Lenovo SHAREit Transfer Unencrypted Vulnerability

Lenovo SHAREit 茄子快传 is a set of file sharing software from the Chinese company Lenovo Lenovo. A transfer unencrypted vulnerability exists in Lenovo SHAREit for Windows before 3.2.0 and SHAREit for Android before 3.5.48ww, where the program transfers files in plaintext. A remote attacker can explo...

About SSL/TLS the latest vulnerability the“ordination ceremony”preliminary report-vulnerability warning-the black bar safety net

A, vulnerability analysis The event causes 2 0 1 5 year 3 month 2 6 day, foreign data security company Imperva researcher Itsik Mantin at BLACK HAT ASIA 2 0 1 5 published papers the default settings for SSL when using RC4 elaborates the use of the presence of the 1 3 years of RC4 vulnerability-th...

CVE-2015-0998

Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 transmit cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network...

SuSE 10 Security Update : curl (ZYPP Patch Number 7937)

This update to curl fixes the following security issue : - Don't set SSLOPALL to avoid potential DTLS sniffing attacks. CVE-2012-0036 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...

SMTP Service Cleartext Login Permitted

The remote host is running an SMTP server that advertises that it allows cleartext logins over unencrypted connections. An attacker may be able to uncover user names and passwords by sniffing traffic to the server if a less secure authentication mechanism i.e. LOGIN or PLAIN is used. C Tenable...

Data-sniffing attack costs Heartland $12.6m

From The Register Dan Goodin Electronic payments processor Heartland Payment Systems said Thursday it has allocated $12.6m to cover a security breach that exposed sensitive card holder data crossing its network. More than half that amount involves a fine MasterCard has assessed banks that did...

IMAP Service Cleartext Login Permitted

The remote host is running an IMAP daemon that allows cleartext logins over unencrypted connections. An attacker can uncover user names and passwords by sniffing traffic to the IMAP daemon if a less secure authentication mechanism eg, LOGIN command, AUTH=PLAIN, AUTH=LOGIN is used. This script was...

Apple AirPort Base Station Authentication Credential Encryption Weakness

The remote host is an Apple Airport Wireless Access Point which can be administrated on top of TCP port 5009. There is a design flaw in the administrative protocol which makes the clients which connect to this port send the password in cleartext although slightly obsfuscated. An attacker who has...

hypo_linksys_advisory.txt

:UPDATE hypoclear security advisory UPDATE: Update Note: Thanks to the guys on the vuln-watch list who helped with a better solution! Vendor : Linksys | http://www.linksys.com/ Product : EtherFast 4-Port Cable/DSL Router Category : Design Flaw Date : 08-02-01 Update : 08-02-01 CONTENTS 1. Overvie...