PT-2018-2864

Name of the Vulnerable Software and Affected Versions Dell EMC Avamar Server versions 7.2.0 through 7.5.1 and version 18.1 Dell EMC Integrated Data Protection Appliance IDPA versions 2.0 through 2.2 Description The issue is related to an OS command injection vulnerability in the 'getlogs' utility...

Eaton Xpert Meter 13.4.0.10 - SSH Private Key Disclosure

Exploit Title: Eaton Xpert Meter 13.4.0.10 - SSH Private Key Disclosure Date: 2018-07-16 WebPage: https://CTRLu.net/ Vendor Homepage: http://www.eaton.com/ Vendor Advisory: http://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/PXM-Advisory.pdf Software Link...

Eaton Xpert Meter 13.4.0.10 - SSH Private Key Disclosure Exploit

Exploit for hardware platform in category remote exploits Exploit Title: Eaton Xpert Meter 13.4.0.10 - SSH Private Key Disclosure Date: 2018-07-16 WebPage: https://CTRLu.net/ Vendor Homepage: http://www.eaton.com/ Vendor Advisory:...

PT-2018-1452

Name of the Vulnerable Software and Affected Versions Cisco IOS and Cisco IOS XE affected versions not specified Description The issue is related to errors in decrypting traffic in the implementation of the Internet Key Exchange IKE protocol in Cisco IOS and Cisco IOS XE. This could allow a remot...

UBUNTU-CVE-2018-5383

Bluetooth firmware or operating system software drivers in macOS versions before 10.13, High Sierra and iOS versions before 11.4, and Android versions before the 2018-06-05 patch may not sufficiently validate elliptic curve parameters used to generate public keys during a Diffie-Hellman key...

PT-2018-11172

Name of the Vulnerable Software and Affected Versions wolfSSL versions prior to 3.15.1 Description The issue allows for a memory-cache side-channel attack on ECDSA signatures, also known as the Return Of the Hidden Number Problem or ROHNP. An attacker can discover an ECDSA key if they have access...

CVE-2018-7559: Undefined Security Weakness

An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13. A vulnerability in OPC UA applications can allow a remote attacker to determine a Server's private key by sending...

PT-2018-3556

Name of the Vulnerable Software and Affected Versions: OPC UA .NET Standard Stack and Sample Code versions before GitHub commit 2018-04-12 OPC UA .NET Legacy Stack and Sample Code versions before GitHub commit 2018-03-13 Description: A vulnerability in OPC UA applications allows a remote attacker...

CVE-2017-7822

The AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a length of 1 according to the NIST Special Publication 800-38D specification. This might allow for the authentication key to be determined in some instances. This vulnerability affects Firefox 56...

PT-2018-4640

Name of the Vulnerable Software and Affected Versions Bouncy Castle JCE Provider versions prior to 1.56 Description The issue arises from insufficient validation of the other party's Diffie-Hellman public key, potentially allowing invalid keys to reveal details about the other party's private key...

PT-2018-4332 · D Link · Dir-815

Name of the Vulnerable Software and Affected Versions: D-Link DIR-815 versions prior to 2.07.B01 Description: The issue allows remote attackers to obtain sensitive information. This is achieved by leveraging cleartext storage of the wireless key. Recommendations: For versions prior to 2.07.B01,...

Trend Micro Smart Protection Server Encryption Key Disclosure

Encryption key disclosure vulnerability in rend Micro Smart Protection Server Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Debian: Security Advisory (DLA-1015-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-16887

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password...

Default credentials

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password...

CVE-2017-16887

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password...

PT-2018-6358

Name of the Vulnerable Software and Affected Versions: FiberHome Mobile WIFI Device Model LM53Q1 version VH519R05C01S38 Description: The issue concerns unauthorized access to web services on the device, which can lead to the disclosure of the WLAN key/password. The portal uses SOAP-based web...

CVE-2017-16887: Undefined Security Weakness

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password...

Trend Micro OfficeScan 11.0/XG Encryption Key Disclosure

Encryption key disclosure vulnerability in TrendMicro OfficeScan Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

PT-2017-3914

Name of the Vulnerable Software and Affected Versions Infineon Trusted Platform Module TPM firmware versions prior to 0000000000000422 - 4.34 Infineon Trusted Platform Module TPM firmware versions prior to 000000000000062b - 6.43 Infineon Trusted Platform Module TPM firmware versions prior to...