Veeam Plug-In for AWS Private Network Deployment Automation

Purpose This article provides information about Veeam Plug-In for AWS support for private deployment mode. It will explain how to use the attached script to configure network settings for buckets used as repositories and workers used for backups. To learn more about implementing Private Deploymen...

CVE-2023-6764

A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50W series firmware versions from 4.16 through 5.37 Patch 1, and USG20W-VPN series...

CVE-2023-6399

A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50W series firmware versions from 4.16 through 5.37 Patch 1, USG20W-VPN series firmware versions from 4.16 through 5.37...

Zyxel ATP Formatting String Error Vulnerability

Zyxel ATP is a firewall from China-based Zyxel. A formatting string error vulnerability exists in Zyxel ATP firmware versions 4.32 through 5.37 Patch 1, which originates from allowing authenticated IPSec VPN users to cause a denial of service to the deviceid daemon by sending a crafted hostname t...

CISA and MS-ISAC Release Advisory on Compromised Account Used to Access State Government Organization

Today, CISA and the Multi-State Information Sharing & Analysis Center MS-ISAC released a joint Cybersecurity Advisory CSA, Threat Actor Leverages Compromised Account of Former Employee to Access State Government Organization to provide network defenders with the tactics, techniques, and procedure...

Cisco Firepower Threat Defense VPN Session Unauthorized

The vulnerability of the VPN function in Cisco Firepower Threat Defense and Cisco Adaptive Security Appliance software relates to bypassing authentication procedures by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to establish an SSL VPN session wit...

PT-2024-1667 · Tp Link · Tp-Link Er7206 Omada Gigabit Vpn Router

Name of the Vulnerable Software and Affected Versions: Tp-Link ER7206 Omada Gigabit VPN Router version 1.3.0 build 20230322 Rel.70591 Description: A post authentication command injection issue exists when setting up the PPTP global configuration. This can be triggered by a specially crafted HTTP...

TP-LINK ER7206: Operating System Command Injection Vulnerability

The TP-LINK ER7206 is a multi-function Gigabit router from China P&L TP-LINK. The TP-LINK ER7206 wireguard VPN configuration suffers from an input validation vulnerability that can be exploited by a remote attacker to submit a special request that can be used in an application context to execute...

Server Side Request Forgery (SSRF)

zmarkdown is vulnerable to Server Side Request Forgery SSRF. The vulnerability is due to improper filtering of URLs to determine if the URL is within a private network, which attacker to download private images on the local network...

GHSA-MF74-QQ7W-6J7V Zmarkdown Server-Side Request Forgery (SSRF) in remark-download-images

Impact A major blind SSRF has been found in remark-images-download, which allowed for requests to be made to neighboring servers on local IP ranges. The issue came from a loose filtering of URLs inside the module. Imagine a server running on a private network 192.168.1.0/24. A private service...

Zmarkdown Server-Side Request Forgery (SSRF) in remark-download-images

Impact A major blind SSRF has been found in remark-images-download, which allowed for requests to be made to neighboring servers on local IP ranges. The issue came from a loose filtering of URLs inside the module. Imagine a server running on a private network 192.168.1.0/24. A private service...

iTop VPN Security Breach

iTop VPN is a VPN software from iTop. Allows users to remain anonymous and secure with advanced Salsa20 chacha20 256-bit encryption. A security vulnerability exists in iTop VPN version 4.0.0.1 and earlier, which originates in ITopVpnCallbackProcess.sys in the component IOCTL Handler and can lead ...

Information Disclosure

truelayer.client is vulnerable to Information Disclosure. The vulnerability is due to insufficient ID validation when building URLs or making HTTP requests, which allows an attacker to inject a valid URL into the ID parameter, resulting in information disclosure by requesting a resource on the...

PT-2024-15283 · Undefined · Undefined

🚨 ZeroDay Alert in Ivanti VPN! CVE-2023-846805 & CVE-2024-21887 let attackers bypass 2FA & run code. 🛡️ Volexity links this to UTA0178, a suspected state-level actor. Urgent patching needed! 💻🔐 CyberSecurity IvantiVPN InfoSec...

CVE-2023-47267

An issue discovered in TheGreenBow Windows Enterprise Certified VPN Client 6.52, Windows Standard VPN Client 6.87, and Windows Enterprise VPN Client 6.87 allows attackers to gain escalated privileges via crafted changes to memory mapped file...

TheGreenBow Windows Certified VPN Client Security Vulnerability

TheGreenBow Windows Certified VPN Client is a client VPN from TheGreenBow. TheGreenBow Windows Certified VPN Client suffers from a security vulnerability that stems from an attacker's ability to cause elevation of privilege via a carefully crafted memory-mapped file...

zyxel USG FLEX Account Print CGI Command Execution

The vulnerability of the accountprint.cgi component in the Zyxel USG FLEX and VPN network devices is related to an incorrect limitation on the path name to the tmp directory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2023-32452 · Sonicwall · Sma100 Ssl-Vpn

Name of the Vulnerable Software and Affected Versions: SMA100 SSL-VPN virtual office portal affected versions not specified Description: The issue is related to improper authentication in the SMA100 SSL-VPN virtual office portal. This allows a remote authenticated attacker to create an identical...

PT-2023-8709 · Zyxel · Zyxel Usg Flex Series +3

Name of the Vulnerable Software and Affected Versions: Zyxel ATP series versions 4.32 through 5.37 Patch 1 Zyxel USG FLEX series versions 4.50 through 5.37 Patch 1 Zyxel USG FLEX 50W series versions 4.16 through 5.37 Patch 1 Zyxel USG20W-VPN series versions 4.16 through 5.37 Patch 1 Zyxel USG FLE...

What is SSL VPN?

Deciphering SSL VPN: An In-depth Perspective Pivoting our lens towards data in this digital era, akin to the transition observed during the oil boom, we've realized that the fodder for importance today is safeguarding data while it voyages through global networks. SSL VPN Secure Sockets Layer...