Hillstone Networks

'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>

vul_other:ollama_0.1.33_denial_of_service_vulnerability（Rule ID：1070310232）

Release Date：2025/9/15

Rule Name：CVE-2024-39721:Ollama 0.1.33 Denial of Service Vulnerability

Severity：critical

CVE ID：CVE-2024-39721

Descripiton：

Ollama is an open-source large language model that can be started and run locally. Versions of Ollama prior to 0.1.34 have a security vulnerability. This vulnerability stems from the fact that when the CreateModelHandler function reads files using os.Open, the req.Path parameter can be controlled by the user, which may cause goroutines to run infinitely. This rule supports to defend the A6: Vulnerable and Outdated Components of OWASP Top 10 - 2021.
Other reference：None

Solution：

Update vendor patches.