EUVD-2020-19103

Malware in sbrugna...

These are the 10 worst PIN codes

Australian news outlet ABC NEWS analyzed a data set of 29 million 4-digit PIN numbers that people actually used to secure their devices, ATM withdrawals, building access, and more. What the outlet discovered is both expected and disappointing: Too many people use insecure PIN codes to protect...

ROS-20240909-02

Vulnerability in the cryptography package of the Python programming language interpreter is related to errors in the procedure of to authenticate a certificate. Exploitation of the vulnerability could allow an attacker acting remotely to perform a man-in-the-middle attack. remotely to execute a...

Advisory ROSA-SA-2024-2451

Software: samba 4.12.3 OS: ROSA Virtualization 2.1 packageevrstring: samba-4.12.3 CVE-ID: CVE-2020-25722 BDU-ID: 2022-00004 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the Active Directory Domain Controller component of the Samba networking software package is caused by a buffer overflow...

ROS-20240606-04

A vulnerability in the OTP component of the Erlang programming language is related to flaws in the authentication procedure. Exploitation of the vulnerability allows a remote attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service. data, compromise its...

PT-2023-2011

Name of the Vulnerable Software and Affected Versions VMware Workspace ONE Content affected versions not specified Description The issue is related to a passcode bypass vulnerability in VMware Workspace ONE Content. A malicious actor with access to a user's rooted device may be able to bypass the...

PT-2022-5032 · Wavlink · Wavlink Quantum D4G

Name of the Vulnerable Software and Affected Versions: WAVLINK Quantum D4G WN531G3 version M31G3.V5030.200325 Description: The issue is related to the authentication procedure in the WAVLINK Quantum D4G WN531G3 Wi-Fi router. The device uses IP addresses to hold sessions and does not utilize sessi...

PT-2022-3159

Name of the Vulnerable Software and Affected Versions Ovation affected versions not specified Description The issue is related to weaknesses in the authentication procedure of the Ovation distributed system management protocols. This can be exploited by a remote attacker to access confidential...

PT-2022-37657

Уязвимость ядра CMS-системы Drupal связана с недостатками процедуры аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии...

PT-2021-8057

Name of the Vulnerable Software and Affected Versions MicroLogix 1400 affected versions not specified Description The issue is related to shortcomings in the authentication procedure of the MicroLogix 1400 programmable logic controller's software. Exploitation of this issue could allow a remote...

PT-2021-2757

Name of the Vulnerable Software and Affected Versions: ОИК Диспетчер НТ affected versions not specified Description: The issue is related to weaknesses in the authentication procedure of the SCADA system. It may allow a remote attacker to elevate their privileges. Recommendations: At the moment,...

PT-2021-2056

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 88.0.4324.96 Description: The issue is related to insufficient policy enforcement in the File System API, allowing a remote attacker to bypass filesystem restrictions. This can be achieved via a crafted HTML...

PT-2017-1534

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Description The issue is related to a DCOM object in Helppane.exe, which allows local users to gain privileges via a crafted application. It is associated with weaknesses in the...

PT-2016-1107

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller versions 7.6.x through 8.0 before 8.0.121.0 Cisco Wireless LAN Controller versions 8.1 before 8.1.131.0 Description The issue is related to weaknesses in the authentication procedure of the Cisco wireless LAN...

AWCM 2.2 Access Bypass Vulnerability

AWCM version 2.2 appears to suffer from cookie forgery and direct access vulnerabilities. Vulnerability Report AWCM 2.2 CVE-Candidate-ID: CVE-2012-2437, CVE-2012-2438 Issue: Access Control Bug in AWCM 2.2, Anyone can build the cookie and inserts DB records. Author: Sooel Son sonpostman at gmail d...

Cerberus FTP Server 2.1 - Information Disclosure

source: https://www.securityfocus.com/bid/7369/info It has been reported that Cerberus FTP Server is prone to an information disclosure weakness. The problem exists in the way the FTP server handles the authentication procedure. An attacker may exploit a weakness in error handling to disclose val...