CVE-2021-27188

CVE-2021-27188 建议描述 由“Sovremennye Delovye Tekhnologii”开发的 FX Aggregator 终端客户端允许攻击者通过对受害者的账户进行五次无效登录尝试，导致拒绝服务（访问暂停五小时）。 漏洞类型 其他 DoS 产品供应商 OOO Sovremennye Delovye Tekhnologii 受影响产品代码库 Fx-agreggator 终端客户端 - 1 受影响组件 受影响的可执行文件 攻击类型 远程 影响 拒绝服务 true 攻击向量 要利用此漏洞，攻击者需要使用无效凭据尝试以其他用户身份登录 5 次。合法用户将被封禁 5 小时。...

CVE-2021-27187

CVE-2021-27187 建议描述 FX Aggregator 终端客户端（由“Sovremennye Delovye Tekhnologii”开发）在勾选“保存密码”复选框时，会以明文形式将认证凭据存储在 login.sav 文件中。 漏洞类型其他 CWE-522 凭据保护不足 供应商 OOO Sovremennye Delovye Tekhnologii 受影响产品代码库 Fx-agreggator 终端客户端 - 1 受影响组件 受影响文件 "login.sav" 影响信息泄露 true 供应商是否已确认或承认该漏洞？ true 发现者 Maria Kononova（Jet...

EUVD-2021-13953

Malware in sbrugna...

EUVD-2021-13954

Malware in sbrugna...

CVE-2021-27188

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service access suspended for five hours by making five invalid login attempts to a victim's account...

CVE-2021-27188

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service access suspended for five hours by making five invalid login attempts to a victim's account...

CVE-2021-27188

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service access suspended for five hours by making five invalid login attempts to a victim's account...

CVE-2021-27187

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 stores authentication credentials in cleartext in login.sav when the Save Password box is checked...

CVE-2021-27187

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 stores authentication credentials in cleartext in login.sav when the Save Password box is checked...

Code injection

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service access suspended for five hours by making five invalid login attempts to a victim's account...

CVE-2021-27188

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service access suspended for five hours by making five invalid login attempts to a victim's account...

CVE-2021-27187

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 stores authentication credentials in cleartext in login.sav when the Save Password box is checked...

CVE-2021-27188

The CVE-2021-27188 entry concerns the Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1. Impact is a denial of service: an attacker can trigger an access suspension of five hours by making five invalid login attempts. The root cause is not explicitly detailed in the available docume...

CVE-2021-27188

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service access suspended for five hours by making five invalid login attempts to a victim's account...

CVE-2021-27187

The FX Aggregator terminal client 1 from Sovremennye Delovye Tekhnologii stores authentication credentials in cleartext in login.sav when the Save Password box is checked. Affected item: login credential storage within the client. Root cause: credentials are kept unencrypted in a local file. Impa...

CVE-2021-27187

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 stores authentication credentials in cleartext in login.sav when the Save Password box is checked...

Sovremennye Delovye Tekhnologii FX Aggregator Security Breach

A security vulnerability exists in Sovremennye Delovye Tekhnologii FX Aggregator that can be exploited by an attacker to cause a denial of service by making five invalid login attempts to a victim's account...

Sovremennye Delovye Tekhnologii FX Aggregator Security Breach

A security vulnerability exists in Sovremennye Delovye Tekhnologii FX that originates from storing authentication credentials in plaintext during login...