CVE-2017-7143

MODE C: CVE-2017-7143 affects macOS before 10.13 in the Captive Network Assistant, where a UI state/portal handling issue can cause cleartext passwords to be transmitted over the network in opportunistic scenarios. The connected Apple security content page HT208144 confirms the vulnerable compone...

PT-2017-17538

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.13 Description The issue involves the Captive Network Assistant component, which has a UI error. This error can lead to cleartext transmission of passwords without the user's awareness when using the captive portal...

CVE-2017-7143: Cleartext Transmission of Sensitive Information

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Captive Network Assistant" component. It allows remote attackers to discover cleartext passwords in opportunistic circumstances by sniffing the network during use of the captive portal...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component (CNVD-2017-31064)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation, and PeopleSoft Enterprise PeopleTools is one of the tools and technology components that transforms the way organizations manage, use, and maintain their PeopleSoft software. PeopleSoft...

CVE-2017-10422: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Updates Change Assistant. The supported version that is affected is 8.54. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

sciwiki.lamost.org XSS vulnerability

Vulnerable URL: http://sciwiki.lamost.org/Miningdr8/groupdetail.php?id=13'" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

Apple macOS Information Disclosure Vulnerability (CNVD-2017-34318)

Apple macOS High Sierra is a suite of Apple's proprietary operating systems developed specifically for Mac computers.The Captive Network Assistant component is one of the network connection verification components. A security vulnerability exists in the Captive Network Assistant component of Appl...

Beauty Assistant App Has Logic Design Flaws

Beauty Assistant APP is a retouching software. There is a logical design vulnerability in Beauty Assistant APP. Attackers can register any account by grabbing packets and blasting CAPTCHA...

Blackware Dive Assistant XML External Entity Injection Vulnerability

Blackware Dive Assistant desktop version is a suite of dive assistant software from Blackware UK. The software is used to record, analyze and plan dive tools, dive tables etc. An XML external entity injection vulnerability exists in version 8.0 of Blackware Dive Assistant Desktop Edition. A remot...

CVE-2017-8918

XXE in Dive Assistant - Template Builder in Blackwave Dive Assistant - Desktop Edition 8.0 allows attackers to remotely view local files via a crafted template.xml file...

Design/Logic Flaw

XXE in Dive Assistant - Template Builder in Blackwave Dive Assistant - Desktop Edition 8.0 allows attackers to remotely view local files via a crafted template.xml file...

CVE-2017-8918

XXE in Dive Assistant - Template Builder in Blackwave Dive Assistant - Desktop Edition 8.0 allows attackers to remotely view local files via a crafted template.xml file...

CVE-2017-8918

XXE in Dive Assistant - Template Builder in Blackwave Dive Assistant - Desktop Edition 8.0 allows attackers to remotely view local files via a crafted template.xml file...

CVE-2017-8918

XXE in Blackwave Dive Assistant – Desktop Edition 8.0 (Dive Assistant Template Builder) allows an attacker to view local files via a crafted template.xml. The vulnerability is XML External Entity (XXE) injection in the template builder that processes XML templates, enabling local-file disclosure....

PT-2017-18622

Name of the Vulnerable Software and Affected Versions Blackwave Dive Assistant - Desktop Edition version 8.0 Description The issue allows attackers to remotely view local files by using a crafted template.xml file, exploiting an XXE XML External Entity vulnerability in the Template Builder...

CVE-2017-8918: Improper Restriction of XML External Entity Reference

XXE in Dive Assistant - Template Builder in Blackwave Dive Assistant - Desktop Edition 8.0 allows attackers to remotely view local files via a crafted template.xml file...

DolphinAttack: Voice Assistant Apps Siri and Alexa Can Be Hacked

By Waqas Mainstream Voice Assistants Including Siri and Alexa Plagued with Serious This is a post from HackRead.com Read the original post: DolphinAttack: Voice Assistant Apps Siri and Alexa Can Be Hacked...

Proof that HMAC-DRBG has No Back Doors

New research: "Verified Correctness and Security of mbedTLS HMAC-DRBG," by Katherine Q. Ye, Matthew Green, Naphat Sanguansin, Lennart Beringer, Adam Petcher, and Andrew W. Appel. Abstract: We have formalized the functional specification of HMAC-DRBG NIST 800-90A, and we have proved its...

HPSBGN03561 rev.2 - HP Support Assistant Potential Escalation of Privilege

Potential Security Impact Escalation of privilege and unauthorized modification of directories or files. Source: HP, HP Product Security Response Team PSRT Reported by: Danny Wei of Tencent's Xuanwu Lab VULNERABILITY SUMMARY The vulnerability allows attacker to extract binaries into protected fil...

Multiple untrustworthy search path vulnerabilities in Synology Assistant

Synology Assistant is a Synology DiskStation LAN installation and management assistant. Multiple untrusted search path vulnerabilities in the Synology Assistant's installer can be exploited by a local attacker to execute arbitrary code or perform DLL hijacking via a Trojan horse in the current...