opensvp

======= Opensvp Introduction Opensvp is a security tool implementing "attacks" to be able to test the resistance of firewall to protocol level attack. It implements classic attacks as well as some new kind of attacks against application layer gateway called helper in the Netfilter world. For...

Cisco ASA Insufficient Session Expiration (CVE-2021-1501)

A vulnerability in the SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affected device, resulting in a denial of service DoS condition.The...

E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands

Cybersecurity researchers are calling attention to a new campaign that employs FTP banners as dead drop resolvers DDRs to deliver two previously unreported remote access trojans RATs tracked as E4del and PINHOLE. While threat actors are known to abuse legitimate services to point to additional...

CVE-2026-17612

The CVE-2026-17612 affects Honeywell S35 Series cameras (3M/5M/8M/PinHole) with firmware versions up to HC5.26.1.14.20260207. The vulnerability enables an unauthenticated attacker to access audit logs, potentially exposing sensitive information. Attack vector is NETWORK with low attack complexity...

CVE-2026-17612: Exposure of Sensitive Information to an Unauthorized Actor

Honeywell S35 Series 3M/5M/8M/PinHole Cameras, all versions prior to and including version HC5.26.1.14.20260207 contains an audit log disclosure Vulnerability that could allow an attacker to access audit logs without authentication, potentially resulting in the disclosure of sensitive information...

CVE-2025-12351

CVE-2025-12351 affects Honeywell S35 Series Cameras. The issue is an authorization bypass via the User controller key that could enable privilege escalation to admin-level functionalities. Affected products are S35 Pinhole/Kit Camera (versions prior to 2025.08.28), S35 AI Fisheye & Dual Sensor/Mi...

Say Hello to Crazy Thin ‘Deep Insert’ ATM Skimmers

A number of financial institutions in and around New York City are dealing with a rash of super-thin "deep insert" skimming devices designed to fit inside the mouth of an ATMs card acceptance slot. The card skimmers are paired with tiny pinhole cameras that are cleverly disguised as part of the...

CVE-2021-1501

A vulnerability in the SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affected device, resulting in a denial of service DoS condition.The...

CVE-2021-1501: Insufficient Session Expiration

A vulnerability in the SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affected device, resulting in a denial of service DoS condition.The...

PT-2021-2790 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the SIP inspection engine could allow an unauthenticate...

Man Sentenced in ATM Skimming Conspiracy

A New York state man has been sentenced to five years for an elaborate ATM skimming conspiracy that allowed him to steal at least $390,141 from victims. Bogdan Rusu, 39, of Queens, NY pleaded guilty to participating in the scheme, which used secret card-reading devices and pinhole cameras on...

MiniUPnP MiniUPnPd code issue vulnerability (CNVD-2019-14713)

MiniSSDPd is a daemon for managing SSDPs on Posix systems. MiniUPnP A code issue vulnerability exists in the GetOutboundPinholeTimeout of the upnpsoap.c file used for remport in MiniUPnP MiniUPnPd 2.1 and earlier versions. The vulnerability stems from an improperly designed or implemented code...

UBUNTU-CVE-2019-12109

A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for remport...

UBUNTU-CVE-2019-12108

A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for intport...

DEBIAN-CVE-2019-12109

A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for remport...

DEBIAN-CVE-2019-12108

A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for intport...

MiniUPnP MiniUPnPd code issue vulnerability (CNVD-2019-14712)

MiniSSDPd is a daemon for managing SSDPs on Posix systems. MiniUPnP A code issue vulnerability exists in the GetOutboundPinholeTimeout of the upnpsoap.c file used for intport in MiniUPnP MiniUPnPd 2.1 and earlier versions. The vulnerability stems from an improperly designed or implemented code...

Secret Service Warns of Surge in ATM ‘Wiretapping’ Attacks

The U.S. Secret Service is warning financial institutions about a recent uptick in a form of ATM skimming that involves cutting cupcake-sized holes in a cash machine and then using a combination of magnets and medical devices to siphon customer account data directly from the card reader inside th...