1879 matches found
CVE-2016-1000032
TGCaptcha2 version 0.3.0 is vulnerable to a replay attack due to a missing nonce allowing attackers to use a single solved CAPTCHA multiple times...
CVE-2016-1000032
TGCaptcha2 version 0.3.0 is vulnerable to a replay attack due to a missing nonce allowing attackers to use a single solved CAPTCHA multiple times...
Information disclosure
TGCaptcha2 version 0.3.0 is vulnerable to a replay attack due to a missing nonce allowing attackers to use a single solved CAPTCHA multiple times...
CVE-2016-1000032
CVE-2016-1000032 affects TGCaptcha2 version 0.3.0, where a missing nonce allows a solved CAPTCHA to be reused, enabling a replay attack. The provided connected documents corroborate this vulnerability and describe the core issue as a replay vulnerability due to the missing nonce. Impact is a sing...
CVE-2016-1000032
TGCaptcha2 version 0.3.0 is vulnerable to a replay attack due to a missing nonce allowing attackers to use a single solved CAPTCHA multiple times...
PT-2016-4496
Name of the Vulnerable Software and Affected Versions TGCaptcha2 version 0.3.0 Description The issue is related to a missing nonce, which enables attackers to reuse a single solved CAPTCHA multiple times, effectively bypassing the CAPTCHA's security mechanism. Recommendations For TGCaptcha2 versi...
CVE-2016-1000032: Improper Access Control
TGCaptcha2 version 0.3.0 is vulnerable to a replay attack due to a missing nonce allowing attackers to use a single solved CAPTCHA multiple times...
Ubuntu 14.04 LTS / 16.04 LTS : NTP vulnerabilities (USN-3096-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3096-1 advisory. Aanchal Malhotra discovered that NTP incorrectly handled authenticated broadcast mode. A remote attacker could use this issue to perform a...
USN-3096-1: NTP vulnerabilities
Aanchal Malhotra discovered that NTP incorrectly handled authenticated broadcast mode. A remote attacker could use this issue to perform a replay attack. CVE-2015-7973 Matt Street discovered that NTP incorrectly verified peer associations of symmetric keys. A remote attacker could use this issue ...
USN-3096-1 ntp vulnerabilities
Aanchal Malhotra discovered that NTP incorrectly handled authenticated broadcast mode. A remote attacker could use this issue to perform a replay attack. CVE-2015-7973 Matt Street discovered that NTP incorrectly verified peer associations of symmetric keys. A remote attacker could use this issue ...
PT-2016-6237
Name of the Vulnerable Software and Affected Versions Johnson & Johnson Animas OneTouch Ping devices affected versions not specified Description The issue allows remote attackers to bypass authentication via replay attacks. Recommendations At the moment, there is no information about a newer...
CVE-2016-5086: Improper Authentication
Johnson & Johnson Animas OneTouch Ping devices allow remote attackers to bypass authentication via replay attacks...
How to Hack Smart Bluetooth Locks and IoT Devices — Check this Out
Bluetooth Low Energy, also known as Bluetooth Smart or Bluetooth 4, is the leading protocol designed for connecting IoT devices, medical equipment, smart homes and like most emerging technologies, security is often an afterthought. As devices become more and more embedded in our daily lives,...
Vulnerability in OpenSSL - DTLS replay protection DoS
A flaw in the DTLS replay attack protection mechanism means that records that arrive for future epochs update the replay protection “window” before the MAC for the record has been validated. This could be exploited by an attacker by sending a record for the next epoch which does not have to decry...
AIX NTP v3 Advisory : ntp_advisory6.asc (IV83984) (IV83993) (IV83994) (IV83995) (IV84269)
The version of NTP installed on the remote AIX host is affected by the following vulnerabilities : - A flaw exists in the receive function due to the use of authenticated broadcast mode. A man-in-the-middle attacker can exploit this to conduct a replay attack. CVE-2015-7973 - A NULL pointer...
AIX NTP v4 Advisory : ntp_advisory6.asc (IV83983) (IV83992)
The version of NTP installed on the remote AIX host is affected by the following vulnerabilities : - A flaw exists in the receive function due to the use of authenticated broadcast mode. A man-in-the-middle attacker can exploit this to conduct a replay attack. CVE-2015-7973 - A NULL pointer...
CVE-2016-5722: Exposure of Sensitive Information to an Unauthorized Actor
Huawei OceanStor 5300 V3, 5500 V3, 5600 V3, 5800 V3, 6800 V3, 18800 V3, and 18500 V3 before V300R003C10 sends the plaintext session token in the HTTP header, which allows remote attackers to conduct replay attacks and obtain sensitive information by sniffing the network...
PT-2016-6656
Name of the Vulnerable Software and Affected Versions Huawei OceanStor versions prior to V300R003C10 Description The issue allows remote attackers to conduct replay attacks and obtain sensitive information by sniffing the network, as the plaintext session token is sent in the HTTP header...
AIX 7.2 TL 0 : ntp (IV83995) (deprecated)
https://vulners.com/cve/CVE-2015-7973 NTP could allow a remote attacker to launch a replay attack. An attacker could exploit this vulnerability using authenticated broadcast mode packets to conduct a replay attack and gain unauthorized access to the system. NTP is vulnerable to a denial of servic...
AIX 7.1 TL 3 : ntp (IV83993) (deprecated)
https://vulners.com/cve/CVE-2015-7973 NTP could allow a remote attacker to launch a replay attack. An attacker could exploit this vulnerability using authenticated broadcast mode packets to conduct a replay attack and gain unauthorized access to the system. NTP is vulnerable to a denial of servic...