Search: “ThousandEyes”

Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection Vulnerability

Cisco patched an authenticated command injection in ThousandEyes Virtual Appliance allowing arbitrary OS command execution with root privileges.

Improper validation of user-supplied input in the web-based management interface of Cisco ThousandEyes Virtual Appliance enables command injection. An authenticated remote attacker with valid administrative credentials can save configuration details containing malicious values to execute arbitrary operating system commands with root privileges. Cisco has released software updates that address the vulnerability.

Cisco Security Advisories·16:00 UTC · 5h agoAdvisory

Cisco introduces new integrations across networking and security portfolios

Help Net Security·Feb 6, 00:00 UTC · Feb 6, 2024Vulnerability

NS1 releases new solution to protect organizations and their customers from DNS attacks

Help Net Security·Mar 15, 00:00 UTC · Mar 15, 2019Phishing & fraud