Microsoft Windows Firewall: Domain: Inbound connections

This setting determines the behavior for inbound connections that do not match an inbound firewall rule. C Microsoft Corporation 2015. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft Windows Firewall: Public: Inbound connections

This setting determines the behavior for inbound connections that do not match an inbound firewall rule. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Information Disclosure

github.com/tendermint/tendermint is vulnerable to information disclosure. This is due to rejected inbound connection objects due to max peers not closing properly, which causes file descriptors to be leaked. This can also be exploited to cause nodes to panic from use of too many file descriptors...

Security Bulletin: Vulnerability in SSLv3 affects IBM Workflow for Bluemix beta (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 was enabled by default in IBM Workflow for Bluemix beta. Vulnerability Details CVE ID: CVE-2014-3566 DESCRIPTION: IBM Workflow for Bluemix beta could allow a...

Windows Defender Firewall: Prohibit notifications

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winadvsecprofilenotification.nasl 10010 2018-05-29 14:43:35Z emoss $ Check value for Windows Defender Firewall: Prohibit notifications Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Windows Defender Firewall: Inbound connections

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winadvsecprofileinboundcon.nasl 10010 2018-05-29 14:43:35Z emoss $ Check value for Windows Defender Firewall: Inbound connections Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

CVE-2018-8857

Philips Brilliance CT software Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and Brilliance CT Big Bore 2.3.5 and prior contains fixed credentials, such as a password or cryptographic key, which it uses for its own inbou...

How to attach files in Secure Mail keeping the policy restricted

In Secure Mail/WorxMail versions 10.3.5 and later, Android users can't attach images directly from the Gallery app when the Inbound document exchange Open-in policy is set to Restricted. If you want to keep this policy set to Restricted but still allow users to add photos from the Gallery, follow...

Remote Code Execution (RCE)

xenon-commons is vulnerable to remote code execution RCE attacks. These attacks are possible because inbound requests of Content-Type: kryo-octet-stream are deserialized when getBody is called. Using this flaw, unauthenticated users can execute code...

Unix Command Shell, Reverse TCP (stub)

Creates an interactive shell through an inbound connection stub only, no payload This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 0 include Msf::Payload::Single include...

Advanced Policy Firewall: APF

Advanced Policy Firewall APF is an iptablesnetfilter based firewall system designed around the essential needs of today’s Internet deployed servers and the unique needs of custom deployed Linux installations. The configuration of APF is designed to be very informative and present the user with an...

Active Inbound Connection From Host Listed in Custom Netstat IP Threat List

According to the output from netstat, the remote host has an inbound connection to one or more hosts that are listed in the custom netstat IP threat list. C Tenable Network Security, Inc. Disabled on 2018/08/14. Re-enabled on 2020/10/26. include"compat.inc"; if description scriptid102425;...

Reducing Infrastructure Cost with new Enterprise Application Access Architecture

In an earlier blog, "Remote Access no longer needs to be Complex and Cumbersome", I wrote about the new game-changing remote access solution available from Akamai called Enterprise Application Access EAA. My thesis was that in our cloud-first, mobile-dominated world, providing access to...

Access camera role from gallery via Secure Mail

Users wanted to access camera role to attach to an email in android devices. In Secure Mail, if we set the Inbound Document Exchange open in to Restricted, on any Android device, our only options when using Secure Mail to attach a photo are – Last photo taken or to use the camera to take a pictur...

DEBIAN-CVE-2016-2233

Stack-based buffer overflow in the inboundcapls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of service crash via a large number of options in a CAP LS message...

PT-2017-8017

Name of the Vulnerable Software and Affected Versions HexChat version 2.10.2 Description The issue is a stack-based buffer overflow in the inbound cap ls function, which can be triggered by remote IRC servers sending a large number of options in a CAP LS message, leading to a denial of service...

CVE-2016-3532

Unspecified vulnerability in the Oracle Advanced Inbound Telephony component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to SDK client integration. NOTE: the previous information is from the July 2016 CP...

CVE-2016-3532

Unspecified vulnerability in the Oracle Advanced Inbound Telephony component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to SDK client integration. NOTE: the previous information is from the July 2016 CP...

Unspecified Vulnerability in Oracle E-Business Suite Advanced Inbound Telephony

Oracle E-Business Suite is a comprehensive suite of enterprise-class business applications. A security vulnerability exists in Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3 in the Advanced Inbound Telephony component, which can be exploited by remote attackers to compromise...

CVE-2016-3532: Undefined Security Weakness

Unspecified vulnerability in the Oracle Advanced Inbound Telephony component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to SDK client integration. NOTE: the previous information is from the July 2016 CP...