Container theft, the legal system and poor maritime security

One of the most interesting legal cases I’ve read recently involves a theft of two containers of cobalt metal briquettes from a terminal at the port of Antwerp. Original judgment: Appeal: What drew me to this case was the amount of useful data that had entered the public domain concerning a crime...

September 20, 2018—KB4457141 (OS Build 15063.1358)

None None...

LG SuperSign CMS Authentication Bypass Vulnerability

LG SuperSign CMS is a content management system for LG webOS from the Luckin LG Group in Korea. The system supports connection to external databases and allows access to the server from mobile devices. An authentication bypass vulnerability exists in LG SuperSign CMS, which can be exploited by an...

CVE-2018-16286

LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits...

Authentication flaw

LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits...

CVE-2018-16286

LG SuperSign CMS suffers an authentication bypass: if a captcha:pass cookie is present and the PIN is limited to four digits, CAPTCHA is skipped and access can be gained without proper authentication. Multiple sources (NVD/NVD-derived records and CNVD) describe this flaw and its impact; CVSS metr...

CVE-2018-16286

LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits...

Hackers Can Steal a Tesla Model S in Seconds by Cloning Its Key Fob

Weak encryption in the cars' key fobs allows all-too-easy theft, but you can set a PIN code on your Tesla to protect it...

TeamViewer Authentication Bypass Vulnerability (Sep 2018) - Windows

TeamViewer is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

TeamViewer Authentication Bypass Vulnerability (Sep 2018) - Mac OS X

TeamViewer is prone to an authentication bypass vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

Authentication flaw

TeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by skipping the "Cancel" step, which makes it easier to determine the correct value of the default 4-digit PIN...

CVE-2018-16550

TeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by skipping the "Cancel" step, which makes it easier to determine the correct value of the default 4-digit PIN...

CVE-2018-16550

TeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by skipping the "Cancel" step, which makes it easier to determine the correct value of the default 4-digit PIN...

pin-computers.hr XSS vulnerability

Open Bug Bounty ID: OBB-664893 Description| Value ---|--- Affected Website:| pin-computers.hr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Microsoft Windows: Turn on convenience PIN sign-in

This policy setting allows you to control whether a domain user can sign in using a convenience PIN. If you enable this policy setting, a domain user can set up and sign in with a convenience PIN. If you disable or don SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be...

Dixons Carphone Data Breach Affects 10 Million Customers

Dixons Carphone's 2017 data breach was worse than initially anticipated. In an announcement on Monday, Dixons Carphone, one of the largest consumer electronics and telecommunication retailers in Europe, admitted that the breach affected around 10 million customers, up from an initial estimate of...

Microsoft Windows 10: Require pin for pairing

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winrequirepinpairing.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Require pin for pairing Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Windows: Require additional authentication at startup (TPM startup key and PIN)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winaddauthtpmstartuppinkey.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Require additional authentication at startup: Configure TPM startup key and PIN Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone...

Microsoft Windows: Require additional authentication at startup (TPM startup PIN)

This policy setting allows you to configure whether BitLocker requires additional authentication each time the computer starts and whether you are using BitLocker with or without a Trusted Platform Module TPM. This policy setting is applied when you turn on BitLocker. Note: Only one of the...

PayPal Inc - Security Key Pin Approval & Expire Bypass

Document Title: =============== PayPal Inc - Security Key Pin Approval & Expire Bypass References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1666 Release Date: ============= 2018-06-26 Vulnerability Laboratory ID VL-ID: ==================================== 166...