CVE-2021-36082

ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello...

CVE-2021-36082

ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello...

CVE-2021-36082

ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello...

CVE-2021-36082

CVE-2021-36082 affects ntop nDPI 3.4 and is due to a stack-based buffer overflow in processClientServerHello. The connected sources consistently report this vulnerability in ntop nDPI 3.4; no specific exploit details or patched versions are provided in the documents. The information confirms the ...

Ntop nDPI Buffer Overflow Vulnerability (CNVD-2020-36698)

Ntop nDPI is an open source library for deep packet inspection from Ntop Italy. A buffer overflow vulnerability exists in the ndpiparsepacketlineinfo in the lib/ndpimain.c file in Ntop nDPI 3.2 and earlier versions. The vulnerability stems from a network system or product performing operations in...

Ntop nDPI Buffer Overflow Vulnerability

Ntop nDPI is an open source library for deep packet inspection from Ntop Italy. A buffer overflow vulnerability exists in the 'concathashstring' function of the ssh.c file in Ntop nDPI 3.2 Stable and earlier versions, which can be exploited by an attacker to cause a denial of service with the hel...

Ntop nDPI Input Validation Error Vulnerability

Ntop nDPI is an open source library for deep packet inspection from Ntop Italy. An input validation error vulnerability exists in the SSH protocol parser in Ntop nDPI 3.2 Stable and prior versions, which can be exploited by attackers to execute code or perform network traffic analysis...

ntop-ng Authentication Bypass Vulnerability

Exploit for linux platform in category remote exploits Vulnerability title: ntop-ng 3.4.180617 - Authentication Bypass Author: Ioannis Profetis Contact: me at x86.re Vulnerable versions: 3.4.180617-4560 Fixed version: 3.4.180617 Link: ntop.org Date: 2.07.2018 CVE-2018-12520 Product Details ntopng...

NBOX Detection (HTTP)

Detects the installed version of NBOX. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

ntop/nbox 2.3 <= 2.5 - Multiple Vulnerabilities

No description provided by source. E-DB Note: Source http://carnal0wnage.attackresearch.com/2016/08/got-any-rces.html The issues were found originally in nbox 2.3 and confirmed in nbox 2.5 To make things easier, I created a Vagrantfile with provisioning so you can have your own nbox appliance and...

ntop/nbox 2.3 < 2.5 - Multiple Vulnerabilities

E-DB Note: Source http://carnal0wnage.attackresearch.com/2016/08/got-any-rces.html The issues were found originally in nbox 2.3 and confirmed in nbox 2.5 To make things easier, I created a Vagrantfile with provisioning so you can have your own nbox appliance and test my findings or give it a shot...

ntop / nbox 2.3 <= 2.5 - Multiple Vulnerabilities

Exploit for linux platform in category remote exploits E-DB Note: Source http://carnal0wnage.attackresearch.com/2016/08/got-any-rces.html The issues were found originally in nbox 2.3 and confirmed in nbox 2.5 To make things easier, I created a Vagrantfile with provisioning so you can have your ow...

ntop-ng 2.5.160805 - Username Enumeration

ntop-ng 2.5.160805 - Username Enumeration Exploit title: ntopng user enumeration Author: Dolev Farhi Contact: dolevf at protonmail.com Date: 04-08-2016 Vendor homepage: ntop.org Software version: v.2.5.160805 !/usr/env/python import os import sys import urllib import urllib2 import cookielib serv...

CVE-2015-8368

Summary: CVE-2015-8368 affects ntopng (ntop) up to version 2.1.x, where remote authenticated users can escalate privileges by tampering with the login flow. The underlying issue allows changing the login context via the user cookie and the username parameter sent to admin/password_reset.lua, effe...

ntop-ng 2.0.15102 Privilege Escalation

Vulnerability title: ntop-ng = 2.0.151021 - Privilege Escalation Author: Dolev Farhi Contact: dolev at flaresec.com Vulnerable version: 2.0.151021 Fixed version: 2.2 Link: ntop.org Date 27.11.2015 CVE-2015-8368 Product Details: ntopng is the next generation version of the original ntop, a network...

[ MDVSA-2015:216 ] ntop

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:216 http://www.mandriva.com/en/support/security/ Package : ntop Date : April 29, 2015 Affected: Business Server 1.0 Problem Description: Updated ntop package fixes security vulnerability: Lack of filtering i...

Mandriva Linux Security Advisory : ntop (MDVSA-2015:216)

Updated ntop package fixes security vulnerability : Lack of filtering in the title parameter of links to rrdPlugin allowed cross-site-scripting XSS attacks against users of the web interface CVE-2014-4165. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

MGASA-2015-0168 Updated ntop packages fix CVE-2014-4165

Updated ntop package fixes security vulnerability: Lack of filtering in the title parameter of links to rrdPlugin allowed cross-site-scripting XSS attacks against users of the web interface CVE-2014-4165...

Updated ntop packages fix CVE-2014-4165

Updated ntop package fixes security vulnerability: Lack of filtering in the title parameter of links to rrdPlugin allowed cross-site-scripting XSS attacks against users of the web interface CVE-2014-4165...

openSUSE Security Update : ntop (openSUSE-2015-309)

The network monitoring tool ntop was updated to fix one security issue. The following vulnerability was fixed : - Lack of filtering in the title parameter of links to rrdPlugin allowed cross-site-scripting XSS attacks against users of the web interface bsc882971, CVE-2014-4165 %NASLMINLEVEL 70300...