CVE-2005-3892

Gadu-Gadu 7.20 is affected by CVE-2005-3892 due to an EasycallLite.oce ActiveX control that can be loaded by a web page to initiate an outgoing call and listen to the microphone, allowing remote eavesdropping. Affected product/version: Gadu-Gadu 7.20. Root cause involves the ActiveX control enabl...

Detect SWAT server port

SWAT Samba Web Administration Tool is running on this port. SWAT allows Samba users to change their passwords, and offers to the sysadmin an easy-to-use GUI to configure Samba. However, it is not recommended to let SWAT be accessed by the world, as it allows an intruder to attempt to brute force...

X11 Server Unauthenticated Access

The remote X11 server accepts connections from anywhere. An attacker can connect to it to eavesdrop on the keyboard and mouse events of a user on the remote host. It is even possible for an attacker to grab a screenshot of the remote host or to display arbitrary programs. An attacker can exploit...

Hijacking Bluetooth Headsets for Fun and Profit?

Hijacking Bluetooth Headsets for Fun and Profit? kfatdigitalmunitiondotcom http://www.digitalmunition.com/HijackHeadSet.txt A few years ago when I worked for SNOSoft my business partner 'Simon' was one of those guys who rocked out a Bluetooth Headset just about every time I talked to him on his...

Google Secure Access VPN Client Installed

The remote host has the program 'Google Secure Access' installed. This software is a VPN client allowing roaming users to establish a VPN connection with Google's VPN server, thus protecting the local communications from being eavesdropped by a local user. This potentially allows Google to...

CVE-2002-1947

Webmin 0.21–1.0 uses the same built-in SSL key across installations, allowing remote attackers to eavesdrop on or hijack SSL sessions. The root cause is the shared SSL key across deployments. No remediation or patch details are provided in the connected documents.

Microsoft Windows NT 4.02000 Predictable LPC Message Identifier - Multiple Vulnerabilities

Microsoft Windows NT 4.02000 Predictable LPC Message Identifier - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/1748/info LPC Local Procedure Call is a message-passing service that allows threads and processes to communicate with each other on a local machine as opposed to RP...

Microsoft Windows NT 4.0/2000 Predictable LPC Message Identifier - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/1748/info LPC Local Procedure Call is a message-passing service that allows threads and processes to communicate with each other on a local machine as opposed to RPC Remote Procedure Call that takes place between different hosts. The structure of a messag...

RUS-CERT Advisory 200004-01: GNU Emacs 20

RUS-CERT Advisory 200004-01: GNU Emacs 20 RUS-CERT, University of Stuttgart 2000-04-18 Summary Several vulnerabilities were discovered in all Emacs versions up to 20.6, namely: Under certain circumstances, unprivileged local users can eavesdrop the communication between Emacs and its subprocesses...

macof.sniff.dos.switched.txt

Date: Wed, 5 May 1999 09:15:25 +0100 From: [email protected] To: [email protected] Subject: Infosec.19990305.macof.a Infosec Security Vulnerability Report No: Infosec.19990305.macof.a ===================================== Vulnerability Summary --------------------- Problem: Due to limitatio...

Weak authentication in ATT VNC

Advisory ID Internal CORE-21011501 Advisory ID: CORE-2001011501 Bugtraq ID: 2275 CVE Name: None currently assigned. Title: Weak authentication in ATT VNC Class: Design error Remotely Exploitable: yes Locally Exploitable: no Release Mode: USER RELEASE Vulnerability Description: As stated in the VN...

CVE-2022-32510

An issue was discovered on certain Nuki Home Solutions devices. The HTTP API exposed by a Bridge used an unencrypted channel to provide an administrative interface. A token can be easily eavesdropped by a malicious actor to impersonate a legitimate user and gain access to the full set of API...