767 matches found
Design/Logic Flaw
An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Find My iPhone" component. It allows physically proximate attackers to bypass the iCloud password requirement for disabling the "Find My iPhone" feature via vectors involving a backup restore...
PT-2018-16455
Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.3 Description The issue involves the Find My iPhone component, allowing physically proximate attackers to bypass the iCloud password requirement for disabling the Find My iPhone feature via vectors involving a backup...
CVE-2018-4172: Undefined Security Weakness
An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Find My iPhone" component. It allows physically proximate attackers to bypass the iCloud password requirement for disabling the "Find My iPhone" feature via vectors involving a backup restore...
CVE-2017-17551
The Backup and Restore feature in Mobotap Dolphin Browser for Android 12.0.2 suffers from an arbitrary file write vulnerability when attempting to restore browser settings from a malicious Dolphin Browser backup file. This arbitrary file write vulnerability allows an attacker to overwrite a...
CVE-2017-15997
In the "NQ Contacts Backup & Restore" application 1.1 for Android, RC4 encryption is used to secure the user password locally stored in shared preferences. Because there is a static RC4 key, an attacker can gain access to user credentials more easily by leveraging access to the preferences XML fi...
CVE-2017-15998
The CVE concerns the Android app NQ Contacts Backup & Restore version 1.1, which uses DES encryption with a static key to protect transmitted contact data. This practice can allow remote attackers to obtain plaintext data by sniffing network traffic, representing a confidentiality impact describe...
CVE-2017-15999
CVE-2017-15999 affects the Android app NQ Contacts Backup & Restore (version 1.1). The root issue is transmission of credentials without HTTPS: during login, the username is sent in cleartext together with an SHA-1 hash of the password. This enables an attacker to crack the password hash or reuse...
CVE-2017-15999: Cleartext Transmission of Sensitive Information
In the "NQ Contacts Backup & Restore" application 1.1 for Android, no HTTPS is used for transmitting login and synced user data. When logging in, the username is transmitted in cleartext along with an SHA-1 hash of the password. The attacker can either crack this hash or use it for further attack...
PT-2017-14351
Name of the Vulnerable Software and Affected Versions NQ Contacts Backup & Restore version 1.1 Description The application transmits login and synced user data without using HTTPS. During login, the username is sent in cleartext along with an SHA-1 hash of the password. This allows an attacker to...
PT-2017-14349
Name of the Vulnerable Software and Affected Versions NQ Contacts Backup & Restore version 1.1 Description The issue concerns the use of a static RC4 key for encryption in the application, which can allow an attacker to more easily gain access to user credentials by accessing the preferences XML...
PT-2017-14350
Name of the Vulnerable Software and Affected Versions NQ Contacts Backup & Restore version 1.1 Description The application uses DES encryption with a static key to secure transmitted contact data, making it easier for remote attackers to obtain cleartext information by sniffing the network...
CVE-2017-15998: Use of a Broken or Risky Cryptographic Algorithm
In the "NQ Contacts Backup & Restore" application 1.1 for Android, DES encryption with a static key is used to secure transmitted contact data. This makes it easier for remote attackers to obtain cleartext information by sniffing the network...
CVE-2017-15997: Use of a Broken or Risky Cryptographic Algorithm
In the "NQ Contacts Backup & Restore" application 1.1 for Android, RC4 encryption is used to secure the user password locally stored in shared preferences. Because there is a static RC4 key, an attacker can gain access to user credentials more easily by leveraging access to the preferences XML fi...
Televes COAXDATA GATEWAY 1Gbps Device Unauthorized Operation Vulnerability
The Televes COAXDATA GATEWAY 1Gbps devices is a wireless router device from the Spanish company Televes. A security vulnerability exists in the Televes COAXDATA GATEWAY 1Gbps devices that stems from a lack of access control for the backup/restore feature. An attacker could exploit the vulnerabili...
CVE-2017-6531
On Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgwv1.02.0014 4.20, the backup/restore feature lacks access control, related to ReadFile.cgi and LoadCfgFile...
Design/Logic Flaw
On Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgwv1.02.0014 4.20, the backup/restore feature lacks access control, related to ReadFile.cgi and LoadCfgFile...
CVE-2017-6531
On Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgwv1.02.0014 4.20, the backup/restore feature lacks access control, related to ReadFile.cgi and LoadCfgFile...
CVE-2017-6531
On Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgwv1.02.0014 4.20, the backup/restore feature lacks access control, related to ReadFile.cgi and LoadCfgFile...
CVE-2017-6531: Undefined Security Weakness
On Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgwv1.02.0014 4.20, the backup/restore feature lacks access control, related to ReadFile.cgi and LoadCfgFile...
