3182 matches found
CVE-2017-2624
It was found that xorg-x11-server before 1.19.0 including uses memcmp to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp implementations return after an invalid byte is seen, this causes a ti...
First Practical SHA-1 Collision Attack Arrives
Researchers unveiled on Thursday the first practical collision attack for the 22-year old cryptographic hash function SHA-1. While long expected, news of the attack, dubbed ‘SHAttered,’ should further accelerate the urgency of sunsetting of the maligned algorithm. Researchers from Google, Elie...
Windows Botnet Spreading Mirai Variant
A Chinese-speaking attacker is spreading a Mirai variant from a repurposed Windows-based botnet. Researchers at Kaspersky Lab published a report today, and said the code was written by an experienced developer who also built in the capability to spread the IoT malware to Linux machines under...
CVE-2016-9366
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPor...
Design/Logic Flaw
An issue was discovered in Kabona AB WebDatorCentral WDC application prior to Version 3.4.0. WDC does not limit authentication attempts that may allow a brute force attack method...
CVE-2016-8347
An issue was discovered in Kabona AB WebDatorCentral WDC application prior to Version 3.4.0. WDC does not limit authentication attempts that may allow a brute force attack method...
CVE-2016-5801
CVE-2016-5801 affects OmniMetrix OmniView (Version 1.2). Root cause: weak password requirements allow brute-forcing credentials over HTTP, enabling remote access. Impact per sources: credential compromise could enable control of associated backup generators. Mitigation details in public documents...
CVE-2016-8347: Improper Authentication
An issue was discovered in Kabona AB WebDatorCentral WDC application prior to Version 3.4.0. WDC does not limit authentication attempts that may allow a brute force attack method...
PT-2017-9627
Name of the Vulnerable Software and Affected Versions Kabona AB WebDatorCentral WDC versions prior to 3.4.0 Description An issue in the WDC application allows for a brute force attack method due to the lack of limitation on authentication attempts. Recommendations For versions prior to 3.4.0,...
Cryptographic Protection Bypass
OpenSSL is vulnerable to cryptographic protection bypass. This is possible because it doesn't ensure that the PRNG is seeded before proceeding with a handshake. The flaw allows attackers to defeat the cryptographic protection mechanisms by sniffing the network then performing a brute-force attack...
Code injection
Samsung KNOX 1.0 uses a weak eCryptFS Key generation algorithm, which makes it easier for local users to obtain sensitive information by leveraging knowledge of the TIMA key and a brute-force attack...
Brute-force Session Guessing Attacks
sockjs-client is vulnerable to brute-force session guessing attacks. The vulnerability is due to using default random 8-character long session ID which is not robust enough to prevent the attackers from guessing the ID using the Brute-Force search...
NTP.org 'ntpd' Predictable Random Number Generator Weakness Brute Force Attack Vulnerability
NTP.org SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ntp:ntp"; ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.809780";...
Steghide - Brute Force Attack to Find Hide Information and Password in a file
Execute a brute force attack with Steghide to file with hide information and password established. How it work Cloning this repo to your computer and typing in your terminal: git clone https://github.com/Va5c0/Steghide-Brute-Force-Tool.git To launch the script by typing: python stegbrute.py optio...
CVE-2016-4028
Open-Xchange OX Guard (before 2.4.0-rev8) is affected by a padding oracle flaw in the authentication token handling when using AES-CBC. The API may reveal padding validity via error codes, enabling brute-forcing of a guest token’s contents (OxReaderID cookie and auth parameter) to potentially dis...
Design/Logic Flaw
IBM BigFix Remote Control before 9.1.3 does not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach...
CVE-2016-2944: Improper Authentication
IBM BigFix Remote Control before 9.1.3 does not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach...
Design/Logic Flaw
IBM Security Access Manager for Mobile 8.x before 8.0.1.4 IF3 and Security Access Manager 9.x before 9.0.1.0 IF5 do not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach...
Yandex Browser Authentication Bypass Vulnerability
Yandex Browser for desktop is a desktop browser from the Russian company Yandex.Yandex Browser Translator is one of the translation applications. A security bypass vulnerability exists in the Yandex Protect Anti-phishing warning feature of Yandex Browser for desktop. A remote attacker can exploit...
