Cisco Firepower System Software Detection Engine Denial of Service Vulnerability

A vulnerability in the Server Message Block Version 2 SMBv2 and Version 3 SMBv3 protocol implementation for the Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause the device to run low on system memory, possibly preventing the device from forwarding traffic. ...

@7ninjas/scss-mixins (>=0.0.0, <=1.0.0-alpha3), @afiniti/design-system (>=0.0.1, <=0.0.8) +557 more potentially affected by CVE-2018-14042 via bootstrap (>=4.0.0, <=4.1.1)

bootstrap NPM version =4.0.0, =0.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =2.0.0-alpha.1, =0.0.1-1.alpha, =0.0.1, =1.1.0, =0.1.0, =1.0.0, =0.3.0, =1.0.0, =2.0.0, =1.0.0, =1.0.31 and more Source cves: CVE-2018-14042 Source advisory: OSV:GHSA-7MVR-5X2G-WFC8...

@bahmutov/add-typescript-to-cypress (>=1.0.2, <=1.1.1), @betit/orion (>=1.0.0-beta.1, <=1.0.0-beta.6) +178 more potentially affected by CVE-2017-16137 via debug (>=3.0.0, <=3.0.1)

debug NPM version =3.0.0, =1.0.2, =1.0.0-beta.1, =1.0.0-beta.6, =2.0.1-SNAPSHOT.88, =0.0.4, =0.0.12, =1.0.1, =1.0.0, =1.0.0, =0.1.5, =2.8.0, =1.0.71, =1.0.10-14, =1.1.16 and more Source cves: CVE-2017-16137 Source advisory: OSV:GHSA-GXPJ-CX7G-858C...

@partygame.show/demo (>=1.0.0-alpha.0, <=1.0.0-alpha.5), ember-superstatic (>=0.6.0, <=1.0.0) potentially affected by unknown CVE via superstatic (5.0.1)

superstatic NPM version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on superstatic and may be impacted: - @partygame.show/demo =1.0.0-alpha.0, =0.6.0, =1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-WM77-Q74P-5763...

acidjs (>=0.0.2, <=1.0.1), acl-knex (>=0.1.2, <=0.1.3) +41 more potentially affected by CVE-2017-16082 via pg (>=3.0.3, <=3.6.3)

pg NPM version =3.0.3, =0.0.2, =0.1.2, =0.0.1, =0.0.2, =0.1.0, =0.0.4, =0.3.0, =0.0.11, =0.0.12, =0.1.2, =0.0.2, =0.0.1, =0.0.64 and more Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

Linux 2.6.30 < 2.6.36-rc8 - Reliable Datagram Sockets (RDS) Privilege Escalation Exploit

Exploit for linux platform in category local exploits This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Reliable Datagram Sockets RDS Privilege Escalation', 'Description' = %q This module exploit...

VideoFlow Digital Video Protection DVP 10 Authenticated Directory Traversal

Summary VideoFlow's Digital Video Protection DVP product is used by leading companies worldwide to boost the reliability of IP networks, including the public Internet, for professional live broadcast. DVP enables broadcast companies to confidently contribute and distribute live video over IP with...

QQQ SYSTEMS vulnerable to cross-site scripting

Overview QQQ SYSTEMS provided by Gundam Cult QQQ is a CGI script to create quiz pages. QQQ SYSTEMS contains a stored cross-site scripting vulnerability CWE-79. When an administrative user of the software accesses a malicious page created by an attacker, an arbitrary script may be executed. Note...

Cisco NX-OS System Software Image Signature Bypass Vulnerability

A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a software image. The vulnerability is due to insufficient NX-OS signature verification for software images. An authenticated, local attacker could exploit thi...

REDDOXX Appliance Undocumented Administrative Service Account Vulnerability

Exploit for jsp platform in category web applications Undocumented Administrative Service Account in REDDOXX Appliance RedTeam Pentesting discovered an undocumented service account in the REDDOXX appliance software, which allows attackers to access the administrative interface of the appliance an...

WiMAX CPE Authentication Bypass

We have published an accompanying blog post to this technical advisory with further information: http://blog.sec-consult.com/2017/06/ghosts-from-past-authentication-bypass.html SEC Consult Vulnerability Lab Security Advisory =======================================================================...

PT-2018-15: Arbitrary Code Execution in Schneider Electric's Modicon Quantum

The specialists of the Positive Research center have detected an Arbitrary Code Execution vulnerability in Schneider Electric's Modicon Quantum. A vulnerability allows attackers to execute arbitrary code, cause a denial of service, or load a malicious firmware via an FTP command used to upgrade t...

PT-2018-21: Buffer Overflow in Schneider Electric's Modicon Premium, Modicon Quantum, and Modicon M340

The specialists of the Positive Research center have detected a Buffer Overflow vulnerability in Schneider Electric's Modicon Premium, Modicon Quantum, and Modicon M340. A vulnerability in the web services to process SOAP requests allows attackers to trigger a buffer overflow. How to fix Use the...

PT-2018-40: Stored XSS in SAP NetWeaver Development Infrastructure Cockpit

The specialists of the Positive Research center have detected a Stored XSS vulnerability in SAP NetWeaver Development Infrastructure Cockpit. A stored cross-site scripting XSS vulnerability in the '/nwdicockpit/srv/data/userprefs' component in SAP NetWeaver Development Infrastructure Cockpit allo...

Cisco Unified Communications Manager IM and Presence Service Information Disclosure Vulnerability

A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote attacker to view information on web pages that should be restricted. The vulnerability is due to a lack of proper input validation performed o...

Debian DLA-724-1 : mcabber security update

It was discovered that there was a 'roster push attack' 0 in mcabber, a console-based Jabber XMPP client. For Debian 7 'Wheezy', this issue has been fixed in mcabber version 0.10.1-3+deb7u1. We recommend that you upgrade your mcabber packages. 0...

Intel Management And Security LMS.exe 7.1.13.1088 Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/INTEL-LOCAL-MGTM-SERVICE-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Vendor: ============= www.intel.com Product: =========== Intel Management and Security Application Local...

PT-2016-23: Cross-Site Scripting in SAP NetWeaver

The specialists of the Positive Research center have detected a Cross-Site Scripting vulnerability in SAP NetWeaver. Reflected cross-site scripting in the "/com.sapportals.navigation.testComponent.NavigationRequestSniffer" component allows remote attackers to inject arbitrary HTML tags including...

Cisco Unified Computing System Central Cross-Site Scripting Vulnerability

A vulnerability in the HTTP web-based management interface of Cisco Unified Computing System UCS Central Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected system. The vulnerability is due to...

Ipswitch MOVEit Mobile 1.2.0.962 Cross Site Scripting

Profundis Labs - Security Advisory Vulnerablity Title ================== Missing input validation vulnerability Reflected XSS Vendor: ======= Ipswitch, Inc http://www.ipswitchft.com Product: ======== MOVEit File Transfer MOVEit is an automated file transfer system that lets you manage, view,...