2769 matches found
Remote Command Execution
kernel-rt is vulnerable to remote command execution. The vulnerability exists as a brute-force attack can be used to retrieve a cookie which can be used to execute SysRq commands via ICMP Echo Request packets...
Pyrit - The Famous WPA Precomputed Cracker
Pyrit allows you to create massive databases of pre-computed WPA/WPA2-PSK authentication phase in a space-time-tradeoff. By using the computational power of Multi-Core CPUs and other platforms through ATI-Stream,Nvidia CUDA and OpenCL, it is currently by far the most powerful attack against one o...
50m-ctf: `Cody trolled us all` h1-702 CTF write-up
Premise I use not to play CTF challenges because they usually absorb me entirely. I cannot think of anything else but "I want that flag!". That said, this is going to be a long story: no princess, no dragoons, only a tweet. https://twitter.com/Hacker0x01/status/1100543680383832065 Level 0 - Nothi...
CVE-2019-6524
CVE-2019-6524 affects Moxa IKS/EDS industrial switches. The ICS advisory (ICSA-19-057-01) and Tenable plugin summarize brute-force style failures allowing password discovery via excessive authentication attempts. Affected products include IKS-G6824A series (versions 5.6 and earlier) and EDS serie...
Authentication flaw
Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to discover passwords via brute force attack...
No One is Safe: the Five Most Popular Social Engineering Attacks Against Your Company’s Wi-Fi Network
Your Wi-Fi routers and access points all have strong WPA2 passwords, unique SSIDs, the latest firmware updates, and even MAC address filtering. Good job, networking and cybersecurity teams! However, is your network truly protected? TL;DR: NO! In this post, I’ll cover the most common social...
CVE-2018-20371
PhotoRange Photo Vault 1.2 appends the password to the URI for authorization, which makes it easier for remote attackers to bypass intended GET restrictions via a brute-force approach, as demonstrated by "GET /login.htmlpasswd1" and "GET /login.htmlpasswd2" and so on...
W3Brute - Automatic Web Application Brute Force Attack Tool
w3brute is an open source penetration testing tool that automates attacks directly to the website's login page. w3brute is also supported for carrying out brute force attacks on all websites. Features 1. Scanner: w3brute has a scanner feature that serves to support the bruteforce attack process...
botan2 -- Side channel during ECC key generation
botan2 developers reports: A timing side channel during ECC key generation could leak information about the high bits of the secret scalar. Such information allows an attacker to perform a brute force attack on the key somewhat more efficiently than they would otherwise. Found by Ján Jančár using...
RATELIMITED: Information Disclosure PHPpgAdmin
PHPpgAdmin is a piece of script which allows system administrators to manage their Postgres databases easily from a webUI. We had forgotten to limit access to this script, resulting in the ability for a brute-force attack to happen...
Huawei VIP Application Service Information Disclosure Vulnerability
Huawei VIP App is a mobile application service. The app mainly serves Malaysian users who have purchased P20 series, Nova3/3i and Mate 20. The Huawei VIP App service is vulnerable to information leakage. A brute force attacker could obtain some of the user's information...
Samba Security Bypass and Denial of Service Vulnerabilities
Samba is a freeware implementation of the SMB protocol on Linux and UNIX systems, consisting of a server and a client program. Samba suffers from a security bypass vulnerability and a denial-of-service vulnerability that can be exploited by an attacker to conduct a brute-force attack...
RubyGems: 65534 times efficient, Brute-force attack for api_key
I have found that type checking for apikey is insufficient in rubygems.org's source code. https://github.com/rubygems/rubygems.org/blob/master/app/controllers/applicationcontroller.rbL63 ruby def authenticatewithapikey apikey = request.headers"Authorization" || params:apikey @apiuser =...
CVE-2018-7363
ZTE ZXHN F670 devices with firmware versions up to 1.1.10P3T18 are affected by an improper authorization vulnerability. The appviahttp service has no authorization delay, allowing brute‑force credential attempts. Connected records confirm affected versions and brute‑force risk; no exploit details...
CVE-2018-19076
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The FTP and RTSP services make it easier for attackers to conduct brute-force authentication...
Design/Logic Flaw
The wp-db-backup plugin 2.2.4 for WordPress relies on a five-character string for access control, which makes it easier for remote attackers to read backup archives via a brute-force attack...
CVE-2014-10076
The wp-db-backup plugin 2.2.4 for WordPress relies on a five-character string for access control, which makes it easier for remote attackers to read backup archives via a brute-force attack...
CVE-2014-10076
CVE-2014-10076 affects the WordPress plugin WP-DB-Backup (v2.2.4). The vulnerability arises because access control relies on a five-character string, enabling remote attackers to read backup archives via brute-force. Documents consistently describe this as a credential/authorization weakness allo...
Security Bulletin: Brute-force attack in ClearQuest Web (CVE-2014-3101)
Summary IBM Rational ClearQuest Web is vulnerable to brute-force attack. Vulnerability Details CVE ID: CVE-2014-3101 Description: IBM Rational ClearQuest CQ could allow a remote attacker to bypass security restrictions, caused by an error in the login form. An attacker could exploit this...
Design/Logic Flaw
An issue was discovered in PublicCMS V4.0.180825. For an invalid login attempt, the response length is different depending on whether the username is valid, which makes it easier to conduct brute-force attacks...