9429 matches found
EyeLock nano NXT 3.5 - Local File Disclosure
Exploit for php platform in category web applications EyeLock nano NXT 3.5 Local File Disclosure Vulnerability Vendor: EyeLock, LLC Product web page: http://www.eyelock.com Affected version: NXT Firmware: 3.05.1193 ICM: 3.5.1 NXT Firmware: 3.04.1108 ICM: 3.4.13 NXT Firmware: 3.03.944 ICM: 3.3.2 N...
CVE-2016-6232
Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ dot dot slash in a filename in an archive file, related to KNewsstuff downloads...
Unpatched Smart Lighting Flaws Pose IoT Risk to Businesses
A host of web-based vulnerabilities in Osram Lightify smart lighting products remain unpatched, despite private notification to the vendor in late May and CVEs assigned to the issues in June by CERT/CC. Researchers at Rapid7 today publicly disclosed some of the details on each of the nine...
Iris ID IrisAccess iCAM4000iCAM7000 - Hard-Coded Credentials Remote Shell Access
Iris ID IrisAccess iCAM4000iCAM7000 - Hard-Coded Credentials Remote Shell Access Iris ID IrisAccess iCAM4000/iCAM7000 Hardcoded Credentials Remote Shell Access Vendor: Iris ID, Inc. Product web page: http://www.irisid.com http://www.irisid.com/productssolutions/irisaccesssystem/irisaccess4000/...
Upcoming Tor Design Battles Hidden Services Snooping
More than 100 malicious Tor Hidden Services Directories HSDirs were found to be snooping on the services they host, and in some cases, operators were actively using the data collected to attack the services. While at first blush, the discovery would seem to put another dent in the privacy and...
CVE-2016-6289
Integer overflow in the virtualfileex function in TSRM/tsrmvirtualcwd.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact via a crafted extract operation on a Z...
CVE-2016-5008
libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server...
AntiRansom - Fighting against Ransomware using Honeypots
AntiRansom is a tool capable of detect and stop attacks of Ransomware using honeypots. First, Anti Ransom creates a random decoy folder with many useless random documents Excel, PDF and then it monitors the folder waiting for changes. When a change is detected, AntiRansom tries to identify wich...
CVE-2016-4971
creationtimestamp| type| source ---|---|--- 2016-07-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40064 2021-04-30 16:26:41+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/283 2024-11-14 06:08:59+00:00| seen| MISP/e8de7faf-a595-4c5b-bcd7-ecddfbfa56af...
Suricata 3.1 - Open Source IDS / IPS / NSM engine
Suricata is a high performance Network IDS, IPS and Network Security Monitoring engine. Open Source and owned by a community run non-profit foundation, the Open Information Security Foundation OISF. Suricata is developed by the OISF and its supporting vendors. Top 3 Reasons You Should Try Suricat...
CVE-2015-8932
Undefined behavior invalid left shift was discovered in libarchive, in how Compress streams are identified. This could cause certain files to be mistakenly identified as Compress archives and fail to read...
CG-WLR300GNV Series does not limit authentication attempts
Overview CG-WLR300GNV and CG-WLR300GNV-W provided by Corega Inc are wireless LAN routers. The WPS functionality in CG-WLR300GNV Series does not limit PIN authentication attempts, making it susceptible to brute force attacks. Takeshi Okamoto of Kanagawa Institute of Technology and Takaaki Minegish...
Google's Android Rewards Program Pays Out Half Million in First Year
Google wrapped up the first year of its Android Security Rewards program this week, a span of time that saw the company pay out just north of half a million dollars to security researchers who helped identify vulnerabilities in the mobile operating system. In all, the company paid 82 researchers ...
ICS SCADA NSA Situational Awareness: Grassmarlin
ICS SCADA NSA Situational Awareness: Grassmarlin Provide IP network situational awareness of industrial control systems ICS and Supervisory Control and Data Acquisition SCADA networks to support network security. Passively map, and visually display, an ICS/SCADA network topology while safely...
DDN SFA Default SSH Keys
DDN Default SSH Keys DDN SFA devices have default SSH keys in place Product: DDN SFA storage devices, all versions, all models Severity: High CVE Reference: NO CVE ASSIGNED - MWR ref: MWR-2016-0002 Type: Default Credentials Author: John Fitzpatrick Date: 2016-06-15 Description DDN controllers shi...
phpLiteAdmin Detection
Detection of phpLiteAdmin The script sends a connection request to the server and attempts to detect phpLiteAdmin SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
boutique.pagesjaunes.fr XSS vulnerability
Vulnerable URL: http://boutique.pagesjaunes.fr/nb/identificationsearch/?destination='"/alert"openbugbounty"...
The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code
The vulnerability in the btif/src/btifdm.c function of the Android operating system’s Bluetooth component is caused by a buffer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code with the help of a long PIN value...
Error: "Error Id: XDDS:F05685F3" Connection To Existing License Server Fails After License Server Upgrade to 11.11.1 v2
Connection to existing production license server XenDesktop 7.5 fails after License Server upgrade to 11.11.1. New XenDesktop 7.5 environment. Upgraded existing license server to 11.11.1 build 13017 Current XenApp 6.5 environment continued to function New DDC is fails to connect to the license...