7661 matches found
A week in security (April 23 – April 29)
Last week, we dug into behavioral biometrics, explored a new crossrider variant, and embraced the power of "no." We also launched another CrackMe challenge, took a deep dive into smart toys, and finished up with a look at digital privacy in the age of IoT. Other news LinkedIn does battle with...
Security Vulnerabilities in VingCard Electronic Locks
Researchers have disclosed a massive vulnerability in the VingCard eletronic lock system, used in hotel rooms around the world: With a $300 Proxmark RFID card reading and writing tool, any expired keycard pulled from the trash of a target hotel, and a set of cryptographic tricks developed over...
Master Key Hack Exploits Flaw in Key System to Unlock Hotel Rooms
By Waqas The master key hack has the capability of unlocking not This is a post from HackRead.com Read the original post: Master Key Hack Exploits Flaw in Key System to Unlock Hotel Rooms...
Hackers build a 'Master Key' that unlocks millions of Hotel rooms
If you often leave your valuable and expensive stuff like laptop and passports in the hotel rooms, then beware. Your room can be unlocked by not only a malicious staff having access to the master key, but also by an outsider. A critical design vulnerability in a popular and widely used electronic...
Hackers build a 'Master Key' that unlocks millions of Hotel rooms
If you often leave your valuable and expensive stuff like laptop and passports in the hotel rooms, then beware. Your room can be unlocked by not only a malicious staff having access to the master key, but also by an outsider. A critical design vulnerability in a popular and widely used electronic...
Blog Master Pro 1.0 - CSV Injection
Exploit Title: Blog Master Pro v1.0 - CSV Injection Date: 2018-04-23 Exploit Author: 8bitsec CVE: CVE-2018-10255 Vendor Homepage: https://codecanyon.net/ Software Link: https://codecanyon.net/item/blog-master-pro/21689781 Version: 1.0 Tested on: Kali Linux 2.0 | Mac OS 10.13 Release Date:...
Account Impersonation
salt is vulnerable to account impersonation attack. When the salt-minions get compromised, it can impersonate as salt-master...
UBUNTU-CVE-2017-7893
In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master...
PYSEC-2018-50
In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master...
Design/Logic Flaw
In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master...
CVE-2017-7893
In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master...
CVE-2017-7893
Affected product: SaltStack Salt up to version 2016.3.6. Issue: compromised salt-minions can impersonate the salt-master, enabling impersonation of the master and potential leakage or manipulation of configurations. Impact: per NVD metrics, base CVSSv3 of 9.8 (CRITICAL) with network attack, low c...
Passit: app.passit.io is vulnerable against Brute Force password quessing attack
Summary: app.passit.io is vulnerable against Brute Force password quessing attack Description: Hello! I have found out that your login functionality is vulnerable against brute force attack. This is especially dangerous in your case because an attacker can get all of users passwords if they brute...
kernel: Buffer over-read in keyring subsystem allows exposing potentially sensitive information to local attacker
A flaw has been identified in the Linux kernel's implementation of validmasterdesc in which a memory buffer would be compared to a userspace value with an incorrect size of comparison. By bruteforcing the comparison, an attacker could determine what was in memory after the description and possibl...
Allen Bradley Micrologix 1400 Series B FRN Access Control Vulnerability (CNVD-2018-08286)
Allen Bradley Micrologix 1400 Series B FRN is a programmable logic controller from Rockwell Automation. An access control vulnerability exists in the Data, Program, and Function File Permissions feature in Allen Bradley Micrologix 1400 Series B FRN 21.2 and earlier. An attacker could exploit the...
Allen Bradley Micrologix 1400 Series B FRN Access Control Vulnerability (CNVD-2018-08277)
Allen Bradley Micrologix 1400 Series B FRN is a programmable logic controller from Rockwell Automation. An access control vulnerability exists in the data, program, and function file permissions function in the Allen Bradley Micrologix 1400 Series B FRN 21.2 and earlier. An attacker can exploit t...
CVE-2017-14472
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...
Improper access control
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...
CVE-2017-14466
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...
CVE-2018-1000146
An arbitrary code execution vulnerability exists in Liquibase Runner Plugin version 1.3.0 and older that allows an attacker with permission to configure jobs to load and execute arbitrary code on the Jenkins master JVM...