2305 matches found
Canon LBP7110Cw Access Control Vulnerability
The Canon LBP7110Cw is a color laser printer device from Canon Japan. A security vulnerability exists in the web interface in the Canon LBP7110Cw. The vulnerability can be exploited by an attacker to bypass the administrative mode and gain full access to the device without a PIN...
Canon MF210/MF220 Series Printers Access Bypass Vulnerability (Apr 2018)
Canon MF210/MF220 Series Printers are prone to an access bypass vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program ...
CVE-2018-11711
A remote attacker can bypass the System Manager Mode on the Canon MF210 and MF220 web interface without knowing the PIN for /login.html via vectors involving /portaltop.html to get full access to the device. NOTE: the vendor reportedly responded that this issue occurs when a customer keeps the...
CVE-2018-11711
CVE-2018-11711 describes a remote bypass of System Manager Mode on Canon MF210/MF220 web interfaces. An unauthenticated attacker can access without a PIN by leveraging vectors involving /portal_top.html (and related /login.html) to obtain full device access. Exploitation is demonstrated in public...
foilChat Sign Up Email PIN Confirmation Bypass
foilChat sign up email PIN confirmation bypass ============================================== https://sintonen.fi/advisories/foilchat-signup-email-pin-confirmation-bypass.txt Overview -------- foilChat https://www.foilchat.com/ allows anyone to register with any email address due to a...
SimpliSafe Original Information Disclosure Vulnerability (CNVD-2018-10490)
SimpliSafe Original is a home security management system. The system includes video surveillance and intrusion alarms, among other things. A security vulnerability exists in SimpliSafe Original that stems from a failure to encrypt transmissions. An attacker in close physical proximity could explo...
CVE-2018-11402
SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN...
Code injection
SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN...
CVE-2018-11402
SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN...
CVE-2018-11402
Summary : CVE-2018-11402 pertains to SimpliSafe Original, where keypad transmissions were unencrypted, enabling a physically proximate attacker to discover the PIN. The connected CNVD entry explicitly notes that the vulnerability stems from a lack of encryption, allowing local access to the PIN. ...
The vulnerability of the qcril_uim_clear_encrypted_pin function in Qualcomm’s Android operating system allows a hacker to trigger a buffer overflow.
The vulnerability of the qcriluimclearencryptedpin function in Qualcomm’s Android operating system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to trigger a buffer overflow...
Detecting Cloned Cards at the ATM, Register
Much of the fraud involving counterfeit credit, ATM debit and retail gift cards relies on the ability of thieves to use cheap, widely available hardware to encode stolen data onto any card's magnetic stripe. But new research suggests retailers and ATM operators could reliably detect counterfeit...
Heatmiser WiFi thermostat vulnerabilities
Update – if your heating is misbehaving you need to disable port forwarding to port 80 and port 8068. This should be simply following the reverse of whatever you did to set port forwarding up. Alternatively, you could disable WiFi entirely by putting invalid SSID and password in – I believe the...
Soldering for Reverse Engineering. Swapping out eSIMs with “normal” SIMs
Sometimes, the mobile devices we work on only have cellular data connections. In those instances, we’re usually pretty interested in trying things like this to get credentials for the APN so we can start snooping around on that. We’re also really interested in monitoring what kind of traffic is...
Nextcloud: Extremly simple way to bypass Nextcloud-Client PIN/Fingerprint lock
I'm sorry for my bad English, I'm German How to reproduce this security bug. Step 1: Take a normal Android smartphone maybe it also works on iOS, but I have not tested it yet. Step 2: Install the official nextcloud-client. Step 3: Set up nextcloud: Open the nextcloud app, tap on "Skip", enter the...
Prilex ATM Malware Modified to Clone Chip-and-Pin Payment Cards
By Uzair Amir It is just another day with just another ATM malware This is a post from HackRead.com Read the original post: Prilex ATM Malware Modified to Clone Chip-and-Pin Payment Cards...
Secure Hub Authentication Loop with Pin configured
The article summarizes on how to resolve the Secure Hub authentication loop with Pin and symptoms would be like below: Secure Hub prompts user about connection being expired and asks for re-authentication with PIN. After PIN has been given, Secure Hub prompts for PIN again. Only workaround is to...
Code injection
smart/calculator/gallerylock/CalculatorActivity.java in the "Photo,Video Locker-Calculator" application through 18 for Android allows attackers to access files via the backdoor 17621762 PIN...
