Midea's i+ smart refrigerator has design logic flaws

The Midea i+ Smart Refrigerator is a smart home appliance developed by Midea Group. Midea's i+ Smart Refrigerator is susceptible to man-in-the-middle attacks due to the insecure protocol for transmitting data and the lack of validation of what is transmitted on the client and server side. The lac...

Fedora 23 : python-tgcaptcha2-0.3.1-1.fc23 (2016-d7dafbf27f)

Implemented nonces to prevent replay attack DWF-2016-89000. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Midea's M-Smart smart socket has design logic flaws

M-Smart Smart Socket is a smart home appliance developed by Midea Group. Midea's M-Smart Smart Socket is susceptible to man-in-the-middle attacks due to insecure protocols for transmitting data and lack of validation of what is transmitted on the client and server side. The lack of effective...

Black-Box CAN Network Analysis Framework: CANToolz

CANToolz is a framework forCANbus network and device analysis. This tool consist of various different modules which can be piped together and used by security researchers and automotive/OEM security testers for black-box analysis of any CANbus system. You can use this software for ECU discovery,...

"Replay" PianoPlay - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application "Replay" PianoPlay published at the 'play' market has multiple vulnerabilities...

Hearing Aid with Replay (Lite) - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Hearing Aid with Replay Lite published at the 'play' market has multiple vulnerabilities...

Uber: Uber password reset link EMAIL FLOOD

Step to reproduce Uber password reset link EMAIL FLOOD POC Video https://youtu.be/PPJkOEo6Mw 1. Used OWSAP ZAP Proxy 2. Generated the forgotten password Link of my account [email protected] 3. Used ZAP to replay the packet 4. The Number of replay resulting into number of password link email...

HackerOne: Hogging up all the resources on hackerone.com

Please note. I believe that some of the issues described below can also be used on their own and/or combined in other configurations to achieve different results, e.g. "paying" a bounty of zero or team avoiding to resolve and unpleasant issue. I am however describing the very likely doomsday...

Siemens SIMATIC S7-1500 Bypass Mechanism Vulnerability

The Siemens SIMATIC S7-1500 is a controller family with a modular structure. A bypass mechanism vulnerability exists in the Siemens SIMATIC S7-1500. A remote attacker can exploit the vulnerability to bypass the replay protection mechanism with the help of specially crafted packets on TCP port 102...

CVE-2016-2201

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via packets on TCP port 102...

CVE-2016-2201

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via packets on TCP port 102...

Authentication flaw

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via packets on TCP port 102...

CVE-2016-2201

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via packets on TCP port 102...

CVE-2016-2201

The CVE concerns the Siemens SIMATIC S7-1500 CPU family (before firmware version 1.8.3) where specially crafted packets on TCP port 102 can bypass the device’s replay protection. The issue stems from insufficient replay protection/control flow management, enabling remote attackers to bypass prote...

CVE-2016-2201: Improper Input Validation

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via packets on TCP port 102...

PT-2016-5062

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1500 CPU devices versions prior to 1.8.3 Description The issue allows remote attackers to bypass a replay protection mechanism. This can be achieved by sending packets on TCP port 102. Recommendations For versions prior to...

NTP Security Bypass Vulnerability

NTP Network Time Protocol is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security bypass vulnerability exists in NTP. An attacker can exploit this vulnerability to obtain sensitive information by performing a man-in-the-middle attack or replay attack...

VMWare Zimbra Mailer Release 8.6.0.GA Replay Attack

Hi@all, VMWare Zimbra Mailer Release 8.6.0.GA, latest patch and prior versions with DKIM implementation are vulnerable to longterm Mail Replay attacks. If the expiration header is not set, the signature never expires. This means, that the e-mail, perhaps catched while performing a man in the midd...

PT-2016-3857

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p7 Cisco IOS affected versions not specified Description The issue allows remote attackers to conduct replay attacks by sniffing the network. It is related to the ntpq protocol in NTP. There is also a vulnerability i...

FreeBSD-SA-16:09.ntp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:09.ntp Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities of ntp Category: contrib Module: ntp Announced: 2016-01-27 Credits: Cisco ASIG /...