[SECURITY] Fedora 23 Update: krb5-1.14.1-3.fc23

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

Sensitive Data In Log Files

Overview Versions of grunt-gh-pages prior to 1.0.0 are affected by a vulnerability which may cause unencrypted github credentials to be written to a log file in certain circumstances. In the grunt-gh-pages deployment scenario where authentication is performed by injecting a github token directly...

Moxa ioLogik E2200 and ioAdmin Configuration Utility Information Disclosure Vulnerability

The Moxa ioLogik E2200 and the ioAdmin Configuration Utility are both products of Moxa. The former is an Ethernet RTU Remote Terminal Unit controller and the latter is a software package for managing and configuring the ioLogik E2200. A security vulnerability exists in the Moxa ioLogik E2200 prio...

Moxa ioLogik E2200 and ioAdmin Configuration Utility Information Disclosure Vulnerability (CNVD-2016-01475)

The Moxa ioLogik E2200 and the ioAdmin Configuration Utility are both products of Moxa. The former is an Ethernet RTU Remote Terminal Unit controller and the latter is a software package for managing and configuring the ioLogik E2200. A security vulnerability exists in the Moxa ioLogik E2200...

CVE-2016-2283: Undefined Security Weakness

Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors...

The vulnerability of the web server for visualizing BACnet/IP network controllers, SAUTER moduWeb Vision, allows a intruder to obtain confidential information.

The vulnerability of the BACnet/IP network controller visualization web server, SAUTER moduWeb Vision, is related to the transmission of data in an open manner. Exploiting this vulnerability could allow a malicious actor to obtain confidential information by listening to network traffic...

Hey, Apple User! Check If You are also Affected by the Sparkle Vulnerability

A pair of new security vulnerabilities has been discovered in the framework used by a wide variety of Mac apps leaves them open to Man-in-the-Middle MitM attacks. The framework in question is Sparkle that a large number of third-party OS X apps, including Camtasia, uTorrent, Duet Display and...

[SECURITY] Fedora 23 Update: krb5-1.14-7.fc23

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

Apple fixes iOS a serious vulnerability, hackers can be from the device to steal cookies-CVE-2 0 1 6-1 7 3 0-a vulnerability warning-the black bar safety net

Recently, Apple fixes iOS a serious vulnerability. This vulnerability allows hackers to masquerade as the end user, access to the web unencrypted cookie read and write permissions. With the Tuesday release of iOS 9.2.1, the vulnerability is repaired, from it first being reported to Apple has last...

Cisco Jabber for Windows STARTTLS Downgrade Vulnerability

Cisco Jabber for Windows is a unified communications, collaborative work application. A security vulnerability exists in the Send Screen Capture feature of Cisco Jabber for Windows. An attacker could exploit the vulnerability to cause a client to establish an XMPP connection in plain text...

Samba Man-in-the-Middle Attack Vulnerability

Samba is a set of programs that implement the SMB Server Messages Block protocol, cross-platform file sharing and print sharing services. A man-in-the-middle attack vulnerability exists in Samba versions 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3. The vulnerability can be...

CVE-2015-5296

Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 supports connections that are encrypted but unsigned, which allows man-in-the-middle attackers to conduct encrypted-to-unencrypted downgrade attacks by modifying the client-server data stream, related to clidfs.c,...

Honeywell International Midas and Midas Black Password Authentication Bypass Vulnerability

Honeywell International Midas and Midas Black are gas detection devices from Honeywell International, USA. Honeywell International Midas and Midas Black do not have encrypted user passwords, allowing a remote attacker to exploit the vulnerability to gain unauthorized access and change device...

RSI Video Technologies Frontel Information Disclosure Vulnerability

RSI Video Technologies Frontel is a suite of receiver software for monitoring Videofied wireless video alarm systems from the French company RSI Video Technologies. A security vulnerability exists in RSI Video Technologies Frontel that originates when the program sends unencrypted messages and...

[SECURITY] Fedora 21 Update: krb5-1.12.2-19.fc21

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

[SECURITY] Fedora 22 Update: krb5-1.13.2-10.fc22

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

CVE-2006-7180

ieee80211output.c in MadWifi before 0.9.3 sends unencrypted packets before WPA authentication succeeds, which allows remote attackers to obtain sensitive information related to network structure, and possibly cause a denial of service disrupted authentication and conduct spoofing attacks...

WS-2015-0053

A vulnerability found in Apache NIFI before v0.4.0-RC2. Passwords of InvokeHTTP weren’t encrypted...

Kirby CMS 2.1.0 - Authentication Bypass

============================================= - Release date: 14.09.2015 - Discovered by: Dawid Golunski - Severity: Medium/High ============================================= I. VULNERABILITY ------------------------- Kirby CMS = 2.1.0 Authentication Bypass via Path Traversal II. BACKGROUND...

Apple iOS unprotected multipeer data leakage vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in the Apple iOS convenience initializer processing that allows the encryption level to be reduced to a non-encrypted session, resulting in the disclosure of sensitive data...