1045 matches found
CVE-2018-11548
An issue was discovered in EOS.IO DAWN 4.2. plugins/netplugin/netplugin.cpp does not limit the number of P2P connections from the same source IP address...
CVE-2018-11548
CVE-2018-11548 affects EOS.IO DAWN 4.2. The vulnerability lies in plugins/net_plugin/net_plugin.cpp not limiting the number of P2P connections from a single source IP, potentially enabling denial of service. Documented across multiple sources (Red Hat, CNVD, OSV, NVD) with DoS implications and CV...
CVE-2018-11548: Improper Input Validation
An issue was discovered in EOS.IO DAWN 4.2. plugins/netplugin/netplugin.cpp does not limit the number of P2P connections from the same source IP address...
PT-2018-10655
Name of the Vulnerable Software and Affected Versions EOS.IO DAWN version 4.2 Description An issue was discovered in EOS.IO DAWN where the net plugin does not limit the number of P2P connections from the same source IP address, potentially leading to issues. Recommendations For EOS.IO DAWN versio...
Securing financial data of the future: behavioral biometrics explained
Some of us would be pretty excited about a brave, new passwordless world. Gone would be the days of having to write down 27 passwords and post them beside monitor screens. Or having to yell them out loud to a colleague on the other side of the room. For banks and other financial institutions, a...
A week in security (March 26 – April 01)
Last week, we looked at the thought process behind creating a ransomware decryptor, the inner workings of QuantLoader, the ways one can protect their Android devices, the exploit kits we have encountered this winter, the now-known epidemic of data breaches, the coming of TLS 1.3, and the ways one...
You down with P2P? 10 tips to secure your mobile payment app
If you look at the figures, you cannot deny that the eCommerce industry is steadily growing. More and more people are doing their shopping online, not only for products and services geared toward the use of technologies and the Internet, but also for items previously only found in brick and morta...
PT-2018-6643
Name of the Vulnerable Software and Affected Versions: Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description: The issue is related to improper input validation for fix...
A state of constant uncertainty or uncertain constancy? Fast flux explained
Last August, WireX made headlines. For one thing, it was dubbed the first-known DDoS botnet that used the Android platform. For another, it used a technique that—for those who have been around in the industry for quite a while now—rung familiar in the ears: fast flux. In the context of...
VulnCheck KEV: CVE-2017-8225
On Wireless IP Camera P2P WIFICAM devices, access to .ini files containing credentials is not correctly checked. An attacker can bypass authentication by providing an empty loginuse parameter and an empty loginpas parameter in the URI...
Password Bypass Vulnerability in Yoosee APP for Android
Yoosee is a free APP customized for the new generation of smart home products by Shenzhen GW Times, which adopts the advanced Cloudlink P2P network transmission technology. There is a password bypass vulnerability in the Android version of Yoosee APP, which can be exploited by an attacker to...
PT-2017-3616
Name of the Vulnerable Software and Affected Versions: Android for MSM versions affected versions not specified QRD Android versions affected versions not specified All Android releases from CAF using the Linux kernel versions affected versions not specified Description: The issue is related to t...
Private Internet Access – Get a Secure VPN to Protect Your Online Privacy
Since most of us rely upon the Internet for day-to-day activities today, hacking and spying have become a prime concern, and so have online security and privacy. The Internet has become a digital universe with websites collecting your sensitive information and selling them to advertisers, hackers...
JETCO Pay P2P Collect - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application JETCO Pay P2P Collect published at the 'play' market has multiple vulnerabilities...
Wireless IP Camera (P2P) WIFICAM Cameras Remote Code Execution
A code execution vulnerability exists in multiple Wireless IP Camera P2P WIFICAM cameras. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2017-8224
Wireless IP Camera P2P WIFICAM devices have a backdoor root account that can be accessed with TELNET...
CVE-2017-8225
On Wireless IP Camera P2P WIFICAM devices, access to .ini files containing credentials is not correctly checked. An attacker can bypass authentication by providing an empty loginuse parameter and an empty loginpas parameter in the URI...
CVE-2017-8223
Wireless IP Camera (P2P) WIFICAM devices are vulnerable to an improper authentication flaw in the RTSP server on port 10554/tcp . An attacker can exploit this by accessing tcp/av0_1 or tcp/av0_0 to watch the camera's live streaming without any authentication. While the RTSP flaw is the primary fo...
CVE-2017-8225
The Wireless IP Camera (P2P) WIFICAM devices are vulnerable to an authentication bypass in the GoAhead embedded web server. This flaw allows unauthenticated remote attackers to access the system.ini configuration file, which contains sensitive credentials such as usernames and passwords. The vuln...