150 matches found
CVE-2022-38788
An issue was discovered in Nokia FastMile 5G Receiver 5G14-B 1.2104.00.0281. Bluetooth on the Nokia ODU uses outdated pairing mechanisms, allowing an attacker to passively intercept a paring handshake and after offline cracking retrieve the PIN and LTK long-term key...
CVE-2022-38788
An issue was discovered in Nokia FastMile 5G Receiver 5G14-B 1.2104.00.0281. Bluetooth on the Nokia ODU uses outdated pairing mechanisms, allowing an attacker to passively intercept a paring handshake and after offline cracking retrieve the PIN and LTK long-term key...
CVE-2022-24689
An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. It mishandles access control. This allows a remote attacker to access account information pages including personal data without being authenticated. The collected information includes the badge numbers that operate as user login...
DSK DSKNet 安全漏洞
DSK DSKNet is a data interaction program from DSK Japan. Their time and attendance data can be accessed interactively from any site connected to your network. A security vulnerability exists in DSK DSKNet versions 2.16.136.0 and 2.17.136.5, which stems from incorrectly handled access control, whi...
PT-2021-21971
Name of the Vulnerable Software and Affected Versions: Canon devices manufactured in 2012 through 2020, such as imageRUNNER ADVANCE iR-ADV C5250 Description: The issue allows remote attackers to modify an e-mail address setting when Catwalk Server is enabled for HTTP access, causing the device to...
The vulnerability of the rand() and random() functions in software certification for wireless network WPA devices, related to the lack of entropy in PIN selection, allows a hacker to trigger a service failure.
The vulnerability of the rand and random functions in software device certification for wireless networks with WPA security is related to a lack of entropy in the PIN selection process. Exploiting this vulnerability could allow an attacker to trigger a service failure...
LOGITEC CORPORATION LAN-WN/GR Security Vulnerabilities
A security vulnerability exists in the LOGITEC CORPORATION LAN-W300N / GR. An attacker can exploit the vulnerability to recover the PIN and access the network...
Selea Targa IP OCR-ANPR Camera - CSRF Add Admin
Exploit Title: Selea Targa IP OCR-ANPR Camera - CSRF Add Admin Date: 07.11.2020 Exploit Author: LiquidWorm Vendor Homepage: https://www.selea.com Selea Targa IP OCR-ANPR Camera CSRF Add Admin Exploit Vendor: Selea s.r.l. Product web page: https://www.selea.com Affected version: Model: iZero Targa...
Askey AP5100W Dual SIG Security Feature Issue Vulnerability
The Askey AP5100W Dual SIG is a router from China-based Askey Electronics Technology Askey. The Askey AP5100W Dual SIG suffers from a security signature issue vulnerability that stems from a faulty random number selection in the Diffie-Hellman exchange. By capturing an attempted or even failed WP...
CVE-2020-29439
Tesla Model X vehicles before 2020-11-23 have key fobs that rely on five VIN digits for the authentication needed for a body control module BCM to initiate a Bluetooth wake-up action. The full VIN is visible from outside the vehicle...
Tesla Model X Security Breach
Tesla The Tesla Model X is a new energy vehicle from the American company Tesla. A security vulnerability exists in versions of Tesla Model X vehicles prior to 2020-11-23, which stems from the fact that its key fobs rely on 5 VIN digits for authentication, and the Body Control Module BCM is...
CVE-2020-27747
An issue was discovered in Click Studios Passwordstate 8.9 Build 8973.If the user of the system has assigned himself a PIN code for entering from a mobile device using the built-in generator 4 digits, a remote attacker has the opportunity to conduct a brute force attack on this PIN code. As resul...
CVE-2020-10830
An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Attackers can view notifications by entering many PINs in Lockdown mode. The Samsung ID is SVE-2019-16590 March 2020...
aSYNcrone - A SYN Flood DDoS Tool
aSYNcrone is a C language based, mulltifunction SYN Flood DDoS Weapon. Disable the destination system by sending a SYN packet intensively to the destination. aSYNcrone's POWER!!! USAGE git clone https://github.com/fatih4842/aSYNcrone.git cd aSYNcrone gcc aSYNcrone.c -o aSYNcrone -lpthread...
Apple macOS High Sierra Local Authentication Local Information Disclosure Vulnerability
Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Local Authentication is one of the local authentication components. A security vulnerability exists in the handling of smart card PINs in the Local Authentication component of Apple macOS High Sierra...
CVE-2018-4179
In macOS High Sierra before 10.13.4, there was an issue with the handling of smartcard PINs. This issue was addressed with additional logic...
Boys Town Healthcare Data Breach Exposed Personal Details of Patients
Another day, Another data breach! This time-sensitive and personal data of hundreds of thousands of people at Boys Town National Research Hospital have been exposed in what appears to be the largest ever reported breach by a pediatric care provider or children's hospital. According to the U.S...
Kandi Car Share Android app has an override access vulnerability
Car Sharing app is a new energy car time-sharing platform. The Kandi Car Sharing Android app suffers from an override access vulnerability. An attacker using this vulnerability can view arbitrary account information and disclose the user's name, ID number, and cell phone number...
The vulnerability of the lockscreen component of the Android operating system allows a hacker to bypass the PIN code lock.
The vulnerability of the Android operating system’s lock screen is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass the PIN code lock by pressing the backspace key after each entry when entering the PIN...
