PT-2021-19850 · Nextcloud +2 · Nextcloud Server +2

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 19.0.13 Nextcloud Server versions prior to 20.0.11 Nextcloud Server versions prior to 21.0.3 Description: The issue affects Nextcloud Server, a package that handles data storage. In the affected versions,...

Yoti: PIN 📌 BYPASS 🥷

Summary: 983980808 IOS App has improper rate limit. When we try to brute force the PIN, we are rate limited for 5 minutes after 5 or 6 attempt. In my testing I found that it was checking the device's local date / time so by changing it we can brute force the PIN. Steps To Reproduce: 1.Install...

Access Control Error Vulnerability in Multiple QSAN Products

QSAN SANOS is a SAN storage management operating system. QSAN XEVO is a flash data management system. QSAN Storage Manager is a NAS operating system. several QSAN products are vulnerable to an access control error that could be exploited by remote attackers to discover user credentials and gain...

CVE-2021-20414

IBM Guardium Data Encryption GDE 3.0.0.2 could allow a user to bruce force sensitive information due to not properly limiting the number of interactions. IBM X-Force ID: 196216...

Passwords by Kaspersky Password Manager exposed to brute-force attack

By Deeba Ahmed If you are using Kaspersky Password Manager for creating passwords, you might want to consider regenerating those you created before Oct 2019. This is a post from HackRead.com Read the original post: Passwords by Kaspersky Password Manager exposed to brute-force attack...

CVE-2021-20415

IBM Guardium Data Encryption GDE 4.0.0.4 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 196217...

Code injection

IBM Guardium Data Encryption GDE 4.0.0.4 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 196217...

CVE-2021-20415

IBM Guardium Data Encryption (GDE) 4.0.0.4 is affected by an inadequate account lockout setting that could let a remote attacker brute-force credentials. The issue is documented under CVE-2021-20415 and is addressed by IBM in a security bulletin that notes fixes in GDE 4.0.0.5 (and newer 5.x seri...

CVE-2021-32522

Improper restriction of excessive authentication attempts vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to discover users’ credentials and obtain access via a brute force attack. Suggest contacting with QSAN and refer to recommendations in QSAN Document...

CVE-2021-32519

Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to recover the plain-text password by brute-forcing the MD5 hash. The referred vulnerability has been solved with the updated version of QSAN Storage Manager...

CVE-2021-32522

Improper restriction of excessive authentication attempts vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to discover users’ credentials and obtain access via a brute force attack. Suggest contacting with QSAN and refer to recommendations in QSAN Document...

Authentication flaw

Improper restriction of excessive authentication attempts vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to discover users’ credentials and obtain access via a brute force attack. Suggest contacting with QSAN and refer to recommendations in QSAN Document...

CVE-2021-32522 QSAN Storage Manager, XEVO, SANOS - Improper Restriction of Excessive Authentication Attempts

Improper restriction of excessive authentication attempts vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to discover users’ credentials and obtain access via a brute force attack. Suggest contacting with QSAN and refer to recommendations in QSAN Document...

CVE-2021-32522

CVE-2021-32522 affects QSAN products including Storage Manager, XEVO, and SANOS. The root cause is an improper restriction of excessive authentication attempts (an access control error) that can allow remote attackers to discover user credentials and gain access via brute-force style attempts. Pu...

CVE-2021-32519

Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to recover the plain-text password by brute-forcing the MD5 hash. The referred vulnerability has been solved with the updated version of QSAN Storage Manager...

NTPd < 4.2.8p2, 4.3.x < 4.3.12 Keygen Vulnerability

NTPd is prone to a vulnerability in ntp-keygen. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ntp:ntp"; ifdescription...

QSAN 多款产品安全漏洞

QSAN SANOS and others are products of QSAN China.QSAN SANOS is a SAN storage management operating system.QSAN XEVO is a flash data management system.QSAN Storage Manager is a NAS operating system. A security vulnerability exists in several QSAN products, which can be exploited by remote attackers...

QSAN 多款产品安全漏洞

QSAN SANOS is a SAN storage management operating system. QSAN XEVO is a flash data management system. QSAN Storage Manager is a NAS operating system. several QSAN products are vulnerable to an access control error that could be exploited by remote attackers to discover user credentials and gain...

IBM Guardium Data Encryption 安全漏洞

IBM Guardium Data Encryption GDE is a software application from IBM, USA. It provides a data security and compliance solution. A security vulnerability exists in IBM Guardium Data Encryption GDE 4.0.0.4, which arises from a vulnerability that allows a remote attacker to brute-force break account...

CVE-2021-20415

IBM Guardium Data Encryption GDE 4.0.0.4 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 196217...