Code injection

Cisco ONS 15454 System Software 10.30 and 10.301 allows remote attackers to cause a denial of service tNetTask CPU consumption or card reset via a flood of 1 IP or 2 Ethernet traffic, aka Bug ID CSCus57263...

CVE-2015-0765

Cisco ONS 15454 System Software 10.30 and 10.301 are affected by CVE-2015-0765, a DoS vulnerability where remote attackers can exhaust tNetTask CPU and reset the controller card by sending large IP or Ethernet traffic (Bug ID CSCus57263). The issue allows unauthenticated remote access to trigger ...

Cisco ONS 15454 System Software Denial of Service Vulnerability

A vulnerability in Cisco ONS 15454 System Software could allow an unauthenticated, remote attacker to cause the controller card on an affected device to reset, resulting in a denial of service DoS condition. The vulnerability occurs because tNetTask CPU time is consumed when the software processe...

Multiple iThemes plugins, themes and add-ons - XSS via add_query_arg() and remove_query_arg()

...

OWASP ZAP 2.4.0 - Penetration Testing Tool for Testing Web Applications

ZAP is an OWASP Flagship project, and is currently the most active open source web application security tool. For a quick introduction to the new release see this video: Some of the most significant changes include: ‘Attack’ Mode A new ‘attack’ mode has been added that means that applications tha...

Updated wesnoth packages fix CVE-2015-0844

Updated wesnoth packages fix security vulnerability A severe security vulnerability in Battle of Wesnoth's game client was found which could allow a malicious user to obtain personal files and information from other players in networked multiplayer games using the built-in WML/Lua API on any...

Mozilla to Enforce Signing for Firefox Extensions Soon

In an effort to head off the problem of malicious or misbehaving browser add-ons, Mozilla is planning to require developers to have their Firefox extensions signed by the company in the near future. As much of users’ computing has moved into their browsers in the last few years, extensions and...

socialengine 4.2.2 - Multiple Vulnerabilities

No description provided by source. Social Engine 4.2.2 Multiples Vulnerabilities Earlier versions are also possibly vulnerable. INFORMATION Product: Social Engine 4.2.2 Remote-Exploit: yes Vendor-URL: http://www.socialengine.net/ Discovered by: Tiago Natel de Moura aka i4k Discovered at: 10/04/20...

Cisco ONS 15400 Series Devices Multiple Vulnerabilities in OpenSSL

The remote Cisco ONS device is running a software version known to be affected by multiple OpenSSL related vulnerabilities : - An error exists related to the implementation of the Elliptic Curve Digital Signature Algorithm ECDSA that could allow nonce disclosure via the 'FLUSH+RELOAD' cache...

OWASP ZAP v2.3.0 - An easy to use integrated penetration testing tool for finding vulnerabilities in web applications

OWASP Zed Attack Proxy ZAP An easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing...

CVE-2014-2140

Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service card reset via a TCP FIN attack that triggers file-descriptor exhaustion and a failure to open a CAL pipe, aka Bug ID CSCug97348...

CVE-2014-2139

Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service flash write outage via a TCP FIN attack that triggers file-descriptor exhaustion, aka Bug ID CSCug97315...

CVE-2014-2142

Cisco ONS 15454 controller cards with software 10.0 and earlier allow remote attackers to cause a denial of service card reload via a crafted HTTP URI, aka Bug ID CSCun06870...

Privilege escalation

Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service card reset via a TCP FIN attack that triggers file-descriptor exhaustion and a failure to open a CAL pipe, aka Bug ID CSCug97348...

Code injection

Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service flash write outage via a TCP FIN attack that triggers file-descriptor exhaustion, aka Bug ID CSCug97315...

Code injection

Cisco ONS 15454 controller cards with software 10.0 and earlier allow remote attackers to cause a denial of service card reload via a crafted HTTP URI, aka Bug ID CSCun06870...

CVE-2014-2142

CVE-2014-2142 affects Cisco ONS 15454 Controller Cards; the vulnerability stems from incorrect parsing of the HTTP URI in the web interface, allowing an unauthenticated remote attacker to trigger a card reload and cause a DoS. Affected software: Cisco ONS 15454 controller cards with software vers...

CVE-2014-2140

Cisco ONS 15454 Controller Cards (software 9.6 and earlier) are affected by CVE-2014-2140. A remote attacker can trigger a FIN attack that exhausts file descriptors, preventing opening a CAL pipe and causing a card reset (DoS) per Bug CSCug97348. Cisco advisory Cisco-SA-20140408-CVE-2014-2140 not...

CVE-2014-2140

Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service card reset via a TCP FIN attack that triggers file-descriptor exhaustion and a failure to open a CAL pipe, aka Bug ID CSCug97348...

CVE-2014-2142

Cisco ONS 15454 controller cards with software 10.0 and earlier allow remote attackers to cause a denial of service card reload via a crafted HTTP URI, aka Bug ID CSCun06870...