CVE-2021-22702

A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause disclosure of user credentials when a malicious actor...

CVE-2020-25605

Cleartext transmission of sensitive information in Agora Video SDK prior to 3.1 allows a remote attacker to obtain access to audio and video of any ongoing Agora video call through observation of cleartext network traffic...

CVE-2020-25605

Cleartext transmission of sensitive information in Agora Video SDK prior to 3.1 allows a remote attacker to obtain access to audio and video of any ongoing Agora video call through observation of cleartext network traffic...

Design/Logic Flaw

Cleartext transmission of sensitive information in Agora Video SDK prior to 3.1 allows a remote attacker to obtain access to audio and video of any ongoing Agora video call through observation of cleartext network traffic...

CVE-2020-25605

Cleartext transmission of sensitive information in Agora Video SDK prior to 3.1 allows a remote attacker to obtain access to audio and video of any ongoing Agora video call through observation of cleartext network traffic...

CVE-2020-25605

Agora Video SDKs prior to 3.1 were vulnerable to cleartext transmission of sensitive information (including App ID, channel, and token), enabling an attacker on the network to observe call setup data and potentially join ongoing calls to access audio/video. The issue has been mitigated in version...

The vulnerability of the Cisco IOS XR command-line interface allows a attacker to gain unauthorized access to protected information.

The vulnerability of the Cisco IOS XR operating system’s command-line interface CLI is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Bluetooth Overlay Skimmer That Blocks Chip

As a total sucker for anything skimming-related, I was interested to hear from a reader working security for a retail chain in the United States who recently found Bluetooth-enabled skimming devices placed over top of payment card terminals at several stores. Interestingly, these skimmers...

CVE-2021-27209

In the management interface on TP-Link Archer C5v 1.7181221 devices, credentials are sent in a base64 format over cleartext HTTP...

CVE-2021-27209

In the management interface on TP-Link Archer C5v 1.7181221 devices, credentials are sent in a base64 format over cleartext HTTP...

Contiki Security Feature Issue Vulnerability

Contiki is an open source cross-platform operating system for IoT Internet of Things devices. Contiki version 4.5 suffers from a security signature issue vulnerability that allows attackers to spoof or corrupt TCP connections...

Multiple Embedded TCP/IP Security Feature Issue Vulnerability

Multiple Embedded TCP/IP is a highly efficient embedded stack developed using a verifiable process and in strict compliance with the MISRA coding standard. Multiple Embedded TCP/IP suffers from a security signature issue vulnerability that can be exploited by an attacker to spoof or interrupt TCP...

Multiple Embedded TCP/IP Security Feature Issue Vulnerability

Multiple Embedded TCP/IP is a highly efficient embedded stack developed using a verifiable process and in strict compliance with the MISRA coding standard. Multiple Embedded TCP/IP suffers from a security signature issue vulnerability that can be exploited by attackers to spoof or corrupt TCP...

Microsoft Windows TCP/IP component 安全漏洞

The Microsoft Windows operating system is a set of operating systems developed by Microsoft Corporation in the United States. A denial of service vulnerability exists in Microsoft Windows TCP/IP, which can be triggered by an attacker by sending multiple crafted IPv6 packets multiple IP packet...

PT-2021-1925 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a lack of protection for service data in the implementation of the TCP/IP protocol in Windows operating systems. This allows a remote attacker to execute arbitrary...

CVE-2020-28388

A vulnerability has been identified in APOGEE PXC Compact BACnet All versions V3.5.5, APOGEE PXC Compact P2 Ethernet All versions V2.8.20, APOGEE PXC Modular BACnet All versions V3.5.5, APOGEE PXC Modular P2 Ethernet All versions V2.8.20, Nucleus NET All versions V5.2, Nucleus ReadyStart V3 All...

The vulnerability of the TCP Fast Open (TFO) protocol extension in the Snort intrusion detection system allows a hacker to bypass the configured file policy for HTTP.

The vulnerability of the TCP Fast Open TFO protocol extension in the Snort intrusion detection system is related to deficiencies in the data protection mechanism. Exploiting this vulnerability allows a malicious actor to bypass the configured file policy for HTTP...

Unauthorized access vulnerability in Transmission web control

Transmission Web Control is the Transmission browser management interface. An unauthorized access vulnerability exists in Transmission web control, which can be exploited by an attacker to bypass authentication and arbitrarily control the download, delete, or upload functionality of an applicatio...

Reolink P2P Cameras

1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Reolink Equipment: P2P protocol Vulnerabilities: Use of Hard-coded Cryptographic Key, Cleartext Transmission of Sensitive Information 2. RISK EVALUATION Successful exploitation of these...