PT-2017-12456

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controllers affected versions not specified Description A vulnerability in the Access Network Query Protocol ANQP ingress frame processing functionality could allow an unauthenticated, Layer 2 RF-adjacent attacker to cause a...

PT-2017-12450

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controllers affected versions not specified Description A vulnerability in the implementation of 802.11v Basic Service Set BSS Transition Management functionality could allow an unauthenticated, adjacent attacker to cause an...

PT-2017-3405

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controllers affected versions not specified Description A vulnerability in the Control and Provisioning of Wireless Access Points CAPWAP Discovery Request parsing functionality could allow an unauthenticated, remote attacker...

PT-2017-12452

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controllers affected versions not specified Description A memory leak in the Simple Network Management Protocol SNMP subsystem could allow an authenticated, remote attacker to cause an affected device to restart, resulting i...

Cisco IOS XE Wireless LAN Controllers Privilege Escalation

The vulnerability of the graphical web interface of Cisco IOS XE Wireless LAN Controllers is related to insufficient protection against HTTP requests. Exploiting this vulnerability allows a malicious actor, operating remotely as a Lobby Administrator, to elevate administrative privileges and gain...

CVE-2017-11051

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, information disclosure is possible in function wlanhddcfg80211testmode since buffer hbparams is not initialized to zero...

Optional Windows NTLM SSO authentication changes

Microsoft is releasing an optional security enhancement to NT LAN Manager NTLM, limiting which network resources various clients in the Windows 10 or the Windows Server 2016 operating systems can use NTLM Single Sign OnSSO as an authentication method. When you deploy the new security enhancement...

Cisco IOS Software VPLS denial of service (cisco-sa-20170927-vpls)

According to its self-reported version and configuration, the Cisco IOS software running on the remote device is affected by a denial of service vulnerability in the Virtual Private LAN Service VPLS feature. An unauthenticated, remote attacker can exploit this, via specially crafted requests, to...

NPM-V (Network Power Manager) 2.4.1 Password Reset

NPM-VNetwork Power Manager = 2.4.1 Reset Password Vulnerability Author: Saeed reza Zamanian penetrationtest @ Linkedin Product: NPM-V Affected Version : 2.4.1 and below Vendor : http://www.china-clever.com Product Link : http://www.china-clever.com/en/index.php/product?view=products&cid=125 Date:...

NPM-V (Network Power Manager) 2.4.1 - Password Reset Vulnerability

Exploit for hardware platform in category web applications NPM-VNetwork Power Manager = 2.4.1 Reset Password Vulnerability Author: Saeed reza Zamanian penetrationtest @ Linkedin Product: NPM-V Affected Version : 2.4.1 and below Vendor : http://www.china-clever.com Product Link :...

CVE-2017-12226

A vulnerability in the web-based Wireless Controller GUI of Cisco IOS XE Software for Cisco 5760 Wireless LAN Controllers, Cisco Catalyst 4500E Supervisor Engine 8-E Wireless Switches, and Cisco New Generation Wireless Controllers NGWC 3850 could allow an authenticated, remote attacker to elevate...

CVE-2017-12222

A vulnerability in the wireless controller manager of Cisco IOS XE could allow an unauthenticated, adjacent attacker to cause a restart of the switch and result in a denial of service DoS condition. The vulnerability is due to insufficient input validation. An attacker could exploit this...

Input validation

A vulnerability in the wireless controller manager of Cisco IOS XE could allow an unauthenticated, adjacent attacker to cause a restart of the switch and result in a denial of service DoS condition. The vulnerability is due to insufficient input validation. An attacker could exploit this...

TrendMicro OfficeScan 11.0 / XG (12.0) Server-Side Request Forgery

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/TRENDMICRO-OFFICESCAN-XG-SERVER-SIDE-REQUEST-FORGERY.txt + ISR: ApparitionSec Vendor: ================== www.trendmicro.com Product: =========== OfficeScan v11.0 and XG 12.0...

Trend Micro OfficeScan 11.0/XG (12.0) - Server Side Request Forgery Vulnerability

Exploit for php platform in category web applications + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/TRENDMICRO-OFFICESCAN-XG-SERVER-SIDE-REQUEST-FORGERY.txt + ISR: ApparitionSec Vendor: ==================...

Trend Micro OfficeScan 11.0/XG (12.0) - Server Side Request Forgery

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/TRENDMICRO-OFFICESCAN-XG-SERVER-SIDE-REQUEST-FORGERY.txt + ISR: ApparitionSec Vendor: ================== www.trendmicro.com Product: =========== OfficeScan v11.0 and XG 12.0...

PT-2017-2995

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software versions 3.7.0E through 3.7.5E Description The issue is related to insufficient validation of HTTP requests in the web-based GUI of Cisco IOS XE Software for Wireless LAN Controllers. This could allow a remote attacker,...

CVE-2017-14430

D-Link DIR-850L REV. A with firmware through FW114WWb07h2abbeta1 and REV. B with firmware through FW208WWb02 devices allow remote attackers to cause a denial of service daemon crash via crafted LAN traffic...

CVE-2017-14430

The CVE-2017-14430 issue affects D-Link DIR-850L, Rev. A (firmware FW114WWb07_h2ab_beta1) and Rev. B (firmware FW208WWb02). The vulnerability allows remote attackers to cause a denial of service (daemon crash) via crafted LAN traffic. The available connected documents confirm the affected product...

CVE-2017-14430: Improper Input Validation

D-Link DIR-850L REV. A with firmware through FW114WWb07h2abbeta1 and REV. B with firmware through FW208WWb02 devices allow remote attackers to cause a denial of service daemon crash via crafted LAN traffic...