CVE-2021-37471

Cradlepoint IBR900-600 devices running versions 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH command-line...

CVE-2021-37471

Cradlepoint IBR900-600 devices running versions 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH command-line...

CVE-2021-37471

The CVE-2021-37471 entry concerns Cradlepoint IBR900-600 devices running firmware versions prior to 7.21.10. The vulnerability is caused by a restricted shell escape sequence that can be exploited to concurrently deny availability of the NetCloud Manager console, the local console, and the SSH co...

SUSE-SU-2017:2660-1 Security update for libvirt

This update for libvirt fixes several issues. This security issue was fixed: - bsc1053600: Escape ssh commed line to prevent interpreting malicious hostname as arguments, allowing for command execution These non-security issues were fixed: - bsc1025340: Use xend for nodeGetFreeMemory API -...

F5 Big-IP Web管理界面审计日志HTML注入漏洞

BUGTRAQ ID: 28416 F5 BIG-IP是集成了网络流量管理、应用程序安全管理器、负载均衡等功能的多合一网络设备。 F5 BIG-IP的Web管理界面的审计日志工具存在跨站脚本漏洞。日志项未经HTML编码便直接输出，这允许攻击者创建内嵌了脚本的日志项，如果管理员查看了审计日志就会执行恶意脚本。 一种可能的攻击方式是创建在节点名中嵌入了脚本的节点对象，由于不支持的字符，创建这个节点会失败，但仍会创建审计日志；此外还可以创建特制的URL链接，该链接会生成内嵌有HTTP GET请求的日志项，因此可以远程利用这个漏洞。 F5 BigIP 9.4.3 临时解决方法：...