PT-2017-10076

Name of the Vulnerable Software and Affected Versions Moxa MiiNePort E1 versions prior to 1.8 Moxa MiiNePort E2 versions prior to 1.4 Moxa MiiNePort E3 versions prior to 1.1 Description An issue was discovered where configuration data are stored in a file that is not encrypted. Recommendations Fo...

PT-2017-10082

Name of the Vulnerable Software and Affected Versions Becton, Dickinson and Company BD Alaris 8015 Point of Care PC unit versions 9.5 and prior Becton, Dickinson and Company BD Alaris 8015 Point of Care PC unit version 9.7 Description An issue allows an unauthorized user with physical access to...

CVE-2016-9346: Undefined Security Weakness

An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to 1.1. Configuration data are stored in a file that is not encrypted...

CVE-2016-9355: Undefined Security Weakness

An issue was discovered in Becton, Dickinson and Company BD Alaris 8015 Point of Care PC unit, Version 9.5 and prior versions, and Version 9.7. An unauthorized user with physical access to an Alaris 8015 PC unit may be able to obtain unencrypted wireless network authentication credentials and oth...

CVE-2016-6110

IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local user...

Design/Logic Flaw

IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local user...

CVE-2016-6110

IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local user...

CVE-2016-6110

IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local user...

PT-2017-8901

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager affected versions not specified Description The issue allows a local user to obtain unencrypted login credentials that are disclosed to Vmware vCenter. Recommendations At the moment, there is no information about a...

CVE-2016-6110: Undefined Security Weakness

IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local user...

AlphaBay Dark Web Marketplace Hacked; Exposes Over 200,000 Private Messages

AlphaBay, possibly the largest active dark web marketplace at the moment, has paid a hacker after he successfully exploited vulnerabilities in the internal mailing system of the website and hijacked over 200,000 private unencrypted messages from several users. The hacker, using the pseudonym...

Downloads Resources over HTTP

Overview Affected versions of windows-build-tools insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

Starbucks: Exposed Unencrypted Telnet Endpoint

Hi, I'm not sure where to submit this as I know it is a low/medium risk issue on an asset which is out of scope. Essentially I stumbled across the endpoint whilst looking at other Starbucks domains within scope, the affected host is: franchisee.starbucks.com:23 it was found to be running an...

OmniView Information Disclosure Vulnerability

OmniView is a data management control center for monitoring and controlling backup generators. An information disclosure vulnerability exists in OmniView.The OmniView web application uses the HTTP protocol to transmit credentials, which could be sniffed by an attacker, leading to the disclosure o...

OmniView Information Disclosure Vulnerability (CNVD-2016-13111)

OmniView is a data management control center for monitoring and controlling backup generators. An information disclosure vulnerability exists in OmniView.The OmniView web application uses the HTTP protocol to transmit credentials, which could be sniffed by an attacker, leading to the disclosure o...

Moxa MiiNePort Information Disclosure Vulnerability (CNVD-2016-12353)

Moxa MiiNePort is an embedded device networking module from Moxa designed for manufacturers to connect serial devices to a network connection. An information disclosure vulnerability exists in Moxa MiiNePort, which arises from the program's failure to encrypt configuration data in a file. An...

Downloads Resources over HTTP

Overview Affected versions of react-native-baidu-voice-synthesizer insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one,...

Downloads Resources over HTTP

Overview Affected versions of mystem-fix insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution o...

Downloads Resources over HTTP

Overview Affected versions of haxeshim insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on...

Downloads Resources over HTTP

Overview Affected versions of openframe-ascii-image insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...