Internet Storm Center
Sign In
Sign Up
SANS Network Security: Las Vegas Sept 4-9.
Handler on Duty:
Xavier Mertens
Threat Level:
green
Date
Author
Title
CISCO SECURE DESKTOP REMOTE XSS
2010-02-02
Guy Bruneau
Cisco Secure Desktop Remote XSS Vulnerability
CISCO
2021-06-15/a>
Johannes Ullrich
Multi Perimeter Device Exploit Mirai Version Hunting For Sonicwall, DLink, Cisco and more
2021-01-18/a>
Rob VandenBrink
The CIS Benchmark for Cisco Nexus (NX-OS) 1.0 went live last week, find it here: https://www.cisecurity.org/cis-benchmarks/
2021-01-07/a>
Rob VandenBrink
Directly related to today's main story on CPE/CVEs - Code Exec in Cisco Jabber, all platforms https://nvd.nist.gov/vuln/detail/CVE-2020-26085
2020-10-21/a>
Daniel Wesemann
20 new Cisco security advisories for ASA and Firepower with CVSS>7: https://tools.cisco.com/security/center/publicationListing.x
2020-08-18/a>
Rick Wanner
ISC Blocked
2020-05-19/a>
Rick Wanner
Cisco Advisories for FTD, ASA, Firepower 1000
2018-10-18/a>
Russ McRee
Cisco Security Advisories 17 OCT 2018
2018-10-10/a>
Xavier Mertens
"OG" Tools Remain Valuable
2018-01-30/a>
Kevin Liston
Cisco ASA WebVPN Vulnerability
2017-10-20/a>
Rick Wanner
Cisco fixes for KRACKs not complete
2017-03-18/a>
Rick Wanner
Cisco IOS Remote Code Execution Vulnerability -> https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp
2017-02-03/a>
Lorna Hutcheson
Cisco - Issue with Clock Signal Component
2017-01-24/a>
Johannes Ullrich
Critical Vulnerability in Cisco WebEx Chrome Plugin
2016-10-22/a>
Guy Bruneau
Request for Packets TCP 4786 - CVE-2016-6385
2016-08-31/a>
Deborah Hale
Cisco Security Advisories Issued
2016-08-21/a>
Rick Wanner
Cisco ASA SNMP Remote Code Execution Vulnerability
2015-11-01/a>
Guy Bruneau
Cisco Products Affected by Multiple Vulnerabilities in ntpd - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp
2015-07-31/a>
Russ McRee
Cisco Security Advisory: Cisco ASR 1000 (Aggregation Services Routers) Fragmented Packet DOS Vuln: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150730-asr1k
2015-06-26/a>
Daniel Wesemann
Cisco default credentials - again!
2015-04-03/a>
Didier Stevens
SSH Fingerprints Are Important
2015-02-13/a>
Johannes Ullrich
Microsoft February Patch Failures Continue: KB3023607 vs. Cisco AnyConnect Client
2014-07-17/a>
Russ McRee
Cisco Wireless Residential Gateway Remote Code Execution Vulnerability - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/ciscosa-20140716-cm
2014-07-02/a>
Johannes Ullrich
Cisco Unified Communications Domain Manager Update
2014-05-23/a>
Richard Porter
Highlights from Cisco Live 2014 - The Internet of Everything
2014-04-11/a>
Guy Bruneau
Heartbleed Fix Available for Download for Cisco Products
2014-03-26/a>
Johannes Ullrich
Cisco Semiannual IOS Security Advisory http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_mar14.html
2014-03-21/a>
Johannes Ullrich
Cisco AsyncOS Patch
2014-02-27/a>
Richard Porter
Cisco Prime Infrastructure Command Execution Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140226-pi
2014-02-22/a>
Tony Carothers
Cisco UCS Director Vulnerability and Update
2014-02-19/a>
Russ McRee
Seven Cisco Security Advisories now available: http://tools.cisco.com/security/center/publicationListing.x
2014-01-25/a>
Guy Bruneau
Finding in Cisco's Annual Security Report
2014-01-10/a>
Basil Alawi S.Taher
Cisco Small Business Devices backdoor fix
2014-01-01/a>
Russ McRee
Six degrees of celebration: Juniper, ANT, Shodan, Maltego, Cisco, and Tails
2013-09-18/a>
Rob VandenBrink
Cisco DCNM Update Released
2013-08-02/a>
Chris Mohan
Cisco Security Advisory: OSPF LSA Manipulation Vulnerability in Multiple Cisco Products http://tools.cisco.com/security/center/viewAlert.x?alertId=30210
2013-06-26/a>
Adrien de Beaupre
Multiple Cisco security advisories
2013-03-27/a>
Rob VandenBrink
Several Cisco IOS DOS Issues Resolved
2013-03-18/a>
Kevin Shortt
Cisco IOS Type 4 Password Issue: http://tools.cisco.com/security/center/content/CiscoSecurityResponse/cisco-sr-20130318-type4
2013-01-15/a>
Russ McRee
Cisco introducing Cisco Security Notices 16 JAN 2013
2013-01-09/a>
Rob VandenBrink
