Remote Command Injection Vulnerability in Riptide Networks NBR1300G-E&RG-EG2000CE-1T

Riptide Networks NBR1300G-E is a new generation gateway product. Riptide Networks RG-EG2000CE-1T is an SSL VPN device. A remote command injection vulnerability exists in Riptide Networks NBR1300G-E & RG-EG2000CE-1T. An attacker can send malicious code to realize remote command injection before...

DEBIAN-CVE-2018-1000135

GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure CWE-200 vulnerability in DNS resolver that can result in Private DNS queries leaked to local network's DNS servers, while on VPN. This vulnerability appears to have been fixed in Some Ubuntu 16.04 packages were fixed,...

Hola Insecure Service Privilege Vulnerability

Hola is a VPN software that supports anonymous web browsing. A security vulnerability exists in Hola version 1.79.859. An attacker can exploit this vulnerability to alter or overwrite executable files with arbitrary code to elevate privileges...

CVE-2017-17153

IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE,...

GHSA-HXHJ-HP9M-QWC4 private_address_check vulnerable to bypass of Resolv.getaddresses method

The privateaddresscheck ruby gem before 0.4.0 is vulnerable to a bypass due to use of Ruby's Resolv.getaddresses method, which is OS-dependent and should not be relied upon for security measures, such as when used to blacklist private network addresses to prevent server-side request forgery...

private_address_check vulnerable to bypass of Resolv.getaddresses method

The privateaddresscheck ruby gem before 0.4.0 is vulnerable to a bypass due to use of Ruby's Resolv.getaddresses method, which is OS-dependent and should not be relied upon for security measures, such as when used to blacklist private network addresses to prevent server-side request forgery...

CVE-2017-0904

The privateaddresscheck ruby gem before 0.4.0 is vulnerable to a bypass due to use of Ruby's Resolv.getaddresses method, which is OS-dependent and should not be relied upon for security measures, such as when used to blacklist private network addresses to prevent server-side request forgery...

Cisco IOS XE Software Ethernet Virtual Private Network Denial of Service Vulnerability

Cisco IOS XE Software is a set of operating systems developed by Cisco for its network devices.Ethernet Virtual Private Network EVPN is one of the Ethernet virtual private network systems.Border Gateway Protocol BGP is one of the border gateway protocols. Border Gateway Protocol BGP is one of the...

Cisco Adaptive Security Appliance Cross-Site Scripting Vulnerability (CNVD-2017-32491)

Cisco Adaptive Security Appliances ASA, Adaptive Security Appliances Software is a set of operating systems running in firewalls from the U.S. company Cisco Cisco. A security vulnerability exists in the Web-based management interface of Cisco ASA Software, which stems from the program's failure t...

Cisco IOS Software for Cisco Catalyst 6800 Series Switches Denial of Service Vulnerability

Cisco Catalyst 6800 Series Switches is a switch device from Cisco USA.IOS is one of the operating systems used for network devices. A denial of service vulnerability exists in the Virtual Private LAN Service VPLS code in the IOS in Cisco Catalyst 6800 Series Switches. An attacker could exploit th...

Private Internet Access – Get a Secure VPN to Protect Your Online Privacy

Since most of us rely upon the Internet for day-to-day activities today, hacking and spying have become a prime concern, and so have online security and privacy. The Internet has become a digital universe with websites collecting your sensitive information and selling them to advertisers, hackers...

Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers Information Disclosure Vulnerability

The Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers are VPN firewall router products from Cisco. An information disclosure vulnerability exists in the web interface in the Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers, which arises from the program's failure to adequatel...

Juniper SSG Series device ScreenOS cross-site scripting vulnerability (CNVD-2017-23957)

The Juniper SSG Series is a family of firewall appliances from Juniper Networks.ScreenOS is one of the operating systems. A cross-site scripting vulnerability exists in Firewall+VPN in ScreenOS on Juniper SSG Series devices. A remote attacker can exploit this vulnerability to inject HTML/JavaScri...

[SECURITY] [DSA 3900-1] openvpn security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3900-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 27, 2017 https://www.debian.org/security/faq -...

May 16, 2017—KB4019217 (Preview of Monthly Rollup)

None None...

OpenVPN Private Tunnel Local Buffer Overflow Vulnerability

OpenVPN is a software package for creating virtual private network VPN encrypted tunnels from the American company OpenVPN.OpenVPN PrivateTunnel is an OpenVPN service. A local buffer overflow vulnerability exists in OpenVPN Private Tunnel version 2.7/2.8. An attacker could exploit this...

DokuWiki SSRF Security Bypass Vulnerability（CVE-2016-7964 ）

I found a ssrf vulnerability in dokuwiki. The sendRequest method in HTTPClient ClassIn file: /inc/HTTPClient.php has no restrict to access private network, such as, 10.0.0.1/8, 172.16.0.0/12, 192.168.0.0/16. This allows user to scan port of internal network. For example, 1. edit any page in...

DEBIAN-CVE-2016-6329

OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a "Sweet32" attack...

CVE-2016-1920

Samsung KNOX 1.0.0 uses the shared certificate on Android, which allows local users to conduct man-in-the-middle attacks as demonstrated by installing a certificate and running a VPN service...

Command Execution Vulnerability in Rico Virtual VPN Gateway

Virtual VPN Gateway is a virtual gateway device from Rico Electronic Technology Co. Ruike Virtual VPN Gateway suffers from a command execution vulnerability, which can be exploited by attackers to execute arbitrary command commands or disclose sensitive information...