Lucene search
+L

368 matches found

OSV
OSV
added 2018/12/05 9:29 a.m.14 views

CVE-2018-19786

HashiCorp Vault before 1.0.0 writes the master key to the server log in certain unusual or misconfigured scenarios in which incorrect data comes from the autoseal mechanism without an error being reported...

8.1CVSS6.8AI score
SaveExploits0References1
NVD
NVD
added 2018/12/05 9:29 a.m.19 views

CVE-2018-19786

HashiCorp Vault before 1.0.0 writes the master key to the server log in certain unusual or misconfigured scenarios in which incorrect data comes from the autoseal mechanism without an error being reported...

8.1CVSS8.1AI score0.00934EPSS
SaveExploits0References1
Prion
Prion
added 2018/12/05 9:29 a.m.16 views

Design/Logic Flaw

HashiCorp Vault before 1.0.0 writes the master key to the server log in certain unusual or misconfigured scenarios in which incorrect data comes from the autoseal mechanism without an error being reported...

4.3CVSS7.9AI score0.00934EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2018/12/05 9:0 a.m.24 views

CVE-2018-19786

HashiCorp Vault before 1.0.0 writes the master key to the server log in certain unusual or misconfigured scenarios in which incorrect data comes from the autoseal mechanism without an error being reported...

8.1AI score0.00934EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2018/11/25 6:46 p.m.2 views

How to Hack WiFi Password Easily Using New Attack On WPA/WPA2

Looking for how to hack WiFi password OR WiFi hacking software? Well, a security researcher has revealed a new WiFi hacking technique that makes it easier for hackers to crack WiFi passwords of most modern routers. Discovered by the lead developer of the popular password-cracking tool Hashcat, Je...

6.8AI score
SaveExploits0
OSV
OSV
added 2018/09/19 7:29 p.m.6 views

CVE-2018-3825

In Elastic Cloud Enterprise ECE versions prior to 1.1.4 a default master encryption key is used in the process of granting ZooKeeper access to Elasticsearch clusters. Unless explicitly overwritten, this master key is predictable across all ECE deployments. If an attacker can connect to ZooKeeper...

5.9CVSS5.8AI score0.00555EPSS
SaveExploits0References2
Schneier on Security
Schneier on Security
added 2018/04/30 11:2 a.m.42 views

Security Vulnerabilities in VingCard Electronic Locks

Researchers have disclosed a massive vulnerability in the VingCard eletronic lock system, used in hotel rooms around the world: With a $300 Proxmark RFID card reading and writing tool, any expired keycard pulled from the trash of a target hotel, and a set of cryptographic tricks developed over...

0.4AI score
SaveExploits0
HackRead
HackRead
added 2018/04/26 2:34 p.m.53 views

Master Key Hack Exploits Flaw in Key System to Unlock Hotel Rooms

By Waqas The master key hack has the capability of unlocking not This is a post from HackRead.com Read the original post: Master Key Hack Exploits Flaw in Key System to Unlock Hotel Rooms...

1.6AI score
SaveExploits0
The Hacker News
The Hacker News
added 2018/04/26 9:36 a.m.126 views

Hackers build a 'Master Key' that unlocks millions of Hotel rooms

If you often leave your valuable and expensive stuff like laptop and passports in the hotel rooms, then beware. Your room can be unlocked by not only a malicious staff having access to the master key, but also by an outsider. A critical design vulnerability in a popular and widely used electronic...

7.3AI score
SaveExploits0
The Hacker News
The Hacker News
added 2018/04/26 9:36 a.m.2 views

Hackers build a 'Master Key' that unlocks millions of Hotel rooms

If you often leave your valuable and expensive stuff like laptop and passports in the hotel rooms, then beware. Your room can be unlocked by not only a malicious staff having access to the master key, but also by an outsider. A critical design vulnerability in a popular and widely used electronic...

6.9AI score
SaveExploits0
OSV
OSV
added 2018/04/04 12:29 a.m.8 views

DEBIAN-CVE-2018-9234

GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey...

7.5CVSS6.8AI score0.02082EPSS
SaveExploits0References1
OSV
OSV
added 2018/04/04 12:29 a.m.13 views

CVE-2018-9234

GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey...

7.5CVSS7.5AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2018/04/04 12:29 a.m.5 views

CVE-2018-9234

GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey...

7.5CVSS5.5AI score0.02082EPSS
SaveExploits0References4
OSV
OSV
added 2018/04/03 12:0 a.m.10 views

UBUNTU-CVE-2018-9234

GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey...

7.5CVSS6.8AI score0.02082EPSS
SaveExploits0References3
Veracode
Veracode
added 2017/02/06 2:50 a.m.40 views

Information Disclosure

OpenSSL is vulnerable to decryption oracle attacks. A malicious user on the network can use the server as an oracle to determine the SSLv2 master key...

5.9CVSS5.9AI score0.05398EPSS
SaveExploits1References32Affected Software2
Fedora
Fedora
added 2016/09/01 1:39 p.m.44 views

[SECURITY] Fedora 25 Update: keepass-2.34-1.fc25

KeePass is a free open source password manager, which helps you to remember your passwords in a secure way. You can put all your passwords in one database, which is locked with one master key or a key file. You only have to remember one single master password or select the key file to unlock the...

7.5CVSS0.9AI score0.02347EPSS
SaveExploits1
CNVD
CNVD
added 2016/07/12 12:0 a.m.6 views

IBM Control Center and Sterling Control Center Key Cracking Vulnerability

IBM Control Center and Sterling Control Center are both file transfer control and management tools from IBM USA. The tools provide a unified view of the file transfer environment, environment exception response, and other features. A key cracking vulnerability exists in IBM Control Center version...

5.1CVSS6.4AI score0.00259EPSS
SaveExploits0References1
OSV
OSV
added 2016/07/08 1:59 a.m.5 views

CVE-2016-0252

IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via unspecified vectors...

5.1CVSS5.8AI score0.00259EPSS
SaveExploits0References1
NVD
NVD
added 2016/07/08 1:59 a.m.13 views

CVE-2016-0252

IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via unspecified vectors...

5.1CVSS5AI score0.00259EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2016/07/08 1:59 a.m.7 views

CVE-2016-0252

IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via unspecified vectors...

5.1CVSS5.6AI score0.00259EPSS
SaveExploits0References2
Rows per page
Query Builder