1601 matches found
CVE-2014-0079
The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 7.1.8, 6.20.0, and earlier, when using certain build conditions, allows remote attackers to cause a denial of service crash via vectors related to "a NULL pointer of the password."...
Tesla Cars Can Be Hacked to Locate and Unlock Remotely
Smart Phones, Smart TVs, Smart Refrigerators, even Smart Cars! When it comes to Smart devices, we simply provide them the master control of various tasks to make our life easy and more comfortable, unaware about its worst impact. At the starting of last month we reported that by using a $20 toolk...
eWebwamEditorbo 弱密码漏洞
No description provided by source...
[SECURITY] [DSA 2758-1] python-django security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2758-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso September 17, 2013 http://www.debian.org/security/faq -...
Apple iOS Default SSH Password Vulnerability
This module exploits the default credentials of Apple iOS when it has been jailbroken and the passwords for the 'root' and 'mobile' users have not been changed. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require...
Huawei networking equipment weak password cipher
Overview Huawei networking equipment use a DES encryption algorithm for password and encryption. DES is publicly known to be easily cracked. Description Huawei Security Advisory Huawei-SA-20120827-01-CX600 states:In multiple Huawei products, DES encryption algorithm is used for password and the...
sos security update
CentOS Errata and Security Advisory CESA-2013:1121 An updated sos package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score,...
Oracle Linux 4 : busybox (ELSA-2007-0244)
From Red Hat Security Advisory 2007:0244 : Updated busybox packages that fix a security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Busybox is a single binary which includes versions of a large number of system commands,...
1 3 9 mailbox of the user experience center of the back of the weak password vulnerability warning-the black bar safety net
Brief description: Administrator password security awareness is weak, password is too simple. Detailed description: The background of the page easily obtained. http://uec.mail.10086.cn/admin/login.jsp User password: admin directly to the background, Vulnerability proof: ! !...
CentOS 4 : busybox (CESA-2007:0244)
Updated busybox packages that fix a security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Busybox is a single binary which includes versions of a large number of system commands, including a shell. This package can be...
CVE-2012-4952
CVE-2012-4952 affects Henry Schein Dentrix G5 prior to 15.1.294. The root cause is a hard-coded internal database password shared across multiple installations, enabling an attacker who obtains credentials from one site to access databases at other sites. The impact is potential disclosure of sen...
Multiple Vulnerabilities in D'Link DIR-615 - Hardware revision D3 / DIR-300 - Hardware revision A
Device Name: DIR-615 - Hardware revision D3 / DIR-300 - Hardware revision A Vendor: D-Link ============ Device Description: ============ DIR-300: http://www.dlink.com/de/de/home-solutions/connect/routers/dir-300-wirele... DIR-615:...
Road passenger Baba stored in plain text and any password get-vulnerability warning-the black bar safety net
Brief description: Password stored in plain text plus cross-site worms, you know Detailed description: Register road passenger Baba sent a message, the message content for the test code as /textareascriptalertdocumeng. cookie/script I registered two account xxoo2013 and xxoo2014, the password is ...
D-Link DIR-600 / DIR-300 Command Execution / Bypass / Disclosure
D-Link DIR-600 and DIR-300 suffer insecure cryptographic storage, remote command execution, information disclosure, and insecure password changing vulnerabilities. Device Name: DIR-600 / DIR 300 - HW rev B1 Vendor: D-Link ============ Vulnerable Firmware Releases - DIR-300: ============ Firmware...
The use of passwords in a technological evolution
Every day we read about an incredible number of successful attacks and data breaches that exploited leak of authentication mechanisms practically in every sector. Often also critical control system are exposed on line protected only by a weak password, in many cases the default one of factory...
The use of passwords in a technological evolution
Every day we read about an incredible number of successful attacks and data breaches that exploited leak of authentication mechanisms practically in every sector. Often also critical control system are exposed on line protected only by a weak password, in many cases the default one of factory...
Format string
Agile FleetCommander and FleetCommander Kiosk before 4.08 use an XOR format for password encryption, which makes it easier for context-dependent attackers to obtain sensitive information by reading a key file and the encrypted strings...
PT-2015-09: Information Disclosure in Siemens SIMATIC STEP 7 (TIA Portal)
The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Siemens SIMATIC STEP 7 TIA Portal. Device user passwords in TIA portal project files are stored using a weak hashing algorithm. Attackers with read access to the project file could possibly...
CVE-2012-2994
The CoSoSys Endpoint Protector 4 appliance establishes an EPProot password based entirely on the appliance serial number, which makes it easier for remote attackers to obtain access via a brute-force attack...