D-Link DWR-932 Authentication Bypass / Password Disclosure

D-Link DWR-932 Firmware = V4.00 Authentication Bypass - Password Disclosure Author: Saeed reza Zamanian penetrationtest @ Linkedin Product: D-Link DWR-932 Tested Version: Firmware V4.00EUb03 Vendor: D-Link http://www.dlink.com/ Product URL:...

Lenovo SHAREit Wifi hotspot component access rights vulnerability

Lenovo SHAREit 茄子快传 for Windows is a Windows-based file-sharing software from the Chinese company Lenovo.Wifi hotspot is one of the components of Wifi hotspot. An access privilege vulnerability exists in the Wifi hotspot component of Lenovo SHAREit for Windows prior to version 3.2.0, due to the...

Lenovo SHAREit Wifi hotspot component access rights vulnerability (CNVD-2016-00491)

Lenovo SHAREit 茄子快传 for Android is a set of Android-based file-sharing software from Lenovo, China.Wifi hotspot is one of the Wifi hotspot components. An access privilege vulnerability exists in the Wifi hotspot component in previous versions of Lenovo SHAREit for Android 3.5.48ww, due to the...

Lenovo SHAREit Wifi hotspot information leakage vulnerability

Lenovo SHAREit 茄子快传 for Windows is a Windows-based file-sharing software from Lenovo, China.Wifi hotspot is one of the Wifi hotspot components. An information disclosure vulnerability exists in the Wifi hotspot component of Lenovo SHAREit for Windows versions prior to 3.2.0. A remote attacker can...

Oh Snap! Lenovo protects your Security with '12345678' as Hard-Coded Password in SHAREit

What do you expect a tech giant to protect your backdoor security with? Holy Cow! It's "12345678" as a Hard-Coded Password. Yes, Lenovo was using one of the most obvious, awful passwords of all time as a hard-coded password in its file sharing software SHAREit that could be exploited by anyone wh...

CVE-2016-1492

The Wifi hotspot in Lenovo SHAREit before 3.5.48ww for Android, when configured to receive files, does not require a password, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area...

CVE-2016-1492

The Wifi hotspot in Lenovo SHAREit before 3.5.48ww for Android, when configured to receive files, does not require a password, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area...

CVE-2016-1491

The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows, when configured to receive files, has a hardcoded password of 12345678, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area...

CVE-2016-1490

The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows allows remote attackers to obtain sensitive file names via a crafted file request to /list...

Hardcoded credentials

The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows, when configured to receive files, has a hardcoded password of 12345678, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area...

Default credentials

The Wifi hotspot in Lenovo SHAREit before 3.5.48ww for Android, when configured to receive files, does not require a password, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area...

CVE-2016-1492

CVE-2016-1492 concerns Lenovo SHAREit for Android. When the app is configured to receive files, it creates an open Wi‑Fi hotspot with no password, allowing an attacker within WLAN range to connect and potentially capture traffic transferred between devices. The CoreLabs advisory and Lenovo securi...

CVE-2016-1491

Summary of CVE-2016-1491 (Lenovo SHAREit) : CoreLabs’ advisory confirms a hard-coded password vulnerability in Lenovo SHAREit for Windows prior to version 3.2.0 where a Wi‑Fi hotspot is created to receive files using the fixed password “12345678,” enabling a remote attacker within WLAN range to g...

CVE-2016-1492

The Wifi hotspot in Lenovo SHAREit before 3.5.48ww for Android, when configured to receive files, does not require a password, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area...

CVE-2016-1490

The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows allows remote attackers to obtain sensitive file names via a crafted file request to /list...

Lenovo SHAREit App Hard-Coded Password

Lenovo today has patched a number of vulnerabilities that jeopardize private data, which are largely enabled by a simple hard-coded password in a freely available file-sharing application. The flaws were found in in the Lenovo ShareIT application for Android and Windows by researchers at Core...

Cisco Jabbar chat client vulnerability to man in the middle attacks-vulnerability warning-the black bar safety net

Cisco released an official announcement that its chat clients Jabbar in the presence of security vulnerabilities, vulnerable to a middleman attack. The vulnerability exists on the Windows platform-Jabbar, an unauthorized remote attacker can exploit the vulnerability to implement STARTTLS downgrad...

Cisco Jabber for Windows STARTTLS Downgrade Attack

An attacker in a man-in-the-middle position could abuse a STARTTLS downgrade vulnerability in the Cisco Jabber client-server negotiation in order to intercept communication. Cisco warned its customers yesterday, but has yet to patch the vulnerability, which affects the Cisco Jabber clients for...

Google App Engine for Java Security Vulnerabilities

A tweak carried out by Google in the Google App Engine for Java continues to stir up security concerns. Oracle this week patched the latest vulnerability in Java SE-the flaw also lives in Google’s platform-as-a-service entry-after it was privately disclosed by Java bug-hunters from Security...

SUSE: Security Advisory for java-1_7_0-openjdk (SUSE-SU-2015:0503-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...