1903 matches found
CVE-2020-15352
An XML external entity XXE vulnerability in Pulse Connect Secure PCS before 9.1R9 and Pulse Policy Secure PPS before 9.1R9 allows remote authenticated admins to conduct server-side request forgery SSRF attacks via a crafted DTD in an XML request...
Server side request forgery (ssrf)
An XML external entity XXE vulnerability in Pulse Connect Secure PCS before 9.1R9 and Pulse Policy Secure PPS before 9.1R9 allows remote authenticated admins to conduct server-side request forgery SSRF attacks via a crafted DTD in an XML request...
Code injection
Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled...
CVE-2020-8956
Summary (CVE-2020-8956): Pulse Secure Desktop Client on Windows (9.0Rx before 9.0R5 and 9.1Rx before 9.1R4; affected root cause) exposes saved passwords when the client’s Save Settings option is enabled. The issue is an information-disclosure vulnerability affecting Windows PDC. Fixed versions in...
CVE-2020-8956
Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled...
CVE-2020-15352
CVE-2020-15352 is an XXE-based SSRF vulnerability in Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS) prior to 9.1R9. The issue arises from an XML External Entity in crafted XML requests that remote authenticated admins can abuse to reach server-side resources. Public sources in the conne...
CVE-2020-15352
An XML external entity XXE vulnerability in Pulse Connect Secure PCS before 9.1R9 and Pulse Policy Secure PPS before 9.1R9 allows remote authenticated admins to conduct server-side request forgery SSRF attacks via a crafted DTD in an XML request...
PT-2020-20052 · Pulse Secure · Pulse Secure Desktop Client
Name of the Vulnerable Software and Affected Versions: Pulse Secure Desktop Client versions prior to 9.1R9 Description: A vulnerability could allow an attacker to perform a Man-in-the-Middle MITM attack if end users are convinced to connect to a malicious server. Recommendations: For versions pri...
PT-2020-14384 · Pulse · Pulse Connect Secure +1
Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure versions prior to 9.1R9 Pulse Policy Secure versions prior to 9.1R9 Description: The issue allows remote authenticated admins to conduct server-side request forgery attacks via a crafted DTD in an XML request. This is due...
Pulse Secure VPN gzip RCE
The Pulse Connect Secure appliance before 9.1R9 suffers from an uncontrolled gzip extraction vulnerability which allows an attacker to overwrite arbitrary files, resulting in Remote Code Execution as root. Admin credentials are required for successful exploitation. Of note, MANY binaries are not ...
Exploit for CVE-2020-8239
pulse-secure-vpn-mitm-research Pulse Secure mitm research...
Continued Threat Actor Exploitation Post Pulse Secure VPN Patching
Summary Note: This Activity Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge ATT&CK® framework. See the ATT &CK for Enterprise framework for all referenced threat actor techniques and mitigations. This Alert provides an update to Cybersecurity and Infrastructure Security...
Bug Parade: NSA Warns on Cresting China-Backed Cyberattacks
Chinese state-sponsored cyberattackers are actively compromising U.S. targets using a raft of known security vulnerabilities – with a Pulse VPN flaw claiming the dubious title of “most-favored bug” for these groups. That’s according to the National Security Agency NSA, which released a “top 25”...
Election Systems Under Attack via Microsoft Zerologon Exploits
U.S. government officials have warned that advanced persistent threat actors APTs are now leveraging Microsoft’s severe privilege-escalation flaw, dubbed “Zerologon,” to target elections support systems. Days after Microsoft sounded the alarm that an Iranian nation-state actor was actively...
Pulse Secure Installer Service Installed (Windows)
Binary data juniperpulseinstallerserviceinstalled.nbin...
Pulse Policy Secure < 9.1R8.2 (SA44588)
According to its self-reported version, the version of Pulse Policy Secure running on the remote host is prior to 9.1R8.2. It is, therefore, affected by the following vulnerabilities: - A vulnerability in the Pulse Connect Secure 9.1R8.2 admin web interface could allow an authenticated attacker t...
Pulse Connect Secure < 9.1R8.2 (SA44588)
According to its self-reported version, the version of Pulse Connect Secure running on the remote host is prior to 9.1R8.2. It is, therefore, affected by multiple vulnerabilities: - A vulnerability in the Pulse Connect Secure 9.1R8.2 admin web interface could allow an authenticated attacker to...
CVE-2020-8256
A vulnerability in the Pulse Connect Secure 9.1R8.2 admin web interface could allow an authenticated attacker to gain arbitrary file reading access through Pulse Collaboration via XML External Entity XXE vulnerability...
CVE-2020-8256
A vulnerability in the Pulse Connect Secure 9.1R8.2 admin web interface could allow an authenticated attacker to gain arbitrary file reading access through Pulse Collaboration via XML External Entity XXE vulnerability...