234 matches found
BounceBack - Stealth Redirector For Your Red Team Operation Security
BounceBack is a powerful, highly customizable and configurable reverse proxy with WAF functionality for hiding your C2/phishing/etc infrastructure from blue teams, sandboxes, scanners, etc. It uses real-time traffic analysis through various filters and their combinations to hide your tools from...
Number withdrawn
Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool fetches data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. This CVE number has been withdrawn...
TrafficWatch - TrafficWatch, A Packet Sniffer Tool, Allows You To Monitor And Analyze Network Traffic From PCAP Files
TrafficWatch, a packet sniffer tool, allows you to monitor and analyze network traffic from PCAP files. It provides insights into various network protocols and can help with network troubleshooting, security analysis, and more. Protocol-specific packet analysis for ARP, ICMP, TCP, UDP, DNS, DHCP,...
CVE-2023-32649
A Denial of Service Dos vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the Asset Intelligence functionality of our IDS, allows an unauthenticated attacker to crash the IDS module by sending specially crafted malformed network packets...
Input validation
A Denial of Service Dos vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the Asset Intelligence functionality of our IDS, allows an unauthenticated attacker to crash the IDS module by sending specially crafted malformed network packets...
ROS-20230620-04
The vulnerability of the traffic analysis program Wireshark is related to the failure to properly control the consumption of internal resources in the LISP dissector. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause resource exhaustion and perform a...
CVE-2022-2741 can: denial-of-service can be triggered by a crafted CAN frame
The denial-of-service can be triggered by transmitting a carefully crafted CAN frame on the same CAN network as the vulnerable node. The frame must have a CAN ID matching an installed filter in the vulnerable node this can easily be guessed based on CAN traffic analyses. The frame must contain th...
PT-2022-37672 · Palo Alto Networks · Cortex Xdr Agent
Уязвимость средства анализа сетевого трафика, сетевого обнаружения и реагирования Cortex XDR Agent связана с недостатками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный доступ к защищаемой информации...
Cisco Secure Network Analytics Remote Code Execution Vulnerability
Cisco Secure Network Analytics is one of the most comprehensive visibility and network traffic analysis Nta/network detection and response Ndr solutions from Cisco. Cisco Secure Network Analytics is vulnerable to a remote code execution vulnerability that could be exploited by an attacker to...
How Traffic Analysis Boosts Ecommerce Profits
By Owais Sultan Attracting traffic is critical to the health of every ecommerce business. However, large traffic numbers dont necessarily result… This is a post from HackRead.com Read the original post: How Traffic Analysis Boosts Ecommerce Profits...
BruteShark - Network Analysis Tool
BruteShark is a Network Forensic Analysis Tool NFAT that performs deep processing and inspection of network traffic mainly PCAP files, but it also capable of directly live capturing from a network interface. It includes: password extracting, building a network map, reconstruct TCP sessions, extra...
Espionage - A Network Packet And Traffic Interceptor For Linux. Spoof ARP And Wiretap A Network
Espionage is a network packet sniffer that intercepts large amounts of data being passed through an interface. The tool allows users to to run normal and verbose traffic analysis that shows a live feed of traffic, revealing packet direction, protocols, flags, etc. Espionage can also spoof ARP so,...
wireshark Uncontrolled Recursion DoS
The vulnerability of the wireshark traffic analysis program is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
Wireshark Bluetooth DHT DoS
The vulnerability of the Bluetooth DHT traffic analyzer service in Wireshark is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures by injecting specially created packets...
tcpdump Heap Buffer Overflow Info Disclosure
The vulnerability of the printprefix function in software for analyzing network traffic using tcpdump relates to reading data from within allowable buffer limits. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...
Web Censorship Systems Can Facilitate Massive DDoS Attacks
Researchers are warning internet censorship systems are ripe for abuse by a new type of distributed denial of service DDoS attack. The potential for abuse is concerning, researchers say, because attacks would take advantage of a type of reflection and amplification, which would be “extremely...
FortiSandbox Traffic Analysis Module Code Execution
The vulnerability of the traffic analysis module of the FortiSandbox system exists because measures are not taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or commands remotely...
[Whitepaper] XDR vs. NDR/NTA – What do Organizations Truly Need to Stay Safe?
Security teams whose organizations are outside the Fortune 500 are faced with a dilemma. Most teams will have to choose between deploying either a network traffic analysis NTA or network detection and response NDR tool or an endpoint detection and response EDR tool to supplement their existing...
Plixer Scrutinizer SQL Injection Vulnerability
Plixer Scrutinizer is a network traffic analysis system that collects, analyzes, visualizes, and reports data from every network conversation and digital transaction to provide security and network intelligence. A SQL injection vulnerability exists in Plixer Scrutinizer version 19.0.2. An attacke...