Hackers build a 'Master Key' that unlocks millions of Hotel rooms

If you often leave your valuable and expensive stuff like laptop and passports in the hotel rooms, then beware. Your room can be unlocked by not only a malicious staff having access to the master key, but also by an outsider. A critical design vulnerability in a popular and widely used electronic...

DEBIAN-CVE-2018-9234

GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey...

CVE-2018-9234

GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey...

CVE-2018-9234

GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey...

UBUNTU-CVE-2018-9234

GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey...

Information Disclosure

OpenSSL is vulnerable to decryption oracle attacks. A malicious user on the network can use the server as an oracle to determine the SSLv2 master key...

[SECURITY] Fedora 25 Update: keepass-2.34-1.fc25

KeePass is a free open source password manager, which helps you to remember your passwords in a secure way. You can put all your passwords in one database, which is locked with one master key or a key file. You only have to remember one single master password or select the key file to unlock the...

IBM Control Center and Sterling Control Center Key Cracking Vulnerability

IBM Control Center and Sterling Control Center are both file transfer control and management tools from IBM USA. The tools provide a unified view of the file transfer environment, environment exception response, and other features. A key cracking vulnerability exists in IBM Control Center version...

CVE-2016-0252

IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via unspecified vectors...

CVE-2016-0252

IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via unspecified vectors...

CVE-2016-0252

IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via unspecified vectors...

Code injection

IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via unspecified vectors...

CVE-2016-0252

IBM Control Center and Sterling Control Center are affected by CVE-2016-0252. Affected: IBM Control Center 5.4.0–5.4.2.1 iFix08 and 6.0.0.0–6.0.0.1 iFix05. Root cause: vulnerability allows a local attacker to decrypt the master key under certain conditions, potentially enabling decryption of appl...

Vulnerability of Cisco ASA software, allowing a malicious actor to intercept sessions

The vulnerability exists in OpenSSL due to an improper limitation on the processing of ChangeCipherSpec messages. Exploiting this vulnerability allows a malicious actor to induce the use of a null-length master key in the OpenSSL-to-OpenSSL communication, thereby intercepting the session or gaini...

The vulnerability of Cisco IPS software allows a malicious actor to intercept sessions.

The vulnerability exists in OpenSSL due to an improper limitation on the processing of ChangeCipherSpec messages. Exploiting this vulnerability allows a malicious actor to induce the use of a null-length master key in the OpenSSL-to-OpenSSL communication, thereby intercepting the session or gaini...

How to Decrypt TeslaCrypt Ransomware Files Using Master Key

Here’s some rare good news for victims struggling to unlock files encrypted by the TeslaCrypt ransomware. You can now decrypt all files locked by TeslaCrypt without paying a ransom. That means victims no longer need to search endlessly for ways to recover TeslaCrypt-encrypted data. The solution h...

WiFi Master Key - by wifi.com - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application WiFi Master Key - by wifi.com published at the 'play' market has multiple vulnerabilities...

The vulnerability of the OpenSSL library, which allows a hacker to break the cryptographic security mechanism

The vulnerability of the ssl/s2srvr.c function in the OpenSSL library is related to errors in cryptographic transformations. Exploiting this vulnerability allows a malicious actor to break the cryptographic security mechanism by performing calculations related to SSLv2 traffic, involving function...

The vulnerability of the OpenSSL library, which allows a hacker to decrypt data

The vulnerability in the getclientmasterkey function of the s2srvr.c file, within the SSLv2 implementation using the OpenSSL library, is related to the improper operation of the protection mechanism against prediction attacks. This mechanism incorrectly re-saves the key data before exporting the...

DEBIAN-CVE-2016-0704

An oracle protection mechanism in the getclientmasterkey function in s2srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier fo...