CVE-2019-14354

On Ledger Nano S and Nano X devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowing a partial recovery of display contents. For example, a hardware implant in the USB cable might ...

Code injection

On Ledger Nano S and Nano X devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowing a partial recovery of display contents. For example, a hardware implant in the USB cable might ...

CVE-2019-14354

Ledger Nano S/Nano X suffer a side‑channel risk from the row‑based OLED display: power consumption per display cycle correlates with illuminated pixels, enabling partial recovery of display contents (e.g., PIN or BIP39 mnemonic) if an attacker can monitor USB power while secret data is shown. Thi...

WAES - Auto Enums Websites And Dumps Files As Result

Doing HTB or other CTFs enumeration against targets with HTTPS can become trivial. It can get tiresome to always run the same script/tests on every box eg. nmap, nikto, dirb and so on. A one-click on target with automatic reports coming solves the issue. Furthermore, with a script the enum proces...

Ledger SAS Nano S and Nano X Information Disclosure Vulnerability

The Ledger SAS Nano S and Nano X are both an e-wallet device for storing cryptocurrencies from French company Ledger SAS. An information disclosure vulnerability exists in the Ledger SAS Nano S and Nano X, which can be exploited by an unauthorized attacker to obtain sensitive information about...

PT-2019-13633

Name of the Vulnerable Software and Affected Versions Ledger Nano S and Nano X devices affected versions not specified Description A side channel was discovered related to the row-based OLED display on the devices. The power consumption of each display cycle varies based on the number of...

CVE-2019-14354: Observable Discrepancy

On Ledger Nano S and Nano X devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowing a partial recovery of display contents. For example, a hardware implant in the USB cable might ...

XML Entity Injection Vulnerability in S-CMS

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a solution for enterprise station-building products. S-CMS has an XML entity injection vulnerability that can be exploited by attackers to obtain sensitive information...

PT-2019-13617

Name of the Vulnerable Software and Affected Versions D-Link 6600-AP and DWL-3600AP Ax version 4.2.0.14 Description An issue was discovered that allows for post-authenticated denial of service, leading to the reboot of the access point. This can be achieved via the "admin.cgi?action=%s" URI...

S-CMS in***.php page suffers from a SQL injection vulnerability

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a solution for enterprise station-building products. S-CMS in.php page has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information...

CVE-2019-14335: Undefined Security Weakness

An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated denial of service leading to the reboot of the AP via the admin.cgi?action=%s URI...

S-cms Government Website Building System suffers from SQL Injection Vulnerability

S-CMS government station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions for station building products. S-cms government website builder system has SQL injection vulnerability, attackers can use the vulnerability to obtain...

[SECURITY] Fedora 29 Update: gnupg2-2.2.17-1.fc29

GnuPG is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440 and the S/MIME standard as described...

Command Execution Vulnerability in S-CMS Enterprise Website Building System (CNVD-2019-29886)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. A command execution vulnerability exists in the S-CMS enterprise website builder system. Attackers can use the vulnerability to...

Xerox WorkCentre Multiple Vulnerabilities (XRX19-016) (URGENT/11)

According to its self-reported version, the remote Xerox WorkCentre is affected by multiple remote code execution and denial-of-service vulnerabilities in the IPnet TCP/IP stack. An unauthenticated, remote, attacker could leverage these vulnerabilities to gain full access to the affected device o...

s-shobey.co.jp Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-907995 Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting s-shobey.co.jp website and it...

S-nail < 14.8.16 - Local Privilege Escalation Exploit

Exploit for multiple platform in category local exploits !/bin/sh Wrapper for @wapiflapi's s-nail-privget.c local root exploit for CVE-2017-5899 uses ld.so.preload technique --- Found privsep: /usr/lib/s-nail/s-nail-privsep . Compiling /var/tmp/.snail.so.c ... . Compiling /var/tmp/.sh.c...

Fedora Update for kernel FEDORA-2019-9d3fe6fd5b

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2019-13571

Name of the Vulnerable Software and Affected Versions OpenSNS version 6.1.0 Description The issue allows SQL Injection via the "index.php?s=/ucenter/Config/" endpoint, specifically through the uid parameter. This is due to the getNeedQueryData function in...

Fedora Update for gnupg2 FEDORA-2019-2f259a6c0a

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...