532 matches found
CVE-2021-26905
1Password SCIM Bridge before 1.6.2 mishandles validation of authenticated requests for log files, leading to disclosure of a TLS private key...
Design/Logic Flaw
1Password SCIM Bridge before 1.6.2 mishandles validation of authenticated requests for log files, leading to disclosure of a TLS private key...
CVE-2021-26905
1Password SCIM Bridge before 1.6.2 mishandles validation of authenticated requests for log files, leading to disclosure of a TLS private key...
PT-2021-17164
Name of the Vulnerable Software and Affected Versions: 1Password SCIM Bridge versions prior to 1.6.2 Description: The issue concerns the mishandling of validation for authenticated requests related to log files, potentially leading to the disclosure of a TLS private key. Recommendations: For...
CVE-2021-26905: Improper Authentication
1Password SCIM Bridge before 1.6.2 mishandles validation of authenticated requests for log files, leading to disclosure of a TLS private key...
Acronis: licenses key disclosure
Summary Hi team i found the licenses key stored as cleat text i think it important Steps To Reproduce 1. Go to this link https://dl.acronis.com/u/pdf/workstationlicenses.txt 2.And this link https://dl.acronis.com/u/pdf/serverlicenses.txt 3. You can see all licenses key Impact I think I can use th...
CVE-2020-27508: Undefined Security Weakness
In two-factor authentication, the system also sending 2fa secret key in response, which enables an intruder to breach the 2fa security...
Stripo Inc: Non-revoked API Key Disclosure in a Disclosed API Key Disclosure Report on Stripo
Summary: Can you imagine discovering an API key disclosure vulnerability in a disclosed API key disclosure report? The same thing is what I came across while going through the disclosed reports at Stripo Inc. Plus, the disclosed API key isn't even revoked, and therefore I am still able to use the...
PT-2020-5509
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on SRX Series and NFX Series versions prior to 12.3X48-D105 Juniper Networks Junos OS on SRX Series and NFX Series versions prior to 15.1X49-D190 Juniper Networks Junos OS on SRX Series and NFX Series versions prior t...
CVE-2020-11684: Improper Removal of Sensitive Information Before Storage or Transfer
AT91bootstrap before 3.9.2 does not properly wipe encryption and authentication keys from memory before passing control to a less privileged software component. This can be exploited to disclose these keys and subsequently encrypt and sign the next boot stage such as the bootloader...
Security Bulletin: IBM Content Navigator is vulnerable to an Elliptic Curve Key Disclosure.
Summary IBM Content Navigator has addressed the following vulnerability. A potential vulnerability in the jose4j module could allow information disclosure. Vulnerability Details Third Party Entry: 186425 DESCRIPTION: jose.4.j library key information disclosure CVSS Base score: 8.7 CVSS Temporal...
PT-2020-9369
Name of the Vulnerable Software and Affected Versions: CISOfy Lynis versions 2.x through 2.7.5 Description: The issue allows an attacker to obtain the license key by examining the process list during a data upload. This license key can then be used to upload data to a central Lynis server,...
CVE-2020-1774: Insertion of Sensitive Information Into Sent Data
When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys. Therefore it's possible to mix them and to send private key to the third-party instead of public key. This issue affects OTRS Community Edition: 5.0.42 and prior versions, 6.0.27 and prio...
CVE-2020-11792
NETGEAR R8900, R9000, RAX120, and XR700 devices before 2020-01-20 are affected by Transport Layer Security TLS certificate private key disclosure...
CVE-2020-11792
CVE-2020-11792 affects NETGEAR devices: R8900, R9000, RAX120, and XR700 released before 2020-01-20, where the TLS certificate private key disclosure vulnerability exists. The root cause is disclosure of the TLS private key; no concrete exploit details are provided in the supplied documents. There...
CVE-2020-11792: Improper Certificate Validation
NETGEAR R8900, R9000, RAX120, and XR700 devices before 2020-01-20 are affected by Transport Layer Security TLS certificate private key disclosure...
PT-2020-12850
Name of the Vulnerable Software and Affected Versions NETGEAR R8900 versions prior to 2020-01-20 NETGEAR R9000 versions prior to 2020-01-20 NETGEAR RAX120 versions prior to 2020-01-20 NETGEAR XR700 versions prior to 2020-01-20 Description The issue concerns the disclosure of Transport Layer...
PT-2020-2276
Name of the Vulnerable Software and Affected Versions MSR JavaScript Cryptography Library affected versions not specified Description A security issue exists in the MSR JavaScript Cryptography Library due to multiple bugs in its Elliptic Curve Cryptography ECC implementation. This could allow an...
Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution Vulnerability
Exploit for hardware platform in category web applications Exploit Title: Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution Exploit Author: Wadeek Hardware Version: EW-7438RPn-v3 Mini Firmware Version: 1.23 / 1.27 Vendor Homepage:...