Authentication flaw

EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-force authentication bypass such as in CVE-2021-27513 exploitation...

XYCMS message board has a logic flaw vulnerability

XYCMS message board is to asp access for the development of asp message board source code. XYCMS message board has a logic flaw vulnerability, attackers can use this vulnerability to carry out unlimited number of brute-force attacks...

CVE-2021-27514

EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-force authentication bypass such as in CVE-2021-27513 exploitation...

CVE-2021-27514

EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-force authentication bypass such as in CVE-2021-27513 exploitation...

CVE-2021-27514

CVE-2021-27514 affects EyesOfNetwork 5.3-10. The session management uses an 8–10 digit session ID, which could enable brute-force authentication bypass. Publicly documented details state this configuration risk and relate it to CVE-2021-27513 exploitation. Connected sources confirm the affected p...

PT-2021-17487

Name of the Vulnerable Software and Affected Versions EyesOfNetwork versions 5.3 through 5.3-10 Description The issue concerns the use of an integer session ID with a length of between 8 and 10 digits, which could potentially be exploited for brute-force authentication bypass. Recommendations For...

CVE-2021-27514: Improper Restriction of Excessive Authentication Attempts

EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-force authentication bypass such as in CVE-2021-27513 exploitation...

EyesOfNetwork Security Vulnerability

EyesOfNetwork EON is an open source, free IT monitoring solution from the EyesOfNetwork community. The solution provides features such as a business process configuration tool, generating pop-up windows when events occur in the active queue, and more. A security vulnerability exists in...

The vulnerability of the microprogrammed network router Advantech BB-ERT351, related to authentication errors, allows a hacker to obtain the administrator’s password.

The vulnerability of the microprogrammed network router Advantech BB-ERT351 is related to the lack of restrictions on the number of authentication attempts. Exploiting this vulnerability allows a malicious actor to brute-force the administrator password remotely...

RDP, the ransomware problem that won’t go away

The year 2020 will certainly be remembered as one of the most difficult and tragic years humankind has faced in modern times. The global pandemic changed the way we live and work in ways unimaginable, perhaps forever. It also altered the cybersecurity landscape dramatically. The FBI reported a 30...

CVE-2020-35565

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. The login pages bruteforce detection is disabled by default...

CVE-2020-35565

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. The login pages bruteforce detection is disabled by default...

E-commerce under Brute-Force attacks: how Wallarm stops it

Most of the Wallarm e-commerce customers are running WAF protection with Brute-Force attacks protection functionality The post E-commerce under Brute-Force attacks: how Wallarm stops it appeared first on Wallarm...

CVE-2021-21472

SAP Software Provisioning Manager 1.0 SAP NetWeaver Master Data Management Server 7.1 does not have an option to set password during its installation, this allows an authenticated attacker to perform various security attacks like Directory Traversal, Password Brute force Attack, SMB Relay attack,...

CVE-2021-21472

SAP Software Provisioning Manager 1.0 SAP NetWeaver Master Data Management Server 7.1 does not have an option to set password during its installation, this allows an authenticated attacker to perform various security attacks like Directory Traversal, Password Brute force Attack, SMB Relay attack,...

Directory traversal

SAP Software Provisioning Manager 1.0 SAP NetWeaver Master Data Management Server 7.1 does not have an option to set password during its installation, this allows an authenticated attacker to perform various security attacks like Directory Traversal, Password Brute force Attack, SMB Relay attack,...

CVE-2021-21472

SAP Software Provisioning Manager 1.0 SAP NetWeaver Master Data Management Server 7.1 does not have an option to set password during its installation, this allows an authenticated attacker to perform various security attacks like Directory Traversal, Password Brute force Attack, SMB Relay attack,...

CVE-2021-21472

CVE-2021-21472 affects SAP Software Provisioning Manager 1.0 and SAP NetWeaver Master Data Management Server 7.1. The root cause is the absence of a password option during installation, allowing an authenticated attacker on the network to perform attacks such as directory traversal, password brut...

CVE-2021-21472: Missing Authentication for Critical Function

SAP Software Provisioning Manager 1.0 SAP NetWeaver Master Data Management Server 7.1 does not have an option to set password during its installation, this allows an authenticated attacker to perform various security attacks like Directory Traversal, Password Brute force Attack, SMB Relay attack,...

PT-2021-14540 · Sap · Sap Software Provisioning Manager +1

Name of the Vulnerable Software and Affected Versions: SAP Software Provisioning Manager version 1.0 SAP NetWeaver Master Data Management Server version 7.1 Description: The issue allows an authenticated attacker to perform various security attacks due to the lack of an option to set a password...