210 matches found
python-keystoneclient: middleware memcache encryption and signing bypass
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass...
Arbitrary file deletion
The "encrypt wallet" feature in wxBitcoin and bitcoind 0.4.x before 0.4.1, and 0.5.0rc, does not properly interact with the deletion functionality of BSDDB, which allows context-dependent attackers to obtain unencrypted private keys from Bitcoin wallet files by bypassing the BSDDB interface and...
Offline Windows Analysis and Data Extraction (OWADE) - Forensics tool to expose all your online activity
Offline Windows Analysis and Data Extraction OWADE - Forensics tool to expose all your online activity Researchers "Elie Bursztein " from Stanford University in California have managed to bypass the encryption on a PC's hard drive to find out what websites a user has visited and whether they have...
DECT标准密码加密绕过漏洞
Bugraq ID: 38152 DECT是数字增强型无线通讯标准。 DECT标准密码DSC加密标准存在加密绕过问题，允许攻击者恢复密钥。 攻击者可以利用漏洞破解DSC加密算法，然后读取无线设备发送到基站的加密数据，允许攻击者获得敏感信息。 针对DECT标准密码的分析将在FSE2010会议上演讲。总的来说可以在PC上在几分钟内恢复DSC的密钥，但是需要几小时获取足够多的密钥流。 DECT Forum DECT 目前没有解决方案提供： http://www.dect.org/index.aspx...
QNAP Systems Encryption Bypass
Title: Crypto backdoor in Qnap storage devices Date: 18 September 2009 URL: http://www.baseline-security.de/downloads/BSC-QnapCryptoBackdoor-CVE-2009-3200.txt Vendor: QNAP Systems Products verified: TS-239 Pro, TS-639 Pro Products unverified: SS-439 Pro, TS-439 Pro, TS-439U-SP/RP, TS-509 Pro,...
DECT cordless telephone security test-use-vulnerability warning-the black bar safety net
Disclaimer: This article tests the use of the DECT phone are has himself, strongly opposed any who used to be discord, or even break the law.! Just use the "hack DECT cordless phone" as keyword Google the following. Found this 2 articles: hack crack DECT cordless telephone security system...
Crack the password file with spear and shield encryption and decryption battle-vulnerability warning-the black bar safety net
Currently on the network encryption software have mushroomed General everywhere, their price is often in the 3 0 yuan, and many friends also have to fork out money to buy these encryption software, but they really can play the role of encryption? Author Super rabbit and WinRAR both software for...
CVE-2002-1653
Technical details such as affected versions, vulnerable components, and exploit information are not publicly provided in the supplied documents. Monitor for updates from official sources to obtain concrete technical details and remediation guidance.
CVE-2002-1653
Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to communicate without encryption despite intended configuration, and may allow remote attackers to sniff sensitive information...
