509 matches found
PT-2018-19320
Уязвимость компоненты блокировщика экрана оконного менеджера fly-wm операционной системы Astra Linux связана с ошибкой, приводящей к невозможности запуска блокировщика экрана в случае, если вызов XGrabKeyboard уже сделан другим клиентом. Эксплуатация уязвимости может позволить нарушителю вызвать...
Browlock flies under the radar with complete obfuscation
Browlocks are the main driving force behind tech support scams, using a combination of malvertising and clever browser locker tricks to fool users. In fact, the effects can be so convincing that people call the rogue Microsoft support number for help because they believe their computer has been...
CVE-2018-16242
oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy BLE to replay ciphertext based on a predictable nonce used in the locking protocol...
CVE-2018-16242
oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy BLE to replay ciphertext based on a predictable nonce used in the locking protocol...
Design/Logic Flaw
oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy BLE to replay ciphertext based on a predictable nonce used in the locking protocol...
CVE-2018-16242
oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy BLE to replay ciphertext based on a predictable nonce used in the locking protocol...
CVE-2018-16242
The CVE-2018-16242 entry describes oBike’s use of Hangzhou Luoping Smart Locker, where an attacker can bypass the locking mechanism by replaying ciphertext in a BLE-based protocol that uses a predictable nonce. Affected component is the bicycle lock system's BLE lock protocol; the underlying issu...
PT-2018-13453
Name of the Vulnerable Software and Affected Versions Hangzhou Luoping Smart Locker affected versions not specified Description The issue concerns a predictable nonce used in the locking protocol of Hangzhou Luoping Smart Locker, which is utilized by oBike to lock bicycles. This predictability...
CVE-2018-16242: Authentication Bypass by Capture-replay
oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy BLE to replay ciphertext based on a predictable nonce used in the locking protocol...
Partnerstroka: Large tech support scam operation features latest browser locker
Tech support scams continue to be one of the top consumer threats in 2018, despite actions from security vendors and law enforcement. Scammers are constantly looking for new ways to reel in more victims, going beyond cold calls impersonating Microsoft to rogue tech support ads using the good name...
CVE-2018-6976
CVE-2018-6976 affects VMware Content Locker for iOS prior to 4.14. The issue is a data protection vulnerability in the SQLite database, related to unencrypted filenames and associated metadata stored by Content Locker. This can expose metadata through the Content Locker’s data storage. Public ref...
CVE-2018-6976
The VMware Content Locker for iOS prior to 4.14 contains a data protection vulnerability in the SQLite database. This vulnerability relates to unencrypted filenames and associated metadata in SQLite database for the Content Locker...
CVE-2018-6976
The VMware Content Locker for iOS prior to 4.14 contains a data protection vulnerability in the SQLite database. This vulnerability relates to unencrypted filenames and associated metadata in SQLite database for the Content Locker...
CVE-2018-6976
The VMware Content Locker for iOS prior to 4.14 contains a data protection vulnerability in the SQLite database. This vulnerability relates to unencrypted filenames and associated metadata in SQLite database for the Content Locker...
Spoofing
The VMware Content Locker for iOS prior to 4.14 contains a data protection vulnerability in the SQLite database. This vulnerability relates to unencrypted filenames and associated metadata in SQLite database for the Content Locker...
CVE-2018-6976: Missing Encryption of Sensitive Data
The VMware Content Locker for iOS prior to 4.14 contains a data protection vulnerability in the SQLite database. This vulnerability relates to unencrypted filenames and associated metadata in SQLite database for the Content Locker...
PT-2018-17855
Name of the Vulnerable Software and Affected Versions VMware Content Locker for iOS versions prior to 4.14 Description The issue relates to a data protection problem in the SQLite database, specifically concerning unencrypted filenames and associated metadata. Recommendations For versions prior t...
VMware Releases Security Updates
VMware has released security updates to address vulnerabilities in VMware AirWatch Agent and Content Locker. An attacker could exploit these vulnerabilities to obtain access to sensitive information. NCCIC encourages users and administrators to review the VMware Security Advisory VMSA-2018-0023 a...
AirWatch Agent and VMware Content Locker updates resolve data protection vulnerabilities
a. The AirWatch Agent for iOS devices contains a data protection vulnerability The AirWatch Agent for iOS devices contains a data protection vulnerability whereby the files and keychain entries in the Agent are not encrypted. VMware would like to thank Stephan Sekula of Compass Security for...