Security Update - Cisco Prime LMS (cisco-sa-20130109-lms - remote execution as root vulnerability) - advisory at: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130109-lms
2013-01-09/a>
Rob VandenBrink
Security Update - Cisco 7900 Phones - cisco-sa-20130109-uipphone privilege escallation issue - advisory at: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130109-uipphone
2012-09-27/a>
Kevin Shortt
Cisco IOS Security Advisory Bundle - http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep12.html
2012-09-20/a>
Russ McRee
Apple and Cisco Security Advisories 19 SEP 2012
2012-08-15/a>
Guy Bruneau
Cisco IOS XR Software Route Processor DoS Vulnerability - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120530-iosxr
2012-06-21/a>
Russ McRee
Cisco Security Advisories 20 JUN 2012
2012-02-29/a>
Russ McRee
Cisco Security Advisories - 29FEB2011
2012-02-24/a>
Guy Bruneau
Cisco Small Business SRP 500 Series Multiple Vulnerabilities - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120223-srp500
2012-01-27/a>
Mark Hofman
CISCO Ironport C & M Series telnet vulnerability
2011-10-05/a>
Jim Clausing
Cisco Advisories - FWSM, ASA, and NAC
2011-08-30/a>
Scott Fendley
Cisco Security Advisory - Apache HTTPd DoS
2011-08-03/a>
Johannes Ullrich
Cisco shipping malicious warranty CD
2011-06-28/a>
Johannes Ullrich
Deja-Vu: Cisco VPN Windows Client Privilege Escalation
2011-06-01/a>
Adrien de Beaupre
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified IP Phones 7900 Series - http://www.cisco.com/warp/public/707/cisco-sa-20110601-phone.shtml
2011-06-01/a>
Adrien de Beaupre
Cisco Security Advisory: Default Credentials Vulnerability in Cisco Network Registrar - http://www.cisco.com/warp/public/707/cisco-sa-20110601-cnr.shtml
2011-06-01/a>
Adrien de Beaupre
Cisco Security Advisory: Default Credentials for root Account on the Cisco Media Experience Engine 5600 - http://www.cisco.com/warp/public/707/cisco-sa-20110601-mxe.shtml
2011-06-01/a>
Adrien de Beaupre
Cisco Security Advisory: Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client - http://www.cisco.com/warp/public/707/cisco-sa-20110601-ac.shtml
2011-05-25/a>
Daniel Wesemann
Five new Cisco security advisories released. See http://www.cisco.com/go/psirt
2011-04-28/a>
Chris Mohan
Cisco Security Advisories
2011-03-30/a>
Adrien de Beaupre
Two Cisco advisories: cisco-sa-20110330-nac and cisco-sa-20110330-acs
2011-03-18/a>
Chris Mohan
Deferral Announcement for the March 2011 Cisco IOS Software Security Advisories - http://seclists.org/bugtraq/2011/Mar/170
2011-02-02/a>
Chris Mohan
Default Credentials for Root Account on Cisco Personal Video units
2010-11-17/a>
Guy Bruneau
Cisco Unified Videoconferencing Affected by Multiple Vulnerabilities
2010-08-13/a>
Guy Bruneau
Cisco IOS Software 15.1(2)T TCP DoS
2010-08-04/a>
Adrien de Beaupre
Multiple Cisco Advisories
2010-07-30/a>
Guy Bruneau
Cisco Internet Streamer: Web Server Directory Traversal Vulnerability http://www.cisco.com/warp/public/707/cisco-sa-20100721-spcdn.shtml
2010-07-23/a>
Mark Hofman
A bit old, however CISCO has updated the November 2009 TLS renegotiation vulnerability with additional vulnerable products and patch information. More details here http://www.cisco.com/warp/public/707/cisco-sa-20091109-tls.shtml
2010-07-10/a>
Tony Carothers
Software Update for Cisco IE 3000 Series Switches
2010-06-18/a>
Adrien de Beaupre
End of the road for Cisco CSA
2010-03-24/a>
Kyle Haugsness
Cisco security updates
2010-02-17/a>
Rob VandenBrink
Cisco ASA5500 Security Updates - cisco-sa-20100217-asa
2010-02-17/a>
Rob VandenBrink
Cisco Security Agent Security Updates: cisco-sa-20100217-csa
2010-02-02/a>
Guy Bruneau
Cisco Secure Desktop Remote XSS Vulnerability
2009-11-18/a>
Rob VandenBrink
Using a Cisco Router as a “Remote Collector” for tcpdump or Wireshark
2009-10-16/a>
Adrien de Beaupre
Multiple Vulnerabilities in Cisco Wireless LAN Controllers
2009-09-08/a>
Guy Bruneau
Cisco Security Advisory TCP DoS
2009-08-26/a>
Johannes Ullrich
Cisco over-the-air-provisioning skyjacking exploit
2009-05-18/a>
Rick Wanner
Cisco SAFE Security Reference Guide Updated
2009-03-30/a>
Daniel Wesemann
Watch your Internet routers!
