Siemens SCALANCE S615 6GK5615-0AA00-2AA2 LAN router

Binary data 764596.prm...

PT-2019-17916

Name of the Vulnerable Software and Affected Versions VAIO Update versions 7.3.0.03150 and earlier Description The issue allows remote attackers to conduct a man-in-the-middle attack via a malicious wireless LAN access point. A successful exploitation may result in a malicious file being download...

CVE-2019-5982: Download of Code Without Integrity Check

Improper download file verification vulnerability in VAIO Update 7.3.0.03150 and earlier allows remote attackers to conduct a man-in-the-middle attack via a malicous wireless LAN access point. A successful exploitation may result in a malicious file being downloaded/executed...

Ninja Turtles in your network: LAN Turtle 3G. A how-to for red teaming

Introduction This post will detail how to configure and utilise a LAN turtle 3G from Hak 5 to gain a persistent, remotely accessible presence within a network. With ethernet ports becoming less common on new hardware, many people have been forced into deploying an array of various dongles and...

curl: NTLMv2 type-3 header stack buffer overflow

A stack-based buffer overflow was found in the way curl handled NTLMv2 type-3 headers. When connecting to a remote malicious server which uses NTLM authentication, the flaw could cause curl to crash...

Microsoft Windows NTLM Tampering Security Bypass Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A security vulnerability exists in Microsoft Windows. An attacker could exploit this...

CVE-2019-1040

A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC Message Integrity Check protection. An attacker who successfully exploited this vulnerability could gain the ability to downgrade NTLM security features. To exploit...

Amazon Linux 2 : kernel (ALAS-2019-1214)

A flaw was found in the Linux kernel's freescale hypervisor manager implementation. A parameter passed via to an ioctl was incorrectly validated and used in size calculations for the page size calculation. An attacker can use this flaw to crash the system or corrupt memory or, possibly, create...

Cisco Adaptive Security Appliances SAML Auth Bypass

The vulnerability of the Security Assertion Markup Language SAML implementation in Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense is related to authentication errors when using NT LAN Manager NTLM or basic authentication. Exploiting this vulnerability allows a malicious act...

Input validation

Improper input validation on input data which is used to locate and copy the additional IEs in WLAN function can lead to potential integer truncation issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607,...

PT-2019-2474

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC Message Integrity Check protection. This...

Siemens CP 343-1 Lean Communications Adapter Detection

Binary data 750239.prm...

Siemens SIPLUS NET CP343-1 LEAN Communications Adapter Detection

Binary data 750268.prm...

Siemens SIPLUS NET CP343-1 Communications Adapter Detection

Binary data 750269.prm...

Cisco Wireless LAN Controller Resource Management Error DoS

The vulnerability of the IAPP message processor in microprogramming software for Cisco Wireless LAN Controllers is related to resource management errors. Exploiting this vulnerability can allow attackers to cause service failures by sending malicious IAPP messages...

Cisco Wireless LAN Controller Resource Management Error DoS

The vulnerability of the IAPP message processor in microprogramming software for Cisco Wireless LAN Controllers is related to resource management errors. Exploiting this vulnerability can allow attackers to cause service failures by sending malicious IAPP messages...

Cisco Wireless LAN Controller Resource Management Error DoS

The vulnerability of the IAPP message processor in microprogramming software for Cisco Wireless LAN Controllers is related to resource management errors. Exploiting this vulnerability can allow attackers to cause service failures by sending malicious IAPP messages...

Cisco Wireless LAN Controller Configuration DoS

Multiple vulnerabilities exist in the configuration function of the administrative graphical interface of Cisco Wireless LAN Controller microprogramming system. These vulnerabilities arise due to insufficient validation of input data. Exploitation of these vulnerabilities could allow a malicious...

Cisco Wireless LAN Controller Privilege Escalation

The vulnerability of the Cisco Wireless LAN Controller web interface is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on the device with user privileges, including changing the device configuration using a...

Cisco Wireless LAN Controller Locally Significant Certificate Denial of Service Vulnerability

According to its self-reported version, Cisco Wireless LAN Controller WLC is affected by following vulnerability - A vulnerability in Locally Significant Certificate LSC management for the Cisco Wireless LAN Controller WLC could allow an authenticated, remote attacker to cause the device to...