keycloak: expiration not validated in SAML broker consumer endpoint

The SAML broker consumer endpoint in Keycloak before version 4.6.0.Final ignores expiration conditions on SAML assertions. An attacker can exploit this vulnerability to perform a replay attack...

Replay Attack

tomcat-util is vulnerable to replay attacks. The vulnerability exists due to the improper handling of empty requests to the SSL port, allowing a duplicate copy of a recent request to be replayed...

Amazon Linux 2 : nss (ALAS-2018-1095)

A flaw was found in the way NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. A man-in-the-middle attacker could use this flaw in a passive replay attack.CVE-2018-12384 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Amazon Linux AMI : nss (ALAS-2018-1095)

A flaw was found in the way NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. A man-in-the-middle attacker could use this flaw in a passive replay attack.CVE-2018-12384 C Tenable Network Security, Inc. The descriptive text and package checks in this...

CVE-2018-17903

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to a replay attack and command forgery...

Command injection

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to a replay attack and command forgery...

CVE-2018-17903

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to a replay attack and command forgery...

CVE-2018-17903

CVE-2018-17903 affects SAGA1-L8B devices with firmware versions prior to A0.10. The vulnerability enables replay attacks and command forgery via the transmitter–receiver communication, potentially allowing remote attackers to issue forged commands. Impact is described as high (I:H) with both inte...

CVE-2018-17903

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to a replay attack and command forgery...

PT-2018-14255

Name of the Vulnerable Software and Affected Versions SAGA1-L8B versions prior to A0.10 Description The issue allows for a replay attack and command forgery. Recommendations For versions prior to A0.10, update the firmware to version A0.10 or later to resolve the issue...

GAIN Electronic Co. Ltd SAGA1-L Series Command Forgery Vulnerability

GAIN SAGA1-L Series is a SAGA1-L series industrial remote control product from GAIN Electronic. A security vulnerability exists in GAIN SAGA1-L Series products using firmware versions prior to A0.10. The vulnerability can be exploited by an attacker to perform replay attacks and forge commands...

CVE-2018-17903: Authentication Bypass by Capture-replay

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to a replay attack and command forgery...

Telecrane F25 Replay Attack Vulnerability

This vulnerability allows remote attackers to issue commands on vulnerable installations of Telecrane equipment. Authentication is not required to exploit this vulnerability. The specific flaw exists with the communication between the transmitter and receiver pair. By using a fixed control code a...

Saga Radio SAGA1-L8B Replay Attack and Command Forgery Vulnerability

This vulnerability allows remote attackers to issue commands on vulnerable installations of Saga Radio equipment. Authentication is not required to exploit this vulnerability. The specific flaw exists with the communication between the transmitter and receiver pair. By using a fixed control code ...

com.github.dblock.waffle:waffle-spring-security3 (>=1.5, <=1.6), com.paddypowerbetfair.springframework:spring-security-saml-keys-rollover (1.0.2) +45 more potentially affected by CVE-2016-5007 via org.springframework.security:spring-security-core (3.1.2.release)

org.springframework.security:spring-security-core MAVEN version 3.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.github.dblock.waffle:waffle-spring-security3 =1.5...

GHSA-RVGG-F8QM-6H7J High severity vulnerability that affects io.vertx:vertx-web

In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form parameter. This allows replay attacks with previously issued tokens which are not expired yet...

nss: ServerHello.random is all zeros when handling a v2-compatible ClientHello

A flaw was found in the way NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. A man-in-the-middle attacker could use this flaw in a passive replay attack...

CVE-2018-5400

The Auto-Maskin products utilize an undocumented custom protocol to set up Modbus communications with other devices without validating those devices. The originating device sends a message in plaintext, 48:65:6c:6c:6f:20:57:6f:72:6c:64, "Hello World" over UDP ports 44444-44446 to the broadcast...

PT-2018-16944

Name of the Vulnerable Software and Affected Versions Auto-Maskin DCU-210E RP-210E versions prior to 3.7 on ARMv7. Description The issue arises from the use of an undocumented custom protocol for setting up Modbus communications, which lacks validation of devices. An originating device sends a...

CVE-2018-5400: Origin Validation Error

The Auto-Maskin products utilize an undocumented custom protocol to set up Modbus communications with other devices without validating those devices. The originating device sends a message in plaintext, 48:65:6c:6c:6f:20:57:6f:72:6c:64, "Hello World" over UDP ports 44444-44446 to the broadcast...