162 matches found
CVE-2023-32831
In wlan driver, there is a possible PIN crack due to use of insufficiently random values. This could lead to local information disclosure with no execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00325055; Issue ID: MSV-868...
CVE-2023-32831
In wlan driver, there is a possible PIN crack due to use of insufficiently random values. This could lead to local information disclosure with no execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00325055; Issue ID: MSV-868...
Information disclosure
In wlan driver, there is a possible PIN crack due to use of insufficiently random values. This could lead to local information disclosure with no execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00325055; Issue ID: MSV-868...
CVE-2023-32831
CVE-2023-32831 concerns the wlan driver where use of insufficiently random values can enable a local information disclosure without privileges or user interaction. The vulnerability is described across multiple sources as a PIN-crack via weak randomness in the WLAN driver. The CVSS v3.1 metrics (...
CVE-2023-32831
In wlan driver, there is a possible PIN crack due to use of insufficiently random values. This could lead to local information disclosure with no execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00325055; Issue ID: MSV-868...
CVE-2023-32831
In wlan driver, there is a possible PIN crack due to use of insufficiently random values. This could lead to local information disclosure with no execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00325055; Issue ID: MSV-868...
Malvertising via Dynamic Search Ads delivers malware bonanza
Most, if not all malvertising incidents result from a threat actor either injecting code within an existing ad, or intentionally creating one. Today, we look at a different scenario where, as strange as that may sound, malvertising was entirely accidental. The reason this happened was due to the...
The vulnerability of the network software product BIG-IP Access Policy Manager Clients (APM Clients), a control device for access control and remote authentication, stems from the transmission of data in an open manner. This vulnerability allows attackers to execute attacks like TunnelCrack.
The vulnerability of the BIG-IP Access Policy Manager Clients APM Clients, a network software solution for access control and remote authentication, lies in the open transmission of data. Exploiting this vulnerability allows an attacker to execute the TunnelCrack attack by controlling the DNS...
GHSA-87F6-8GR7-PC6H KubePi may leak password hash of any user
Summary http://kube.pi/kubepi/api/v1/users/search?pageNum=1&&pageSize=10 leak password of any user including admin. This leads to password crack attack PoC https://drive.google.com/file/d/1ksdawJ1vShRJyT3wAgpqVmz-Ls6hMA7M/preview Impact - Leaking confidential information. - Can lead to password...
KubePi may leak password hash of any user
Summary http://kube.pi/kubepi/api/v1/users/search?pageNum=1&&pageSize=10 leak password of any user including admin. This leads to password crack attack PoC https://drive.google.com/file/d/1ksdawJ1vShRJyT3wAgpqVmz-Ls6hMA7M/preview Impact - Leaking confidential information. - Can lead to password...
CVE-2023-33921
Siemens SICAM A8000 CP-8031/CP-8050 Master Modules (pre CPCI85 V05) expose a UART console login. With direct physical access, an attacker could brute‑force/crack the root password to gain login. Affected versions are all before CPCI85 V05; Siemens Mitigation: update to CPCI85 V05 or later. If pat...
CVE-2023-33921
A vulnerability has been identified in CP-8031 MASTER MODULE All versions CPCI85 V05, CP-8050 MASTER MODULE All versions CPCI85 V05. The affected devices contain an exposed UART console login interface. An attacker with direct physical access could try to bruteforce or crack the root password to...
MAL-2023-165 Malicious code in causeway_cato_suite_software_crack_fqyw (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0359f452dfb1092fb88594801e5174b4a9de3b2dae976ce76d5815e65c657607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-96 Malicious code in animoto_full_version_portable_crack_rt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a2fb41229dbad8b492edfdbfb07c17b9bce5f61a6a00ae57d5483d13210b06d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-C5VJ-F36Q-P9VG Password Shucking Vulnerability
Impact An improper implementation was found in the password storage process. All hashed passwords stored in Shield v1.0.0-beta.3 or earlier are easier to crack than expected due to the vulnerability. Therefore, they should be removed as soon as possible. If an attacker gets 1 the user's hashed...
Reddit: sensitive data exposure
Summary: A Password hash entry was found in /etc/passwd. This is a major vulnerability since /etc/passwd is a world-readable file by default. Once the password hash is found, an attacker may extract the password using a program like crack. Impact: it is high impact vulnerability .once hacker foun...
GHSA-WJJC-M3FC-FCM8 MoinMoin Denial of Service vulnerability via password_checker function
The passwordchecker function in config/multiconfig.py in MoinMoin prior to version 1.6.1 uses the cracklib and python-crack features even though they are not thread-safe, which allows remote attackers to cause a denial of service segmentation fault and crash via unknown vectors...
MoinMoin Denial of Service vulnerability via password_checker function
The passwordchecker function in config/multiconfig.py in MoinMoin prior to version 1.6.1 uses the cracklib and python-crack features even though they are not thread-safe, which allows remote attackers to cause a denial of service segmentation fault and crash via unknown vectors...
Win-Brute-Logon - Crack Any Microsoft Windows Users Password Without Any Privilege (Guest Account Included)
This PoC was ported in pure PowerShell: https://github.com/DarkCoderSc/power-brute-logon Win Brute Logon Proof Of Concept Release date: 2020-05-14 Target: Windows XP to Latest Windows 10 Version 1909 Weakness location : LogonUserA, LogonUserW, CreateProcessWithLogonA, CreateProcessWithLogonW Usag...
mySCADA myPRO 加密问题漏洞
mySCADA myPRO is an HMI/SCADA system designed primarily for the visualization and control of industrial processes. A security vulnerability exists in mySCADA myPRO that can be exploited by an attacker to crack a previously retrieved password hash...