Attackers Use UPnP to Sidestep DDoS Defenses

Universal Plug and Play networking protocols have never been a friend of security researchers. On Monday, Imperva gave the InfoSec community another reason to dislike UPnP. In a proof-of-concept Distributed Denial of Service DDoS attack, Imperva researchers have devised a way to exploit the UPnP...

The vulnerability of the routing mechanism implemented by the Forwarding Information Base (FIB) in the Cisco IOS XE operating system allows a attacker to cause a service failure.

The vulnerability of the routing mechanism that implements the Forwarding Information Base FIB in the Cisco IOS XE operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

spring-framework: Multipart content pollution

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, provide client-side support for multipart requests. When Spring MVC or Spring WebFlux server application server A receives input from a remote client, and then uses that input to make a...

Metasploit Framework - 'msfd' Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Metasploit msfd Remote Code Execution', 'Description' = %q Metasploit's msfd-service makes it possible to get a msfconsole-like interface over a...

CVE-2018-0239

A vulnerability in the egress packet processing functionality of the Cisco StarOS operating system for Cisco Aggregation Services Router ASR 5700 Series devices and Virtualized Packet Core VPC System Software could allow an unauthenticated, remote attacker to cause an interface on the device to...

CVE-2018-0241

Cisco IOS XR Software contains a UDP broadcast forwarding vulnerability that can be exploited by an unauthenticated adjacent attacker to cause a DoS on devices with at least one IPv4 helper address configured. The root cause is improper handling of UDP broadcast packets forwarded to an IPv4 helpe...

CVE-2018-0241

A vulnerability in the UDP broadcast forwarding function of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to improper handling of UDP broadcast packets that are forwarded to an IP...

Cisco IOS XR Software UDP Broadcast Forwarding Denial of Service Vulnerability

A vulnerability in the UDP broadcast forwarding function of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to improper handling of UDP broadcast packets that are forwarded to an IP...

HackerOne: Harvesting all private invites using leave program fast-tracked invitation and security@ email forwarding feature

Hi HackerOne, Summary: I have found a way that it is possible to harvest all private invitation using the new Leave Program feature together with the security@ email forwarding feature without any user interaction. --- Description: First, when the program activated the security@ email forwarding ...

HackerOne: Email Forwarding invitations for Drafts are not marked as accepted, allowing multiple users to join a program after disabling Email Forwarding

STEPS TO REPRODUCE: 1. I have found a sandboxed team in hackerone,named █████. 2. The manager of that team sends an invitation to: ██████████ which email was not exist on hackerone account 3. Now the invitation link receive was ======== ████ 4. I logged in from multiple researcher account and...

Cisco Catalyst 4500 Series and 4500-X Series Switches Denial of Service Vulnerability

The Cisco Catalyst 4500 Supervisor Engine 6-E and others are switch products from Cisco. the IOS and IOS XE Software are operating systems developed for Cisco network devices that run on them. A denial of service vulnerability exists in the Bidirectional Forwarding Detection BFD offload...

Cisco IOS Software and IOS XE Software Denial of Service Vulnerability (CNVD-2018-07314)

Cisco IOS Software and IOS XE Software are both operating systems developed by Cisco for its network devices. A resource management error vulnerability exists in the Forwarding Information Base FIB code in Cisco IOS Software and IOS XE Software, which arises from a restriction in the way recursiv...

CVE-2018-0189

A vulnerability in the Forwarding Information Base FIB code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, network attacker to cause a denial of service DoS condition. The vulnerability is due to a limitation in the way the FIB is internally representing recursive...

CVE-2018-0155

A vulnerability in the Bidirectional Forwarding Detection BFD offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow an unauthenticated, remote attacker to cause a crash of the iosd process, causing a denial of service DoS condition. Th...

DEBIAN-CVE-2018-1283

In Apache httpd 2.4.0 to 2.4.29, when modsession is configured to forward its session data to CGI applications SessionEnv on, not the default, a remote user may influence their content by using a "Session" header. This comes from the "HTTPSESSION" variable name used by modsession to forward its...

CVE-2018-1283

In Apache httpd 2.4.0 to 2.4.29, when modsession is configured to forward its session data to CGI applications SessionEnv on, not the default, a remote user may influence their content by using a "Session" header. This comes from the "HTTPSESSION" variable name used by modsession to forward its...

TL-WR720N 150Mbps Wireless N Router - Cross-Site Request Forgery

/ Exploit Title: TL-WR720N 150Mbps Wireless N Router - CSRF Date: 21-3-2018 Exploit Author: Mans van Someren Vendor Homepage: https://www.tp-link.com/ Software Link: https://static.tp-link.com/resources/software/TL-WR720NV1130719.zip Version: All versions because its a 0day Testen on: Google Chro...

TL-WR720N 150Mbps Wireless N Router - Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications / Exploit Title: TL-WR720N 150Mbps Wireless N Router - CSRF Date: 21-3-2018 Exploit Author: Mans van Someren Vendor Homepage: https://www.tp-link.com/ Software Link: https://static.tp-link.com/resources/software/TL-WR720NV1130719.zip...

Advanced Network Monitoring & MITM Attack Framework: Bettercap

Evil socket just announced the release of the second generation of bettercap , a complete re-implementation of the most complete and advanced Man-in-the-Middle attack framework. This release not only brings MITM attacks to the next level, but it aims to be the reference framework for network...

Fedora 26 : knot-resolver (2018-844a1e9778)

Knot Resolver 2.1.0 2018-02-16 ================================ Incompatible changes -------------------- - stats: remove tracking of expiring records predict uses another way - systemd: re-use a single kresd.socket and kresd-tls.socket - tasentinel: implement protocol...