1286 matches found
Broadening the Scope: A Comprehensive View of Pen Testing
Penetration tests have long been known as a critical security tool that exposes security weaknesses through simulated attacks on an organization's IT environments. These test results can help prioritize weaknesses, providing a road-map towards remediation. However, the results are also capable of...
We Be Jammin’ – Bypassing Chamberlain myQ Garage Doors
ARCHIVED STORY We Be Jammin’ – Bypassing Chamberlain myQ Garage Doors Sam Quinn · JAN 06, 2020 The idea of controlling your garage door remotely and verifying that everything is secure at home, or having packages delivered directly into your garage is enticing for many people. The convenience tha...
CVE-2019-20139
In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup parameter, or the schedulereport.php hour or frequency parameter. Any authenticated user can attack the admin user...
Additional Information on “Cost Estimation” in Veeam Backup for AWS
Related User Guide Page This KB article provides additional information to the following pages: Creating EC2 Backup Policies Step 9. Review Estimated Cost Creating RDS Backup Policies Step 9. Review Estimated Cost Challenge Cost Estimation provides the administrator feedback on estimates of AWS...
SUSE-SU-2019:2414-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following new features were implemented: - jscSLE-4875: CML New device IDs for CML - jscSLE-7294: Add cpufreq driver for Raspberry Pi - fate321840: Reduce memory required to boot capture kernel while usi...
CVE-2019-14261
An issue was discovered on ABUS Secvest FUAA50000 3.01.01 devices. Due to an insufficient implementation of jamming detection, an attacker is able to suppress correctly received RF messages sent between wireless peripheral components, e.g., wireless detectors or remote controls, and the ABUS...
SEW 0508-231-1-00 Frequency Inverter
Binary data 764791.prm...
CVE-2019-13055
Certain Logitech Unifying devices allow attackers to dump AES keys and addresses, leading to the capability of live decryption of Radio Frequency transmissions, as demonstrated by an attack against a Logitech K360 keyboard...
Sql injection
Logitech Unifying devices allow keystroke injection, bypassing encryption. The attacker must press a "magic" key combination while sniffing cryptographic data from a Radio Frequency transmission. NOTE: this issue exists because of an incomplete fix for CVE-2016-10761...
Design/Logic Flaw
Certain Logitech Unifying devices allow attackers to dump AES keys and addresses, leading to the capability of live decryption of Radio Frequency transmissions, as demonstrated by an attack against a Logitech K360 keyboard...
CVE-2019-13055
Certain Logitech Unifying devices allow attackers to dump AES keys and addresses, leading to the capability of live decryption of Radio Frequency transmissions, as demonstrated by an attack against a Logitech K360 keyboard...
Xiaomi Mi 5s Plus Permission License and Access Control Issues Vulnerability
Xiaomi Mi 5s Plus is a smartphone from Chinese company Xiaomi Technology Xiaomi. A security vulnerability exists in Xiaomi Mi 5s Plus. The vulnerability can be exploited by an attacker to cause an anomaly in the touchscreen with the help of a wireless signal between 198 kHz and 203 kHz...
How to Model Risk in an Apex Predator Cyber-World
The threat-intelligence researchers at Alphabet’s Chronicle have borrowed the apex predator concept from ecology to describe today’s multi-organizational, multinational threat actors — the evolution of which could provoke an overhaul of risk analysis and management. However, it’s important to kee...
Schneider Electric Altivar ATV61HC40N4 Variable Speed Drive
Binary data 763976.prm...
Schneider Electric Altivar ATV71H075M3383 Variable Speed Drive
Binary data 764106.prm...
Schneider Electric Altivar ATV71HC25N4 Variable Speed Drive
Binary data 764129.prm...
Schneider Electric Altivar ATV61HU15M3 Variable Speed Drive
Binary data 764056.prm...
Schneider Electric Altivar ATV61H075M3Z Variable Speed Drive
Binary data 763942.prm...