CVE-2018-12551

When Eclipse Mosquitto version 1.0 to 1.5.5 inclusive is configured to use a password file for authentication, any malformed data in the password file will be treated as valid. This typically means that the malformed data becomes a username and no password. If this occurs, clients can circumvent...

CVE-2018-12551

When Eclipse Mosquitto version 1.0 to 1.5.5 inclusive is configured to use a password file for authentication, any malformed data in the password file will be treated as valid. This typically means that the malformed data becomes a username and no password. If this occurs, clients can circumvent...

ALPINE-CVE-2019-9948

urllib in Python 2.x through 2.7.16 supports the localfile: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen'localfile:///etc/passwd' call...

Security update for mosquitto (low)

openSUSE Security Update: Security update for mosquitto Announcement ID: openSUSE-SU-2019:0237-1 Rating: low References: 1125019 1125020 1125021 Cross-References: CVE-2018-12546 CVE-2018-12550 CVE-2018-12551 Affected Products: openSUSE Backports SLE-15 An update that fixes three vulnerabilities i...

Authentication Bypass

Mosquitto is vulnerable to authentication bypass due to incorrect data validation. Clients are granted access to the broker because it incorrectly validated empty lines or malformed data in the password file, treating such data as a valid username and allowing an attacker to bypass authentication...

Zyxel VMG1312-B10D 5.13AAXA.8 Directory Traversal

Exploit Title: Zyxel VMG1312-B10D 5.13AAXA.8 - Directory Traversal Date: 2018-11-17 Exploit Author: numan tA1/4rle Vendor Homepage: https://www.zyxel.com/ Software Link: https://www.zyxel.com/productsservices/Wireless-N-VDSL2-4-port-Gateway-with-USB-VMG1312-B10D/ Tested on: macOS Fixed firmware:...

Default credentials

If a user saved passwords before Firefox 58 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stored password file was not deleted when the data was copied to a new format starting in Firefox 58. The new master password is...

Mozilla: Setting a master password post-Firefox 58 does not delete unencrypted previously stored passwords

If a user saved passwords before Firefox 58 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stored password file was not deleted when the data was copied to a new format starting in Firefox 58. The new master password is...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2018-21812)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 62, which originates from the program's failure to delete a previously stored password file. A remote attacker could exploit...

Acccheck Command Injection Vulnerability

acccheck is a suite of password brute force tools used in penetration testing to perform Windows authentication over the SMB protocol. A command injection vulnerability exists in the acccheck.pl file in version 0.2.1, which stems from the program's lack of filtering of user input. The vulnerabili...

Command injection

acccheck.pl in acccheck 0.2.1 allows Command Injection via shell metacharacters in a username or password file, as demonstrated by injection into an smbclient command line...

CVE-2018-12268

CVE-2018-12268 affects acccheck 0.2.1; vulnerable component is acccheck.pl, allowing Command Injection via shell metacharacters in a username or password file, as demonstrated by an injected smbclient command line. Root cause: lack of input filtering/validation. Impact: remote code execution with...

CVE-2017-9664

In ABB SREA-01 revisions A, B, C: application versions up to 3.31.5, and SREA-50 revision A: application versions up to 3.32.8, an attacker may access internal files of ABB SREA-01 and SREA-50 legacy remote monitoring tools without any authorization over the network using a HTTP request which...

CVE-2017-9664

In ABB SREA-01 revisions A, B, C: application versions up to 3.31.5, and SREA-50 revision A: application versions up to 3.32.8, an attacker may access internal files of ABB SREA-01 and SREA-50 legacy remote monitoring tools without any authorization over the network using a HTTP request which...

UbiQuoss Switch VP5208A Unauthorized Operation Vulnerability

UbiQuoss Switch VP5208A is a switch product from UbiQuoss Korea. A security vulnerability exists in the UbiQuoss Switch VP5208A, which originates from a user login failure where the program creates a bcmpassword file with user credentials in plaintext in /cgi-bin/. An attacker can obtain the...

Code execution vulnerability in ykcms

YKCMS is a novel as the core, drawing on the existing market in the various types of novel program, both collection, thief, storage and other features, developed out of the semi-collection mode novel system. ykcms v4.0.40 version of the existence of code execution vulnerabilities, in the change o...

Design/Logic Flaw

Password file exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to execute arbitrary commands with administrative privileges by retrieving credentials from this file...

CVE-2017-13664

CVE-2017-13664 affects iSmartAlarm CubeOne firmware prior to 2.2.4.8. The issue: a password file exposure in the firmware enables an attacker to retrieve credentials and execute arbitrary commands with administrative privileges. Impact described as arbitrary command execution with admin rights, e...

CVE-2017-13664

Password file exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to execute arbitrary commands with administrative privileges by retrieving credentials from this file...

CVE-2017-2691

Huawei P9 versions earlier before EVA-AL10C00B373, versions earlier before EVA-CL00C92B373, versions earlier before EVA-DL00C17B373, versions earlier before EVA-TL00C01B373 have a lock-screen bypass vulnerability. An unauthenticated attacker could force the phone to the fastboot mode and delete t...