcon started with a total lunar eclipse and ended with an inspirational keynote address by renowned astrophysicist Dr. Neil deGrasse Tyson. After an amazing two days of content, MIRcon 2014 is officially in the books! Following are some of the...