1185 matches found
[SECURITY] Fedora 27 Update: kernel-4.18.12-100.fc27
The kernel meta package...
Meet GhostDNS: The dangerous malware behind IoT botnet targeting banks
By Waqas Security researchers at NetLab, a sub-division of the Chinese cybersecurity firm Qihoo 360, have discovered a new, wide-scale, and very active malware campaign that has managed to hijack more than 100,000 home routers between Sept 21 and 27. A majority of routers almost 88% are located i...
[SECURITY] Fedora 27 Update: kernel-4.18.9-100.fc27
The kernel meta package...
Cisco SD-WAN Solution Command Injection Vulnerability
Cisco vEdge 100 Series Routers is a 100 series router product. vManage Network Management System is a network management system. SD-WAN Solution is a network extension solution that runs on it. A command injection vulnerability exists in the command-line interface CLI in Cisco SD-WAN Solution...
Guangzhou Chaoran Computer Co., Ltd.'s EL-100 Series Industrial Control Devices Have Override Access and Weak Password Vulnerabilities
The EL-100 Series Serial Device Networking Server allows serial devices to be networked immediately and directly accessible through software. Vulnerabilities exist in the EL-100 series of industrial control devices of Guangzhou Chaoran Computer Co. Ltd. for override access and weak password...
Microsoft’s Top 100 Security Researchers – Black Hat 2018 Edition
This morning we are excited to unveil the security researcher leaderboard at the Black Hat Security Conference. This list recognizes the top security researchers who have contributed research to the Microsoft products and services. If you are curious on how we build the list, check out our blog...
[SECURITY] Fedora 27 Update: kernel-4.17.11-100.fc27
The kernel meta package...
Attending Black Hat USA 2018? Here’s what to expect from Microsoft.
Black Hat USA 2018 brings together professionals at all career levels, encouraging growth and collaboration among academia, world-class researchers, and leaders in the public and private sectors. This is an exciting time as our Microsoft researchers, partners, and security experts will showcase t...
freesoft-100.com XSS vulnerability
Open Bug Bounty ID: OBB-657485 Description| Value ---|--- Affected Website:| freesoft-100.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
The Making of the Top 100 Researcher List
At Black Hat USA each year, we unveil the Top 100 Security Researcher list to reflect the amazing engagement we get from the community. During this period, we had several thousand researchers engage with the Microsoft Security Response Center MSRC. We appreciate all the partnership and coordinati...
The Making of the Top 100 Researcher List
At Black Hat USA each year, we unveil the Top 100 Security Researcher list to reflect the amazing engagement we get from the community. During this period, we had several thousand researchers engage with the Microsoft Security Response Center MSRC. We appreciate all the partnership and coordinati...
The Making of the Top 100 Researcher List
At Black Hat USA each year, we unveil the Top 100 Security Researcher list to reflect the amazing engagement we get from the community. During this period, we had several thousand researchers engage with the Microsoft Security Response Center MSRC. We appreciate all the partnership and coordinati...
CVE-2018-8851
Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices store passwords in plaintext, which may allow an attacker with access to the configuration file to log into the SmartServer web user interface...
CVE-2018-10627
Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. An attacker can use the SOAP API to retrieve and change sensitive configuration items such as the usernames and passwords for the Web and FTP servers. This...
Default configuration
Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices allow unencrypted Web connections by default, and devices can receive configuration and firmware updates by unsecure FTP...
CVE-2018-8859
Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. An attacker can bypass the required authentication specified in the security configuration file by including extra characters in the directory name when...
CVE-2018-8851
Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices store passwords in plaintext, which may allow an attacker with access to the configuration file to log into the SmartServer web user interface...
PT-2018-18663
Name of the Vulnerable Software and Affected Versions Echelon SmartServer 1 versions all Echelon SmartServer 2 versions prior to 4.11.007 Echelon i.LON 100 versions all Echelon i.LON 600 versions all Description The issue concerns the storage of passwords in plaintext, which could allow an attack...
Echelon SmartServer 1, SmartServer 2 and i.LON 100 Information Disclosure Vulnerability
Echelon SmartServer 1, SmartServer 2 and i.LON 100 are all products of Echelon Corporation, USA. echelon SmartServer 1 and SmartServer 2 are multifunctional controllers, which support building automation control and enterprise energy management, etc. i.LON 100 is a network server, which is mainly...
Echelon SmartServer 1, SmartServer 2 and i.LON 100 Authentication Bypass Vulnerability
Echelon SmartServer 1, SmartServer 2 and i.LON 100 are all products of Echelon Corporation, USA. echelon SmartServer 1 and SmartServer 2 are multifunctional controllers, which support building automation control and enterprise energy management, etc. i.LON 100 is a network server, which is mainly...