19033 matches found
The vulnerability of the command-line interface (CLI) of Juniper Networks Junos OS-based SRX routers allows a attacker to gain unauthorized access to protected information.
The vulnerability of the command-line interface CLI of Juniper Networks Junos OS routers of the SRX series relates to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
F5 Networks BIG-IP : Linux kernel vulnerability (K000148479)
The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6 / 17.1.2.2 / 17.5.0. It is, therefore, affected by a vulnerability as referenced in the K000148479 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: do not accept ACK of...
The vulnerability of the MXview One and MXview One Central Manager industrial network management platforms lies in the storage of credentials in an open manner, allowing a malicious actor to gain unauthorized access to protected information.
The vulnerability of the MXview One and MXview One Central Manager industrial network management platforms lies in the storage of credentials in an open manner. Exploiting this vulnerability could allow a perpetrator to gain unauthorized access to protected information...
The vulnerability of Juniper Networks’ Junos Space network resource management platform, related to the failure to cleanse input data at the control level, allows attackers to execute arbitrary commands.
The vulnerability of the Juniper Networks Junos Space network resource management platform lies in the lack of measures taken to sanitize input data at the control level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafted requests...
CVE-2023-40457
The BGP daemon in Extreme Networks ExtremeXOS aka EXOS 30.7.1.1 allows an attacker who is not on a directly connected network to cause a denial of service BGP session reset because of BGP attribute error mishandling for attribute 21 and 25. NOTE: the vendor disputes this because it is "evaluating...
CVE-2023-40457
Affected software: Extreme Networks ExtremeXOS (EXOS) 30.7.1.1 running BGP daemon. Issue: BGP UPDATE attribute error mishandling for path attributes 21 and 25 can allow a remote attacker (not necessarily on a directly connected network) to trigger a denial-of-service by resetting BGP sessions. Ve...
Palo Alto Advises Securing PAN-OS Interface Amid Potential RCE Threat Concerns
Palo Alto Networks on Friday issued an informational advisory urging customers to ensure that access to the PAN-OS management interface is secured because of a potential remote code execution vulnerability. "Palo Alto Networks is aware of a claim of a remote code execution vulnerability via the...
CISA Alerts to Active Exploitation of Critical Palo Alto Networks Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a now-patched critical security flaw impacting Palo Alto Networks Expedition to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2024-5910 CVS...
CVE-2024-10973
A vulnerability was found in Keycloak. The environment option KCCACHEEMBEDDEDMTLSENABLED does not work and the JGroups replication configuration is always used in plain text which can allow an attacker that has access to adjacent networks related to JGroups to read sensitive information...
Aruba Networks Instant 安全漏洞
Hewlett Packard Enterprise Aruba Networks Instant is a wireless network from Hewlett Packard Enterprise, Inc. provides the only Wi-Fi solution that is easy to set up. A security vulnerability exists in Aruba Networks Instant that stems from the presence of a command injection vulnerability, which...
Digital China Networks DCME-320 安全漏洞
Digital China Networks DCME-320 is a wireless router from Digital China Networks China. A security vulnerability exists in the Digital China Networks DCME-320 version v7.4.12.90, which stems from vulnerability to command injection attacks...
Enterprise Identity Threat Report 2024: Unveiling Hidden Threats to Corporate Identities
In the modern, browser-centric workplace, the corporate identity acts as the frontline defense for organizations. Often referred to as "the new perimeter", the identity stands between safe data management and potential breaches. However, a new report reveals how enterprises are often unaware of h...
Loose-lipped neural networks and lazy scammers
One topic being actively researched in connection with the breakout of LLMs is capability uplift – when employees with limited experience or resources in some area become able to perform at a much higher level thanks to LLM technology. This is especially important in information security, where...
The vulnerability of the software platform for managing security in industrial networks, MXSecurity, arises from the use of dangerous methods or functions, allowing attackers to enhance their privileges.
The vulnerability of the MXSecurity software platform for managing security in industrial networks is related to the use of dangerous methods or functions. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the MXSecurity software platform for managing security in industrial networks lies in the use of strictly encrypted credentials, which allows attackers to disclose the protected information.
The vulnerability of the MXSecurity software platform for managing security in industrial networks is related to the use of strictly encrypted user credentials. Exploiting this vulnerability could allow an attacker to disclose the protected information...
North Korean Group Collaborates with Play Ransomware in Significant Cyber Attack
Threat actors linked to North Korea have been implicated in a recent incident that deployed a known ransomware family called Play, underscoring their financial motivations. The activity, observed between May and September 2024, has been attributed to a threat actor tracked as Jumpy Pisces , which...
The vulnerability of the application software interface of the operating system PAN-OS allows a perpetrator to enhance their privileges.
The vulnerability of the application programming interface of the PAN-OS operating system is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
F5 Networks BIG-IP : Diffie-Hellman key exchange protocol vulnerability (K000148343)
The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000148343 advisory. Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is...
Lumma/Amadey: fake CAPTCHAs want to know if you’re human
Attackers are increasingly distributing malware through a rather unusual method: a fake CAPTCHA as the initial infection vector. Researchers from various companies reported this campaign in August and September. The attackers, primarily targeting gamers, initially delivered the Lumma stealer to...
