Lucene search
K

364 matches found

The Hacker News
The Hacker News
added 2018/11/25 6:46 p.m.2 views

How to Hack WiFi Password Easily Using New Attack On WPA/WPA2

Looking for how to hack WiFi password OR WiFi hacking software? Well, a security researcher has revealed a new WiFi hacking technique that makes it easier for hackers to crack WiFi passwords of most modern routers. Discovered by the lead developer of the popular password-cracking tool Hashcat, Je...

6.8AI score
Exploits0
OSV
OSV
added 2018/09/19 7:29 p.m.3 views

CVE-2018-3825

In Elastic Cloud Enterprise ECE versions prior to 1.1.4 a default master encryption key is used in the process of granting ZooKeeper access to Elasticsearch clusters. Unless explicitly overwritten, this master key is predictable across all ECE deployments. If an attacker can connect to ZooKeeper...

5.9CVSS5.8AI score0.00555EPSS
Exploits0References2
Schneier on Security
Schneier on Security
added 2018/04/30 11:2 a.m.40 views

Security Vulnerabilities in VingCard Electronic Locks

Researchers have disclosed a massive vulnerability in the VingCard eletronic lock system, used in hotel rooms around the world: With a $300 Proxmark RFID card reading and writing tool, any expired keycard pulled from the trash of a target hotel, and a set of cryptographic tricks developed over...

0.4AI score
Exploits0
HackRead
HackRead
added 2018/04/26 2:34 p.m.52 views

Master Key Hack Exploits Flaw in Key System to Unlock Hotel Rooms

By Waqas The master key hack has the capability of unlocking not This is a post from HackRead.com Read the original post: Master Key Hack Exploits Flaw in Key System to Unlock Hotel Rooms...

1.6AI score
Exploits0
The Hacker News
The Hacker News
added 2018/04/26 9:36 a.m.2 views

Hackers build a 'Master Key' that unlocks millions of Hotel rooms

If you often leave your valuable and expensive stuff like laptop and passports in the hotel rooms, then beware. Your room can be unlocked by not only a malicious staff having access to the master key, but also by an outsider. A critical design vulnerability in a popular and widely used electronic...

6.9AI score
Exploits0
The Hacker News
The Hacker News
added 2018/04/26 9:36 a.m.119 views

Hackers build a 'Master Key' that unlocks millions of Hotel rooms

If you often leave your valuable and expensive stuff like laptop and passports in the hotel rooms, then beware. Your room can be unlocked by not only a malicious staff having access to the master key, but also by an outsider. A critical design vulnerability in a popular and widely used electronic...

7.3AI score
Exploits0
ATTACKERKB
ATTACKERKB
added 2018/04/04 12:29 a.m.4 views

CVE-2018-9234

GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey...

7.5CVSS5.5AI score0.02082EPSS
Exploits0References4
OSV
OSV
added 2018/04/04 12:29 a.m.4 views

DEBIAN-CVE-2018-9234

GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey...

7.5CVSS6.8AI score0.02082EPSS
Exploits0References1
OSV
OSV
added 2018/04/04 12:29 a.m.9 views

CVE-2018-9234

GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey...

7.5CVSS7.5AI score
Exploits0References2
OSV
OSV
added 2018/04/03 12:0 a.m.2 views

UBUNTU-CVE-2018-9234

GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey...

7.5CVSS6.8AI score0.02082EPSS
Exploits0References3
Veracode
Veracode
added 2017/02/06 2:50 a.m.38 views

Information Disclosure

OpenSSL is vulnerable to decryption oracle attacks. A malicious user on the network can use the server as an oracle to determine the SSLv2 master key...

5.9CVSS5.9AI score0.05398EPSS
Exploits1References32Affected Software2
Fedora
Fedora
added 2016/09/01 1:39 p.m.42 views

[SECURITY] Fedora 25 Update: keepass-2.34-1.fc25

KeePass is a free open source password manager, which helps you to remember your passwords in a secure way. You can put all your passwords in one database, which is locked with one master key or a key file. You only have to remember one single master password or select the key file to unlock the...

7.5CVSS0.9AI score0.02347EPSS
Exploits1
CNVD
CNVD
added 2016/07/12 12:0 a.m.3 views

IBM Control Center and Sterling Control Center Key Cracking Vulnerability

IBM Control Center and Sterling Control Center are both file transfer control and management tools from IBM USA. The tools provide a unified view of the file transfer environment, environment exception response, and other features. A key cracking vulnerability exists in IBM Control Center version...

5.1CVSS6.4AI score0.00259EPSS
Exploits0References1
OSV
OSV
added 2016/07/08 1:59 a.m.2 views

CVE-2016-0252

IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via unspecified vectors...

5.1CVSS5.8AI score0.00259EPSS
Exploits0References1
NVD
NVD
added 2016/07/08 1:59 a.m.10 views

CVE-2016-0252

IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via unspecified vectors...

5.1CVSS5AI score0.00259EPSS
Exploits0References1
Prion
Prion
added 2016/07/08 1:59 a.m.10 views

Code injection

IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via unspecified vectors...

1.9CVSS6.6AI score0.00259EPSS
Exploits0References1Affected Software2
ATTACKERKB
ATTACKERKB
added 2016/07/08 1:59 a.m.5 views

CVE-2016-0252

IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via unspecified vectors...

5.1CVSS5.6AI score0.00259EPSS
Exploits0References2
CVE
CVE
added 2016/07/08 1:0 a.m.42 views

CVE-2016-0252

IBM Control Center and Sterling Control Center are affected by CVE-2016-0252. Affected: IBM Control Center 5.4.0–5.4.2.1 iFix08 and 6.0.0.0–6.0.0.1 iFix05. Root cause: vulnerability allows a local attacker to decrypt the master key under certain conditions, potentially enabling decryption of appl...

5.1CVSS4.9AI score0.00259EPSS
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.4 views

Vulnerability of Cisco ASA software, allowing a malicious actor to intercept sessions

The vulnerability exists in OpenSSL due to an improper limitation on the processing of ChangeCipherSpec messages. Exploiting this vulnerability allows a malicious actor to induce the use of a null-length master key in the OpenSSL-to-OpenSSL communication, thereby intercepting the session or gaini...

4.3CVSS6.9AI score0.95326EPSS
Exploits9References24
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.3 views

The vulnerability of Cisco IPS software allows a malicious actor to intercept sessions.

The vulnerability exists in OpenSSL due to an improper limitation on the processing of ChangeCipherSpec messages. Exploiting this vulnerability allows a malicious actor to induce the use of a null-length master key in the OpenSSL-to-OpenSSL communication, thereby intercepting the session or gaini...

4.3CVSS6.9AI score0.95326EPSS
Exploits9References24Affected Software1
Rows per page
Query Builder