1422 matches found
Jays Shell Booter Denial of Service Tool
Jays Shell Booter is a denial-of-service attack tool associated with malicious activity. The tool crafts and sends multiple HTTP requests that can potentially cause attacked systems to become temporarily unresponsive. Note: This protection is supported from version R75.40VS and above and cannot b...
Cisco Intrusion Prevention System DoS
Кратковременные условия при разборе SSL...
Race condition
Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System IPS Software before 7.33E4 allows remote attackers to cause a denial of service process hang by establishing many HTTPS sessions, aka Bug ID CSCuq40652...
CVE-2015-0654
Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System IPS Software before 7.33E4 allows remote attackers to cause a denial of service process hang by establishing many HTTPS sessions, aka Bug ID CSCuq40652...
CVE-2015-0654
Cisco IPS CVE-2015-0654 is a race condition in the TLS subsystem of MainApp on the management interface that can be exploited by remote attackers establishing numerous HTTPS sessions to cause the MainApp process to become unresponsive (DoS). Affected software is Cisco IPS Software prior to 7.3(3)...
JavaScript Data Encoding Evasion
An attacker might utilize various evasion technique in order to evade detection by IPS devices...
JavaScript String Inflation Evasion
An attacker might utilize various evasion technique in order to evade detection by IPS devices...
JavaScript String Reversal Evasion
An attacker might utilize various evasion technique in order to evade detection by IPS devices...
JavaScript String Dissection Evasion
An attacker might utilize various evasion technique in order to evade detection by IPS devices...
CVE-2015-0631
Race condition in the SSL implementation on Cisco Intrusion Prevention System IPS devices allows remote attackers to cause a denial of service by making many management-interface HTTPS connections during the key-regeneration phase of an upgrade, aka Bug ID CSCui25688...
Race condition
Race condition in the SSL implementation on Cisco Intrusion Prevention System IPS devices allows remote attackers to cause a denial of service by making many management-interface HTTPS connections during the key-regeneration phase of an upgrade, aka Bug ID CSCui25688...
CVE-2015-0631
Race condition in the SSL implementation on Cisco Intrusion Prevention System IPS devices allows remote attackers to cause a denial of service by making many management-interface HTTPS connections during the key-regeneration phase of an upgrade, aka Bug ID CSCui25688...
CVE-2015-0631
Cisco IPS CVE-2015-0631 is a race-condition vulnerability in the SSL/TLS subsystem used by the web management interface. During image upgrading, key/certificate regeneration can be disrupted by a rapid sequence of HTTPS connections to the management interface, allowing a remote attacker to cause ...
DNS Enumeration Script: DNSRecon
DNS reconnaissance is part of the information gathering stage on a penetration test engagement. When a penetration tester is performing a DNS reconnaissance he is trying to obtain as much information as he can regarding the DNS servers and their records. The information that can be gathered can...
Adobe Flash CVE-2 0 1 5-0 3 1 3 new 0day-vulnerability warning-the black bar safety net
In the Adobe Flash Player newly discovered a high risk vulnerability, hackers can take advantage of its large-scale forced-by downloaddrive-by downloadattacks, also known as the“website hanging horse attack”, when you're viewing contains a malicious code of a web page or to access the AD, it will...
Marketo Cloud - Persistent Mail Encoding Vulnerability
Document Title: =============== Marketo Cloud - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1321 Release Date: ============= 2015-01-13 Vulnerability Laboratory ID VL-ID: ==================================== 132...
Symantec Web Gateway OS Authenticated Command Injection
SUMMARY Symantec's Web Gateway SWG Appliance management console is susceptible to operating system command injection by an authenticated but less-privileged user. AFFECTED PRODUCTS Product | Version | Solution ---|---|--- Symantec Web Gateway Appliance | 5.2.1 and prior | Symantec Web Gateway 5.2...
Snort 3.0 - Network intrusion prevention and detection system (IDS/IPS)
Snort is the most powerful IPS in the world, setting the standard for intrusion detection. So when we started thinking about what the next generation of IPS looked like we started from scratch. Features Support multiple packet processing threads Shared configuration and attribute table Use a...
Sql injection
SQL injection vulnerability in the IPS Connect service interface/ipsconnect/ipsconnect.php in Invision Power Board aka IPB or IP.Board 3.3.x and 3.4.x through 3.4.7 before 20141114 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2014-9239
This CVE refers to a SQL injection vulnerability in the IPS Connect service (interface/ipsconnect/ipsconnect.php) of Invision Power Board (IPB/IP.Board) 3.3.x and 3.4.x up to 3.4.7, exploitable via the id[] parameter. The underlying issue allows remote attackers to execute arbitrary SQL commands....