2009-03-25/a>
Mari Nichols
Cisco Releases IOS Bundle of Vulnerabilities
2009-01-21/a>
Raul Siles
Vulnerabilities on Cisco and Apple products
2008-12-16/a>
donald smith
Cisco's Annual Security report has been released.
2008-09-24/a>
Deborah Hale
Flurry of Security Advisories from CISCO
2008-09-04/a>
Chris Carboni
Cisco Vulnerabilities
2008-06-18/a>
Chris Carboni
Cisco Security Advisory
2008-05-25/a>
Stephen Hall
Cisco's Response to Rootkit presentation
2008-05-23/a>
Mike Poor
Cisco IOS Rootkit thoughts
2008-03-26/a>
Swa Frantzen
Cisco security advisory overview
SECURE
2020-04-27/a>
Xavier Mertens
Powershell Payload Stored in a PSCredential Object
2010-07-24/a>
Manuel Humberto Santander Pelaez
Transmiting logon information unsecured in the network
2010-02-02/a>
Guy Bruneau
Cisco Secure Desktop Remote XSS Vulnerability
2009-10-17/a>
Rick Wanner
Cyber Security Awareness Month - Day 17 - Port 22/SSH
2009-10-15/a>
Deborah Hale
Cyber Security Awareness Month - Day 15 - Ports 995, 465, and 993 - Secure Email
2008-10-22/a>
Mari Nichols
F-Secure and Trend Micro Release Critical Patches
DESKTOP
2020-08-22/a>
Guy Bruneau
Remote Desktop (TCP/3389) and Telnet (TCP/23), What might they have in Common?
2020-07-24/a>
Xavier Mertens
Compromized Desktop Applications by Web Technologies
2012-08-22/a>
Adrien de Beaupre
Apple Remote Desktop update fixes no encryption issue
2012-03-16/a>
Russ McRee
MS12-020 RDP vulnerabilities: Patch, Mitigate, Detect
2011-07-28/a>
Guy Bruneau
XenApp and XenDesktop could result in Arbitrary Code Execution
2010-02-02/a>
Guy Bruneau
Cisco Secure Desktop Remote XSS Vulnerability
REMOTE
2024-06-17/a>
Xavier Mertens
New NetSupport Campaign Delivered Through MSIX Packages
2022-10-07/a>
Xavier Mertens
Critical Fortinet Vulnerability Ahead
2021-05-14/a>
Xavier Mertens
"Open" Access to Industrial Systems Interface is Also Far From Zero
2021-02-13/a>
Guy Bruneau
vSphere Replication updates address a command injection vulnerability (CVE-2021-21976) - https://www.vmware.com/security/advisories/VMSA-2021-0001.html
2020-09-29/a>
Xavier Mertens
Managing Remote Access for Partners & Contractors
2020-08-22/a>
Guy Bruneau
Remote Desktop (TCP/3389) and Telnet (TCP/23), What might they have in Common?
2019-09-24/a>
Xavier Mertens
Huge Amount of remotewebaccess.com Sites Found in Certificate Transparency Logs
2017-11-25/a>
Guy Bruneau
Exim Remote Code Exploit
2015-10-12/a>
Guy Bruneau
Critical Vulnerability in Multiple Cisco Products - Apache Struts 2 Command Execution http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-struts2
2013-09-18/a>
Rob VandenBrink
Cisco DCNM Update Released
2013-02-16/a>
Lorna Hutcheson
Fedora RedHat Vulnerabilty Released
2012-08-22/a>
Adrien de Beaupre
Apple Remote Desktop update fixes no encryption issue
2012-03-16/a>
Russ McRee
MS12-020 RDP vulnerabilities: Patch, Mitigate, Detect
2011-11-28/a>
Tom Liston
A Puzzlement...
