EKFiddle v.0.8.2 - A Framework Based On The Fiddler Web Debugger To Study Exploit Kits, Malvertising And Malicious Traffic In General

A framework based on the Fiddler web debugger to study Exploit Kits, malvertising and malicious traffic in general. Installation Download and install the latest version of Fiddler https://www.telerik.com/fiddler Special instructions for Linux and Mac here:...

Code injection

IBM Security Guardium EcoSystem 10.5 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 141223...

CVE-2018-1498: Insufficiently Protected Credentials

IBM Security Guardium EcoSystem 10.5 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 141223...

Security Bulletin: IBM Security Guardium is affected by a Password in Clear Text vulnerability

Summary IBM Security Guardium has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2018-1498 DESCRIPTION: IBM Security Guardium EcoSystem stores user credentials in plain in clear text which can be read by a local user. CVSS Base Score: 6.2 CVSS Temporal Score: See for the...

HPSBHF03593 rev. 2 - Firmware Trusted Platform Module (fTPM) for Select AMD Client Systems

Potential Security Impact Unauthorized access, elevation of privilege. Source: HP, HP Product Security Response Team PSRT Reported By: CTS-Labs VULNERABILITY SUMMARY A security vulnerability has been identified in specific versions of the AMD firmware-based Trusted Platform Module fTPM. The fTPM ...

Ice Qube Thermal Management Center Information Disclosure Vulnerability

Ice Qube Thermal Management Center is a thermal management application from Ice Qube USA. The program includes features such as email notifications, remote management, LCD display and temperature alarms. An information disclosure vulnerability exists in Ice Qube Thermal Management Center versions...

CVE-2017-17691

Homeputer CL Studio fur HomeMatic 4.0 Rel 160808 and earlier uses cleartext to exchange the username and password between server and client instances, which allows remote attackers to obtain sensitive information via a man in the middle attack...

CA PPM SSL Password Plaintext Storage Vulnerability

CA PPM is a suite of project and portfolio management software from CA USA. The software includes features such as task management, project planning, financial reporting management and resource management. A security vulnerability exists in CA PPM that originates from the program storing SSL...

CVE-2018-6622: Undefined Security Weakness

An issue was discovered that affects all producers of BIOS firmware who make a certain realistic interpretation of an obscure portion of the Trusted Computing Group TCG Trusted Platform Module TPM 2.0 specification. An abnormal case is not handled properly by this firmware while S3 sleep and can...

EKFiddle - A Framework Based On The Fiddler Web Debugger To Study Exploit Kits, Malvertising And Malicious Traffic In General

A framework based on the Fiddler web debugger to study Exploit Kits, malvertising and malicious traffic in general. Installation Download and install the latest version of Fiddler https://www.telerik.com/fiddler Special instructions for Linux and Mac here:...

Design/Logic Flaw

Weak hashing algorithm in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows unauthenticated attacker extract clear text passwords and get root access on the device...

CVE-2018-15124: Inadequate Encryption Strength

Weak hashing algorithm in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows unauthenticated attacker extract clear text passwords and get root access on the device...

PT-2018-12884

Name of the Vulnerable Software and Affected Versions Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 Description The issue concerns a weak hashing algorithm that allows an unauthenticated attacker to extract clear text passwords and gain root access on the device...

GHSA-J49G-MP79-5VM5 coffe-script is malware

The coffe-script package is a piece of malware that steals sensitive data such as a user's private SSH key and bash history, sending them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation If you have found coffe-script installed in your...

EMC NetWorker Server 9.x < 9.1.1.9 / 9.2.x < 9.2.1.4 / 18.1.0.1

The version of EMC NetWorker Server installed on the remote Windows host is 9.x prior to 9.1.1.9 or 9.2.x prior to 9.2.1.4 or 18.1.0.1. It is, therefore, affected by a Clear-Text authentication over network vulnerability. An unauthenticated attacker in the same network could potentially exploit...

Intuit Lacerte 2017 for Windows Information Disclosure Vulnerability

Intuit Lacerte 2017 for Windows is a tax filing software package from Intuit, USA. The software features automatic calculations, automatic diagnostics, and more. A security vulnerability exists in Intuit Lacerte 2017 for Windows, which originates in a client/server environment where the program...

CVE-2018-11050

Dell EMC NetWorker versions between 9.0 and 9.1.1.8 through 9.2.1.3, and the version 18.1.0.1 contain a Clear-Text authentication over network vulnerability in the Rabbit MQ Advanced Message Queuing Protocol AMQP component. User credentials are sent unencrypted to the remote AMQP service. An...

Authentication flaw

Dell EMC NetWorker versions between 9.0 and 9.1.1.8 through 9.2.1.3, and the version 18.1.0.1 contain a Clear-Text authentication over network vulnerability in the Rabbit MQ Advanced Message Queuing Protocol AMQP component. User credentials are sent unencrypted to the remote AMQP service. An...

CVE-2018-11050

Dell EMC NetWorker versions between 9.0 and 9.1.1.8 through 9.2.1.3, and the version 18.1.0.1 contain a Clear-Text authentication over network vulnerability in the Rabbit MQ Advanced Message Queuing Protocol AMQP component. User credentials are sent unencrypted to the remote AMQP service. An...

CVE-2018-11050

Dell EMC NetWorker versions between 9.0 and 9.1.1.8 through 9.2.1.3, and the version 18.1.0.1 contain a Clear-Text authentication over network vulnerability in the Rabbit MQ Advanced Message Queuing Protocol AMQP component. User credentials are sent unencrypted to the remote AMQP service. An...