2271 matches found
Adcon A840 Telemetry Gateway 'root' Default Credentials (Telnet)
The remote Adcon A840 Telemetry Gateway has default credentials set. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
CVE-2015-7910
Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to bypass intended access restrictions by disregarding this header and processing the response body...
CVE-2015-7910
Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to bypass intended access restrictions by disregarding this header and processing the response body...
Design/Logic Flaw
Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to bypass intended access restrictions by disregarding this header and processing the response body...
CVE-2015-7910
Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to bypass intended access restrictions by disregarding this header and processing the response body...
CVE-2015-7910
CVE-2015-7910 affects Exemys Telemetry Web Server. The vulnerability arises because the server relies on an HTTP Location header to signal unauthorized access, allowing an attacker to bypass login restrictions by ignoring the header and using the response body to gain direct access. Impact descri...
Exemys Telemetry Web Server Authentication Bypass Vulnerability
Exemys Telemetry Web Server is a web-based SCADA system from Exemys Argentina. A security vulnerability exists in Exemys Telemetry Web Server. An attacker can exploit this vulnerability by ignoring the location header to gain direct access to information...
Design Flaws Make Drones Vulnerable to Cyber-Attacks
In the past, The Hacker News THN reported about various activities surrounding Drones. Whether it was the development of the first backdoor for drones MalDrone, or Weaponized drones getting legal, or Drones hacking smartphones. And now the reports depict... Security Researcher has showcased a...
HackerOne Vulnerability Coordination Maturity Model
The proliferation of independent and vendor-sponsored bug bounties has not only put some money in researchers’ pockets, but has also forced enterprises—and software makers—to put processes in place to handle outside bug reports. “Saying you want one is not enough,” said Katie Moussouris, chief...
Adcon Telemetry A840 Vulnerabilities
OVERVIEW Independent researcher Aditya K. Sood has identified vulnerabilities in Adcon Telemetry’s A840 Telemetry Gateway Base Station. Adcon Telemetry has stated that the A840 is an obsolete product and is no longer supported. No patches or updates will be created for this product. Adcon Telemet...
Just Like Windows 10, Windows 7 and 8 Also Spy on You – Here’s How to Stop Them
No plan to install Windows 10 due to Microsoft's controversial data mining and privacy invasions within the operating system? Well, Windows 7 and Windows 8 OS users should also be worried as Windows 10 spying is now headed their way too… Microsoft has been caught installing latest updates onto...
Exemys Web Server Bypass Vulnerability
OVERVIEW Independent researcher Maxim Rupp has identified a login bypass in the Exemys Telemetry Web Server. Exemys has not produced a patch to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS The following Exemys product is affected: Exemys Telemetry...
Hack or will be in 8 months to disclose the Tesla Model S The digital security vulnerabilities-vulnerability warning-the black bar safety net
Right now, the Tesla car is perhaps the world networking of the highest consumer vehicles, has become a hackers a target. Thomas Fox-Brewster at Forbes Chinese network wrote the article said, in 8 months, held at the Defcon hacker conference, CloudFlare company Research Director Marc Rogers Marc...
CVE-2015-0176
Cross-site scripting XSS vulnerability in MQ XR WebSockets Listener in WMQ Telemetry in IBM WebSphere MQ 8.0 before 8.0.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URI that is included in an error response...
Open Source OpenSOC Security Analytics Framework Released
Cisco announced today that it has made available through open source a framework that integrates data analytics tools into security operations. “The OpenSOC framework helps organizations make big data part of their technical security strategy by providing a platform for the application of anomaly...
Moderate: Red Hat Security Advisory: openstack-heat security, bug fix, and enhancement update
Updated openstack-heat packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux OpenStack Platform 4.0. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System...
CVE-2014-6116
The Telemetry Component in WebSphere MQ 8.0.0.1 before p000-001-L140910 allows remote attackers to bypass authentication by setting the JAASConfig property in an MQTT client configuration...
Authentication flaw
The Telemetry Component in WebSphere MQ 8.0.0.1 before p000-001-L140910 allows remote attackers to bypass authentication by setting the JAASConfig property in an MQTT client configuration...
CVE-2014-6116
CVE-2014-6116 affects IBM WebSphere MQ Telemetry Component. WebSphere MQ 8.0.0.1 prior to fix pack p000-001-L140910 is vulnerable: authentication can be bypassed by setting the JAASConfig property in an MQTT client configuration. Reported CVSS base score 4.3 (network, medium complexity, no authen...