SIEMENS SIPROTEC 4 and SIPROTEC Compact Relay Families Denial of Service Vulnerability

SIEMENS SIPROTEC 4 and SIPROTEC Compact Relay Families are offering integrated protection, control, measurement and automation functions for substations and other applications. A denial of service vulnerability exists in SIEMENS SIPROTEC 4 and SIPROTEC Compact Relay Families. An attacker can...

Huawei EulerOS: Security Advisory for dnsmasq (EulerOS-SA-2019-1423)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-1609

When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv6 packets who may then arbitrarily execute commands as root on the target device. This...

CVE-2020-1605

When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv4 packets who may then arbitrarily execute commands as root on the target device. This...

CVE-2020-1602

When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv4 packets who may remotely take over the code execution of the JDHDCP process. This iss...

Design/Logic Flaw

When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv4 packets who may then arbitrarily execute commands as root on the target device. This...

CVE-2020-1609 Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv6 packets and arbitrarily execute commands on the target device.

When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv6 packets who may then arbitrarily execute commands as root on the target device. This...

CVE-2020-1605 Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets and arbitrarily execute commands on the target device.

When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv4 packets who may then arbitrarily execute commands as root on the target device. This...

CVE-2020-1605

CVE-2020-1605 affects Juniper Networks JDHCPD (relay mode) in Junos OS/Junos OS Evolved. A crafted IPv4 packet can cause arbitrary root command execution on the target via the JDHCPD process handling. Affected are IPv4 JDHCPD services; vulnerable versions include multiple releases listed (e.g., J...

Denial of Service Vulnerability in PCS-996RF Series Fault Recording Device of Nanjing Nanrui Relay Electric Co.

PCS-996RF series of fault recording device of Nanjing Nanrui Relay Electric Co., Ltd. is a new set of fault recording system developed on the basis of network analysis platform. A denial of service vulnerability exists in the PCS-996RF Series Fault Recording Device of Nanjing Nanrui Relay Electri...

openSUSE Security Update : shadowsocks-libev (openSUSE-2019-2667)

This update for shadowsocks-libev fixes the following issues : - Update version to 3.3.3 - Refine the handling of suspicious connections. - Fix exploitable denial-of-service vulnerability exists in the UDPRelay functionality boo1158251, CVE-2019-5163 - Fix code execution vulnerability in the...

ZNC code issue vulnerability (CNVD-2020-46827)

ZNC is a set of IRC proxies that allow users to log in to IRC servers from their workstations. A code issue vulnerability exists in versions of ZNC prior to 0.092, which can be exploited by remote attackers to cause an application to crash...

Shadowsocks-libev Access Control Error Vulnerability

Shadowsocks-libev is a lightweight secure SOCKS5 agent for embedded devices. An Access Control Error vulnerability exists in the UDPRelay feature in Shadowsocks-libev version 3.3.2. The vulnerability stems from a network system or product not properly restricting access to resources from...

UBUNTU-CVE-2019-19462

relayopen in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service such as relay blockage by triggering a NULL allocpercpu result...

The vulnerability of the “ARM Relayer” and “Configurator” software components of the EKRASMS-SP suite of programs, related to the loading of a non-existent dynamic library, allows a violator to execute arbitrary code.

The vulnerability of the “ARM Relay Operator” and “Configurator” software components of the EKRASMS-SP suite lies in the loading of a nonexistent dynamic library. Exploiting this vulnerability allows an attacker to execute arbitrary code using the specially crafted dynamic library...

Cisco Ios Improper Input Validation

A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability exists because the affected...

SMTPTester - Tool To Check Common Vulnerabilities In SMTP Servers

SMTPTester is a python3 tool to test SMTP server for 3 common vulnerabilities: Spoofing - The ability to send a mail on behalf of an internal user Relay - Using this SMTP server to send email to other address outside of the organization user enumeration - using the SMTP VRFY command to check if...

Microsoft Exchange – Mailbox Post Compromise

Gaining access to the mailbox of a domain user give the opportunity for a list of activities that could potentially expand the access of the red team. The trust relationships of the compromised user can be utilised to perform a more efficient Phishing or NTLM relay attack in order to gain access ...

Microsoft Exchange – NTLM Relay

Gaining access to the mailbox of a user during a penetration test or a red team engagement can lead to arbitrary code execution, discovery of sensitive data such as credentials or performing internal Phishing to expand access across the network. Typically access to the mailbox is achieved via...

CentOS 7 : dhcp (CESA-2019:2060)

An update for dhcp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...