Apple TV 12.0.0 and < 12.3 Multiple Vulnerabilities

Binary data 700719.prm...

EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1475)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The skbflowdissect function in net/core/flowdissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denia...

CVE-2019-11321

CVE-2019-11321 affects Motorola CX2 1.01 and M2 1.01, where the router opens TCP port 8010 and accepts unauthenticated HNAP requests, enabling retrieval of information such as MAC addresses of connected clients. The root cause is exposed management interface on port 8010 without authentication. P...

Darksplitz - Exploit Framework

This tools is continued from Nefix, DirsPy and Xmasspy project. Installation Will work fine in the debian shade operating system, like Backbox, Ubuntu or Kali linux. 1. $ git clone https://github.com/koboi137/darksplitz 2. $ cd darksplitz/ 3. $ sudo ./install.sh Features Extract mikrotik credenti...

Lupusec XT2 Plus Main Panel Shared Secrets / Secret Disclosure / CSRF

======================================================================= title: Multiple Vulnerabilities product: Lupusec XT2 Plus Main Panel version: Firmware 0.0.2.19E homepage: https://www.lupus-electronics.de/ found: 01/2019 by: D. Fabian...

Apple iOS Wi-Fi Logic Flaw Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices, with Wi-Fi as one of the wireless Internet components. A security vulnerability exists in the Wi-Fi component of Apple iOS versions prior to 12.2. The vulnerability can be exploited by an attacker to track a device using...

KNX Service Detection (UDP)

UDP based detection of a KNX service. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...

Android Q — Google Adds New Mobile Security and Privacy Features

Google has recently released the first beta version of Android Q, the next upcoming version of Google's popular mobile operating system, with a lot of new privacy improvements and other security enhancements. Android Q, where Q has not yet been named, offers more control over installed apps, thei...

CVE-2019-9126

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is an information disclosure vulnerability via requests for the routerinfo.xml document. This will reveal the PIN code, MAC address, routing table, firmware version, update time, QOS information, LAN information, and WLAN...

CVE-2019-9126

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is an information disclosure vulnerability via requests for the routerinfo.xml document. This will reveal the PIN code, MAC address, routing table, firmware version, update time, QOS information, LAN information, and WLAN...

Information disclosure

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is an information disclosure vulnerability via requests for the routerinfo.xml document. This will reveal the PIN code, MAC address, routing table, firmware version, update time, QOS information, LAN information, and WLAN...

CVE-2019-9126

CVE-2019-9126 affects D-Link DIR-825 Rev.B 2.10 devices. The vulnerability is an information disclosure through requests to the router_info.xml document, leading to exposure of the device’s PIN code, MAC address, routing table, firmware version, update time, QoS and other LAN/WLAN information. Th...

CVE-2019-9126

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is an information disclosure vulnerability via requests for the routerinfo.xml document. This will reveal the PIN code, MAC address, routing table, firmware version, update time, QOS information, LAN information, and WLAN...

D-Link DIR-825 Information Disclosure Vulnerability

The D-Link DIR-825 is a router from AUO D-Link of Taiwan, China. An information disclosure vulnerability exists in the D-Link DIR-825 version 2.10. An attacker can exploit the vulnerability to disclose PIN, MAC address, routing table, firmware version, update time, quality of service information,...

PT-2019-6348 · D Link · Dir-825

Name of the Vulnerable Software and Affected Versions: D-Link DIR-825 versions 2.10 Description: The issue is related to a lack of protection for service data, which can be exploited by a remote attacker to disclose protected information by requesting the router info.xml document. This can reveal...

No One is Safe: the Five Most Popular Social Engineering Attacks Against Your Company’s Wi-Fi Network

Your Wi-Fi routers and access points all have strong WPA2 passwords, unique SSIDs, the latest firmware updates, and even MAC address filtering. Good job, networking and cybersecurity teams! However, is your network truly protected? TL;DR: NO! In this post, I’ll cover the most common social...

Rockwell Automation PowerMonitor Detection (HTTP)

HTTP based detection of Rockwell Automation PowerMonitor devices. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Uncle Spufus - A Tool That Automates Mac Address Spoofing

A tool that automates Mac address spoofing What is Uncle Spufus Uncle Spufus is a tool that automates MAC address spoofing. To do so it tries various techniques and checks if the MAC is successfully spoofed. It makes of: macchanger bash Installing Uncle Spufus 1a. Download the zip b. Extract OR 1...

Moderate: Red Hat Security Advisory: openvswitch security and bug fix update

An update for openvswitch is now available for Red Hat OpenStack Platform 13.0 Queens. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Timing Side- Channel Attack

OpenSSL is vulnerable to timing attacks. It happens because of lack of validation of MAC addresses in constant time during the processing of a malformed CBC padding. It is also known as "Lucky Thirteen" issue...