CVE-2023-31763: Authentication Bypass by Capture-replay

Weak security in the transmitter of AGShome Smart Alarm v1.0 allows attackers to gain full access to the system via a code replay attack...

CVE-2023-31762: Authentication Bypass by Capture-replay

Weak security in the transmitter of Digoo DG-HAMB Smart Home Security System v1.0 allows attackers to gain full access to the system via a code replay attack...

CVE-2023-31759: Authentication Bypass by Capture-replay

Weak Security in the 433MHz keyfob of Kerui W18 Alarm System v1.0 allows attackers to gain full access via a code replay attack...

CVE-2023-33281

The remote keyfob system on Nissan Sylphy Classic 2021 sends the same RF signal for each door-open request, which allows for a replay attack. NOTE: the vendor's position is that this cannot be reproduced with genuine Nissan parts: for example, the combination of keyfob and door handle shown in th...

CVE-2023-33281

The remote keyfob system on Nissan Sylphy Classic 2021 sends the same RF signal for each door-open request, which allows for a replay attack. NOTE: the vendor's position is that this cannot be reproduced with genuine Nissan parts: for example, the combination of keyfob and door handle shown in th...

Open redirect

DISPUTED The remote keyfob system on Nissan Sylphy Classic 2021 sends the same RF signal for each door-open request, which allows for a replay attack. NOTE: the vendor's position is that this cannot be reproduced with genuine Nissan parts: for example, the combination of keyfob and door handle...

Nissan Sylphy 安全漏洞

The Nissan Sylphy is an automobile from Nissan Motor Nissan, Japan. A security vulnerability exists in Nissan Sylphy Classic version 2021, which stems from sending the same signal for every door opening request, and can be exploited by an attacker to conduct a replay attack...

CVE-2023-33281

The remote keyfob system on Nissan Sylphy Classic 2021 sends the same RF signal for each door-open request, which allows for a replay attack. NOTE: the vendor's position is that this cannot be reproduced with genuine Nissan parts: for example, the combination of keyfob and door handle shown in th...

CVE-2023-33281

The remote keyfob system on Nissan Sylphy Classic 2021 sends the same RF signal for each door-open request, which allows for a replay attack. NOTE: the vendor's position is that this cannot be reproduced with genuine Nissan parts: for example, the combination of keyfob and door handle shown in th...

PT-2023-24266 · Nissan · Nissan Sylphy Classic

Name of the Vulnerable Software and Affected Versions: Nissan Sylphy Classic version 2021 Description: The remote keyfob system sends the same RF signal for each door-open request, allowing for a replay attack. The vendor claims this issue cannot be reproduced with genuine Nissan parts, citing a...

CVE-2023-33281

The CVE-2023-33281 entry concerns Nissan Sylphy Classic (2021) where the remote keyfob system transmits the same RF signal for every door-open request, enabling a replay attack. Documents confirm the affected component is the remote keyfob system and indicate the underlying issue is signal reuse,...

CVE-2023-33281: Authentication Bypass by Capture-replay

The remote keyfob system on Nissan Sylphy Classic 2021 sends the same RF signal for each door-open request, which allows for a replay attack. NOTE: the vendor's position is that this cannot be reproduced with genuine Nissan parts: for example, the combination of keyfob and door handle shown in th...

PTC Vuforia Studio 跨站请求伪造漏洞

PTC Vuforia Studio is an easy-to-use, web-native tool from PTC for authoring domain and task-specific experiences. These experiences provide integrated views of digital and physical product data, dashboards, and alerts through 2D, 3D, and augmented reality. A cross-site request forgery...

CVE-2022-44419

In modem, there is a possible missing verification of NAS Security Mode Command Replay Attacks in LTE. This could local denial of service with no additional execution privileges...

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Ziguang Zhanrui UNISOC. A security vulnerability exists in the UNISOC Chipsets modem module, which stems from a lack of validation in LTE for NAS secure mode command replay attacks...

PT-2023-14458

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description The issue is related to a possible missing verification of NAS Security Mode Command Replay Attacks in LTE, which could lead to a local denial of service with no additional execution privileges...

Insecure Session Management

github.com/iofinnet/threshlib and https://github.com/bnb-chain/tss-lib are vulnerable to Insecure Session Management. The vulnerability exists in sch.go because the implementation of the Schnorr proof of knowledge doesn't use a session id, context, or random nonce which allows a malicious user to...

IO FinNet tss-lib vulnerable to replay attacks involving proofs

An issue was discovered in IO FinNet tss-lib before 2.0.0. The parameter ssid for defining a session id is not used through the MPC implementation, which makes replaying and spoofing of messages easier. In particular, the Schnorr proof of knowledge implemented in sch.go does not utilize a session...

CVE-2022-47930

An issue was discovered in IO FinNet tss-lib before 2.0.0. The parameter ssid for defining a session id is not used through the MPC implementation, which makes replaying and spoofing of messages easier. In particular, the Schnorr proof of knowledge implemented in sch.go does not utilize a session...

CVE-2022-47930

An issue was discovered in IO FinNet tss-lib before 2.0.0. The parameter ssid for defining a session id is not used through the MPC implementation, which makes replaying and spoofing of messages easier. In particular, the Schnorr proof of knowledge implemented in sch.go does not utilize a session...