Design/Logic Flaw

Smartphone Passbook 1.0.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information from encrypted communications via a crafted certificate...

CVE-2015-0874

Smartphone Passbook 1.0.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information from encrypted communications via a crafted certificate...

budget-communications.com XSS vulnerability

Vulnerable URL: https://www.budget-communications.com/index.php Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description| Value...

nflcommunications.com XSS vulnerability

Vulnerable URL: https://nflcommunications.com/Pages/Forms/AllItems.aspx?FollowSite=0=%27-confirm%27OPENBUGBOUNTY%27-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 20.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 278418 VIP...

Code injection

SEIL/X 4.60 to 5.72, SEIL/B1 4.60 to 5.72, SEIL/x86 3.20 to 5.72, SEIL/BPV4 5.00 to 5.72 allows remote attackers to cause a temporary failure of the device's encrypted communications via a specially crafted packet...

CVE-2017-10856

SEIL/X 4.60 to 5.72, SEIL/B1 4.60 to 5.72, SEIL/x86 3.20 to 5.72, SEIL/BPV4 5.00 to 5.72 allows remote attackers to cause a temporary failure of the device's encrypted communications via a specially crafted packet...

CVE-2017-10856

SEIL/X 4.60 to 5.72, SEIL/B1 4.60 to 5.72, SEIL/x86 3.20 to 5.72, SEIL/BPV4 5.00 to 5.72 allows remote attackers to cause a temporary failure of the device's encrypted communications via a specially crafted packet...

CVE-2017-10856

CVE-2017-10856 affects SEIL/X (4.60–5.72), SEIL/B1 (4.60–5.72), SEIL/x86 (3.20–5.72), and SEIL/BPV4 (5.00–5.72). The vulnerability allows remote attackers to cause a temporary failure of the device’s encrypted communications by sending specially crafted packets. Root cause is described as an flaw...

Denial of Service Vulnerability in Multiple Internet Initiative Japan SEIL Series Routers

Internet Initiative Japan SEIL/X, etc. are router products of Internet Initiative Japan. A security vulnerability exists in several Internet Initiative Japan SEIL series routers. The vulnerability can be exploited by a remote attacker with specially crafted packets to briefly prevent encrypted...

Blueborne – Don’t Panic!

Here is what we know right now: Security company Armis recently released research identifying eight newly discovered vulnerabilities that exist in the wireless communications protocol Bluetooth, which could potentially affect a large percentage of the estimated 8.2 billion Bluetooth enabled...

Equifax Breach – an Example of Good Communications

Equifax announced a massive breach that could impact at least 143 million US consumers. That’s 44 percent of the US population. This breach will have a significant impact on a lot of people. Companies in the financial sector take cybersecurity very seriously. Part of that work is accepting the...

Cisco Unified Communications Manager Denial of Service Vulnerability (CNVD-2017-32527)

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A denial of service vulnerabilit...

Design/Logic Flaw

A vulnerability in the Trust Verification Service TVS of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper handling of Transport Layer Security TLS traffic by...

CVE-2017-6791

A vulnerability in the Trust Verification Service TVS of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper handling of Transport Layer Security TLS traffic by...

CVE-2017-6791

A vulnerability in the Trust Verification Service TVS of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper handling of Transport Layer Security TLS traffic by...

CVE-2017-6791

CVE-2017-6791 affects Cisco Unified Communications Manager Trust Verification Service (TVS). A remote, unauthenticated attacker can cause a DoS by sending incomplete TLS traffic, denying TVS access until a restart. Affected releases include 10.0(1.10000.24), 10.5(2.10000.5), 11.0(1.10000.10), and...

Honda Moto LINC Validation SSL Certificate Vulnerability

Honda Moto LINC is a mobile application from Honda Japan for managing motorcycle information such as maintenance records and fuel consumption. A security vulnerability exists in Honda Moto LINC version 1.6.1, which originates from the program failing to validate an SSL certificate. An attacker...

Cisco Unified Communications Manager Trust Verification Service Denial of Service Vulnerability

A vulnerability in the Trust Verification Service TVS of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper handling of Transport Layer Security TLS traffic by...

European Companies Must Tell Employees If Their Work Emails Are Being Monitored

Finally, European companies must inform employees in advance if their work email accounts are being monitored. The European Court of Human Rights ECHR on Tuesday gave a landmark judgement concerning privacy in the workplace by overturning an earlier ruling that gave employers the right to spy on...

FDA Recalls 465K Pacemakers Tied to MedSec Research

The United States Federal Drug Administration is recalling 465,000 pacemakers that attackers can gain unauthorized access to issue commands, change settings and maliciously disrupt. Affected are four models manufactured by Abbott Laboratories. According to the FDA, the recalls of affected...