639 matches found
GE Healthcare Discovery NM 750b Trust Management Vulnerability
The GE Healthcare Discovery NM 750b is a high-end molecular breast imaging device from General Electric GE for the healthcare industry. A security vulnerability exists in the GE Healthcare Discovery NM 750b that stems from the use of '2getin' as a password for the Telnet and FTP insite accounts. ...
Many Drug Pumps Open to Variety of Security Flaws
In April, a security researcher disclosed a litany of severe vulnerabilities in the PCA3 drug-infusion pump manufactured by a company named Hospira. He went so far as to call the pump “the least secure IP enabled device I’ve ever touched in my life.” As it turns out, those same vulnerabilities...
Cisco IOS/IOS XE Software Denial of Service Vulnerability
Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A denial-of-service vulnerability exists in Cisco IOS/IOS XE Software that allows attackers to launch denial-of-service attacks and deny service to legitimate users...
Community Health Systems APT Data Breach Medical Espionage
At first blush, the Community Health Systems data breach by Chinese hackers seems to be an anomaly. State-sponsored attackers generally target intellectual property for the purposes of military or economic gain; stealing healthcare credentials and personal patient records seems incongruous. But...
DVR Infected with Bitcoin Mining Malware
Johannes Ullrich of the SANS Institute claims to have found malware infecting digital video recorders DVR predominately used to record footage captured by surveillance camera systems. Oddly enough, Ullrich claims that one of the two binaries of malware implicated in this attack scheme appears to ...
Heap overflow
Heap-based buffer overflow in the wdmincallback function in drivers/usb/class/cdc-wdm.c in the Linux kernel before 3.8.4 allows physically proximate attackers to cause a denial of service system crash or possibly execute arbitrary code via a crafted cdc-wdm USB device...
Group Claims Hack of Vodafone Sure Signal Puts Customers At Risk
A hardware hacking group is claiming to have found a way to turn Vodafone’s Sure Signal Femtocell base stations into hacking devices that can siphon off subscribers’ phone data and then use it to make calls on their account. The analysis of the Sure Signal product was published on Wednesday by a...
New iPhone Jailbreak Makes Short Work of World's 'Most Secure' OS
It wasn’t long ago – just a month in fact – that Apple’s iOS mobile operating system was being called the ‘Most secure’ OS. Period.’ A few weeks later, and the security of that OS has fallen again to the talents of Comex, an as-yet-unnamed mobile device hacker whose work is attracting kudos from...
Clear iSpot / Clearspot 2.0.0.0 Cross Site Request Forgery
Trustwave's SpiderLabs Security Advisory TWSL2010-008: Clear iSpot/Clearspot CSRF Vulnerabilities https://www.trustwave.com/spiderlabs/advisories/TWSL2010-008.txt Published: 2010-12-10 Version: 1.0 Vendor: Clear http://www.clear.com Products: iSpot / ClearSpot 4G http://www.clear.com/devices...
Huawei MT800 Cross Site Request Forgery
Description: Huawei MT880 is a device offered by the algerian telecom operator - FAWRI, to provide ADSL Internet connexion and it's already widely in use. Overview: Huawei MT880 firmware and its default configuration has flaws, which allows LAN users to gain unauthorized full access to device. He...
CVE-2003-1270
AN HTTP 1.41e allows remote attackers to cause a denial of service borken pipe via an HTTP request to aux.cgi with a long argument, possibly triggering a buffer overflow or MS-DOS device vulnerability...
CVE-2003-1270
CVE-2003-1270 is a remote-denial-of-service vulnerability where an HTTP 1.41e server may be triggered by sending a long argument to aux.cgi, potentially causing a buffer overflow or MS-DOS device vulnerability. The connected documents confirm the issue exists and describe the impact as an unauthe...
Multiple networking devices fail to set the "Secure" attribute of a cookie
Overview Multiple vendors' networking devices fail to set the "Secure" cookie attribute and could disclose sensitive information about a user's HTTP session. Description Many networking devices provide a built-in web server, which may support the HTTPS protocol. When a user logs into the device...
Fedora Core 1 : kernel-2.4.22-1.2188.nptl (2004-111)
A memory leak was fixed in an error path in the dofork routine. This was unlikely to have caused problems in real world situations. The information leak fixed in the previous errata was also found to affect XFS and JFS. The Common Vulnerabilities and Exposures project cve.mitre.org assigned the...
CVE-2000-0168
Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka the "DOS Device in Path Name" vulnerability...
CVE-2000-0364
screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys...
CVE-1999-0507
An account on a router, firewall, or other network device has a guessable password...
redhat.6.0.dev.cdrom.perms.txt
Date: Thu, 3 Jun 1999 18:46:05 +0200 From: Salvatore Sanfilippo -antirez- To: [email protected] Subject: Re: RedHat 6.0 cdrom permissions was RedHat 6.0, /dev/pts permissions bug when using xterm On Sun, Jun 06, 1999 at 07:15:05PM +0000, noc-wage wrote: Many of you RedHat 6.0 users who install...
