CVE-2022-33735

There is a password verification vulnerability in WS7200-10 11.0.2.13. Attackers on the LAN may use brute force cracking to obtain passwords, which may cause sensitive system information to be disclosed...

CVE-2022-33735

There is a password verification vulnerability in WS7200-10 11.0.2.13. Attackers on the LAN may use brute force cracking to obtain passwords, which may cause sensitive system information to be disclosed...

CVE-2022-33735

Summary (CVE-2022-33735) Huawei WS7200-10 devices (11.0.2.13) on LAN are affected by a password verification vulnerability due to an incorrect authentication algorithm implementation. Attackers on the LAN can perform brute-force attempts to obtain passwords, potentially leading to disclosure of s...

CVE-2022-2302

Multiple Lenze products of the cabinet series skip the password verification upon second login. After a user has been logged on to the device once, a remote attacker can get full access without knowledge of the password...

CVE-2022-2302

CVE-2022-2302 affects Lenze cabinet series (c520, c550, c750) with firmware versions V01.07.00.2757 through V01.08.01.3021. The root cause is skipping password verification during second login, allowing a remote attacker who has an authenticated session to gain full access without knowing the pas...

Toll fraud malware: How an Android application can drain your wallet

Toll fraud malware, a subcategory of billing fraud in which malicious applications subscribe users to premium services without their knowledge or consent, is one of the most prevalent types of Android malware – and it continues to evolve. Compared to other subcategories of billing fraud, which...

CVE-2022-29270

In Nagios XI through 5.8.5, it is possible for a user without password verification to change his e-mail address...

CVE-2022-29270

In Nagios XI through 5.8.5, it is possible for a user without password verification to change his e-mail address...

CVE-2022-29270

In Nagios XI through 5.8.5, it is possible for a user without password verification to change his e-mail address...

CVE-2022-29270

In Nagios XI through 5.8.5, it is possible for a user without password verification to change his e-mail address...

CVE-2022-29270

CVE-2022-29270 affects Nagios XI (<= 5.8.5). The vulnerability allows a user without password verification to change their own e‑mail address, indicating an authentication bypass at the account-management layer. The NVD data lists CVSS v3.1 base score 4.3 (LOW) with NETWORK attack vector and n...

PT-2022-19512 · Nagios · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI versions 5.8.5 and earlier Description: The issue allows a user to change their e-mail address without password verification. Recommendations: For Nagios XI versions 5.8.5 and earlier, at the moment, there is no information about a...

InvenTree Deploys a Weak Password Change Mechanism

Description When setting a new user password, InvenTree does not require knowledge of the original password or using another form of authentication. Proof of Concept 1. Log in as a regular user 2. Go to the account settings link 3. Select Set Password 4. Enter any 8-character password string this...

CVE-2022-29700

A lack of password length restriction in Zammad v5.1.0 allows for the creation of extremely long passwords which can cause a Denial of Service DoS during password verification...

The vulnerability of the administration interface of the Cisco Wireless LAN Controller allows a perpetrator to increase their privileges.

The vulnerability of the Cisco Wireless LAN Controller administration interface is related to errors in the implementation of the password verification algorithm. Exploiting this vulnerability can allow an attacker to enhance their privileges using specially crafted credentials...

CVE-2021-46390

An access control issue in the authentication module of LexarF35 v1.0.34 allows attackers to access sensitive data and cause a Denial of Service DoS. An attacker without access to securely protected data on a secure USB flash drive can bypass user authentication without having any information...

CVE-2021-46390

An access control issue in the authentication module of LexarF35 v1.0.34 allows attackers to access sensitive data and cause a Denial of Service DoS. An attacker without access to securely protected data on a secure USB flash drive can bypass user authentication without having any information...

The vulnerability of the microprogrammed Ethernet module WISE-4060 and Adam-6050 D lies in the lack of input password verification procedures, allowing attackers to gain full access to the device with administrator privileges.

The vulnerability of the Microprogrammed Ethernet module WISE-4060 and Adam-6050 D lies in the deficiencies in the input password verification process. Exploiting this vulnerability allows a malicious actor to gain full access to the device with administrator privileges through a specially crafte...

WhatsApp to Finally Let Users Encrypt Their Chat Backups in the Cloud

WhatsApp on Friday announced it will roll out support for end-to-end encrypted chat backups on the cloud for Android and iOS users, paving the way for storing information such as chat messages and photos in Apple iCloud or Google Drive in a cryptographically secure manner. The optional feature,...

The vulnerability of the microprogrammed Ethernet switch software from Moxa EDS-405A series lies in the fact that the output operation goes beyond the buffer on the stack, allowing a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the microprogrammed Ethernet switch software from Moxa EDS-405A series lies in the fact that the operation is performed outside the buffer on the stack during password verification. Exploiting this vulnerability allows a malicious actor to cause service failures or execute...