Microsoft Blames Russian Hackers for Prestige Ransomware Attacks on Ukraine and Poland

Microsoft on Thursday attributed the recent spate of ransomware incidents targeting transportation and logistics sectors in Ukraine and Poland to a threat cluster that shares overlaps with the Russian state-sponsored Sandworm group. The attacks, which were disclosed by the tech giant last month,...

Unauthorized Access Vulnerability in Iridium II Firewall System

Nanjing Iridium Information Technology Co., Ltd Iridium Information is one of the leading Internet and network security product companies in China, headquartered in Nanjing Yangtze River Science and Technology Park, Jiangsu Province. An unauthorized access vulnerability exists in Iridium's...

iridiumconcesiones.com Cross Site Scripting vulnerability OBB-1320779

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

iridium.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1188747 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Citrix Data Breach – Iranian Hackers Stole 6TB of Sensitive Data

Popular enterprise software companyCitrix that provides services to the U.S. military, the FBI, many U.S. corporations, and various U.S. government agencies disclosed last weekend a massive data breach of its internal network by "international cyber criminals." Citrix said it was warned by the FB...

Citrix Data Breach – Iranian Hackers Stole 6TB of Sensitive Data

Popular enterprise software company Citrix that provides services to the U.S. military, the FBI, many U.S. corporations, and various U.S. government agencies disclosed last weekend a massive data breach of its internal network by "international cyber criminals." Citrix said it was warned by the F...

Weak Password Vulnerability in Vulnerability Scanning System of Nanjing Iridium Information Technology Co.

Nanjing Iridium Information Technology Co., Ltd. vulnerability scanning system is a vulnerability scanner that supports IP address segment batch reverse domain name checking and intranet penetration scanning, which can support host vulnerability scanning, Web vulnerability scanning, weak password...

Iridium Xun firewall default password

No description provided by source...

Elastix transactionID SQL Injection Vulnerability

Elastix is an Asterisk PBX operating tool. A SQL injection vulnerability in the Elastix a2billing/customer/iridiumthreed.php script handling transactionID allows remote attackers to exploit the vulnerability by submitting specially crafted SQL queries to manipulate or obtain database data...

CVE-2014-0327

The Terminal Upgrade Tool in the Pilot Below Deck Equipment BDE and OpenPort implementations on Iridium satellite terminals allows remote attackers to execute arbitrary code by uploading new firmware to TCP port 54321...

CVE-2014-0326

The Pilot Below Deck Equipment BDE and OpenPort implementations on Iridium satellite terminals allow remote attackers to read hardcoded credentials via the web interface...

Code injection

The Terminal Upgrade Tool in the Pilot Below Deck Equipment BDE and OpenPort implementations on Iridium satellite terminals allows remote attackers to execute arbitrary code by uploading new firmware to TCP port 54321...

Hardcoded credentials

The Pilot Below Deck Equipment BDE and OpenPort implementations on Iridium satellite terminals allow remote attackers to read hardcoded credentials via the web interface...

CVE-2014-0327

The Terminal Upgrade Tool in the Pilot Below Deck Equipment BDE and OpenPort implementations on Iridium satellite terminals allows remote attackers to execute arbitrary code by uploading new firmware to TCP port 54321...

CVE-2014-0326

The Pilot Below Deck Equipment BDE and OpenPort implementations on Iridium satellite terminals allow remote attackers to read hardcoded credentials via the web interface...

CVE-2014-0327

CVE-2014-0327 affects Iridium Pilot BDE and OpenPort on Iridium terminals. The vulnerability stems from an unauthenticated firmware upgrade tool accessible via TCP port 54321, allowing remote attackers to upload firmware and execute arbitrary code, potentially gaining privileged access. Publicly,...

CVE-2014-0326

CVE-2014-0326 affects Iridium Pilot BDE (Below Deck Equipment) and OpenPort devices, where the web interface exposes hardcoded administrator credentials. The root cause is hardcoded credentials (CWE-798) and an insecure protocol that allows unauthenticated remote access to privileged functions (C...

Iridium Pilot and OpenPort contain multiple vulnerabilities

Overview Broadband satellite terminals using Iridium Pilot and OpenPort have been found to contain undocumented hardcoded login credentials CWE-798. Additionally, these broadband satellite terminals utilize an insecure proprietary communications protocol that allows unauthenticated users to perfo...