2011-11-19/a>
Pedro Bueno
Dragon Research Group (DRG) announced the white paper entitled "VNC: Threats and Countermeasures" : https://dragonresearchgroup.org/insight/vnc-tac.html
2011-08-11/a>
Guy Bruneau
BlackBerry Enterprise Server Critical Update
2010-12-19/a>
Raul Siles
Intel's new processors have a remote kill switch (Anti-Theft 3.0)
2010-10-19/a>
Rob VandenBrink
Cyber Security Awareness Month - Day 19 - Remote Access Tools
2010-10-19/a>
Rob VandenBrink
Cyber Security Awareness Month - Day 19 - Remote User VPN Tunnels - to Split or not to Split?
2010-10-19/a>
Rob VandenBrink
Cyber Security Awareness Month - Day 19 - Remote User VPN Access – Are things getting too easy, or too hard?
2010-10-19/a>
Rob VandenBrink
Cyber Security Awareness Month - Day 19 - VPN and Remote Access Tools
2010-05-12/a>
Rob VandenBrink
Adobe Shockwave Update
2010-03-15/a>
Adrien de Beaupre
Spamassassin Milter Plugin Remote Root Attack
2010-03-10/a>
Rob VandenBrink
Microsoft Security Advisory 981374 - Remote Code Execution Vulnerability for IE6 and IE7
2010-02-02/a>
Guy Bruneau
Cisco Secure Desktop Remote XSS Vulnerability
2009-11-14/a>
Adrien de Beaupre
Microsoft advisory for Windows 7 / Windows Server 2008 R2 Remote SMB DoS Exploit released
2009-11-12/a>
Rob VandenBrink
Windows 7 / Windows Server 2008 Remote SMB Exploit
2008-05-06/a>
Marcus Sachs
Industrial Control Systems Vulnerability
2008-03-13/a>
Jason Lam
Remote File Include spoof!?
2006-11-20/a>
Joel Esler
MS06-070 Remote Exploit
XSS
2020-08-22/a>
Guy Bruneau
VMware App Volumes patches address Stored Cross-Site Scripting (XSS) vulnerability - https://www.vmware.com/security/advisories/VMSA-2020-0019.html
2015-10-20/a>
Bojan Zdrnja
When encoding saves the day
2015-06-25/a>
Bojan Zdrnja
Web security subtleties and exploitation of combined vulnerabilities
2014-03-27/a>
Alex Stanford
Mass XSSodus in PHP
2013-05-08/a>
Johannes Ullrich
"De Flashing" the ISC Web Site and Flash XSS issues
2013-02-17/a>
Guy Bruneau
HP ArcSight Connector Appliance and Logger Vulnerabilities
2013-02-11/a>
John Bambenek
Is This Chinese Registrar Really Trying to XSS Me?
2013-02-04/a>
Russ McRee
An expose of a recent SANS GIAC XSS vulnerability
2012-06-12/a>
Johannes Ullrich
The bane of XSS
2012-05-22/a>
Johannes Ullrich
nmap 6 released
2012-04-21/a>
Guy Bruneau
WordPress Release Security Update
2012-03-07/a>
Guy Bruneau
Reflected XSS in Splunk Web Affecting Version 4.0 to 4.3
2012-01-05/a>
Russ McRee
WordPress 3.3.1 fixes 15 issues with WordPress 3.3 including XSS. Download 3.3.1 or visit Dashboard --> Updates in your site admin panel.
2011-08-24/a>
Rob VandenBrink
Citrix Access Gateway Cross Site Scripting vulnerability and fix ==> http://support.citrix.com/article/CTX129971
2010-07-04/a>
Bojan Zdrnja
Stored XSS vulnerability on YouTube actively abused?
2010-04-30/a>
Kevin Liston
CVE-2010-0817 SharePoint XSS Scorecard
2010-02-06/a>
Guy Bruneau
LANDesk Management Gateway Vulnerability
2010-02-02/a>
Guy Bruneau
Cisco Secure Desktop Remote XSS Vulnerability
2009-07-10/a>
Guy Bruneau
WordPress Fixes Multiple vulnerabilities
2009-04-13/a>
Bojan Zdrnja
Twitter worm copycats
2009-04-12/a>
Patrick Nolan
Twitter Worm(s)
2006-10-05/a>
Swa Frantzen
MS06-053 revisited ?
Homepage
Diaries
Podcasts
Jobs
Data
TCP/UDP Port Activity
Port Trends
SSH/Telnet Scanning Activity
Weblogs
Threat Feeds Activity
Threat Feeds Map
Useful InfoSec Links
Presentations & Papers
Research Papers
API
Tools
DShield Sensor
DNS Looking Glass
Honeypot (RPi/AWS)
InfoSec Glossary
Contact Us
Contact Us
About Us
Handlers
About Us
Slack Channel
Mastodon
Bluesky
X
Make the web a better place by
sharing the SANS Internet Storm Center
with others