6196 matches found
Security Bulletin: TADDM uses weak SSL certificates (CVE-2012-5770)
Abstract IBM Tivoli Application Dependency Discovery Manager SSL certificate uses weak MD5 hash algorithm Content VULNERABILITY DETAILS: DESCRIPTION: TADDM uses weak certificates for SSL communication what can lead to man in the middle attack. The attacker must have access to traffic between TADD...
Trojan.Ransom.Ryuk.A MVID-2022-0640 Code Execution
Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/5ac0f050f93f86e69026faea1fbb4450.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Ransom.Ryuk.A Vulnerability: Arbitrary Code Execution Description: The ransomware...
Exploit for Use of a One-Way Hash with a Predictable Salt in Redux Gutenberg_Template_Library_\&_Redux_Framework
CVE-2021-38314 Python Exploit Detail...
Trojan-Spy.Win32.Pophot.bsl MVID-2022-0635 Insecure Permissions
Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/8c0e6ec6b8ac9eb1169e63df71f24456.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Spy.Win32.Pophot.bsl Vulnerability: Insecure Permissions Description: The malware...
Ubuntu: Security Advisory (USN-4247-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-44W5-Q257-8428 Exposure of password hashes in notrinos/notrinos-erp
The AP officers account is authorized to Backup and Restore the Database, Due to this he/she can download the backup and see the password hash of the System Administrator account, The weak hash MD5 of the password can be easily cracked and get the admin password...
Exposure of password hashes in notrinos/notrinos-erp
The AP officers account is authorized to Backup and Restore the Database, Due to this he/she can download the backup and see the password hash of the System Administrator account, The weak hash MD5 of the password can be easily cracked and get the admin password...
Backdoor.Win32.Guptachar.20 MVID-2022-0631 Insecure Credential Storage
Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/857999d2306f257b80d1b8f6a51ae8b0.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Guptachar.20 Vulnerability: Insecure Credential Storage Description: The...
Backdoor.Win32.Destrukor.20 MVID-2022-0627 Remote Command Execution
Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/c790749f851d48e66e7d59cc2e451956B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Destrukor.20 Vulnerability: Unauthenticated Remote Command Execution...
Builder XtremeRAT 3.7 MVID-2022-0624 Insecure Crypto Bypass
Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/7f314e798c150aedd9ce41ed39318f65B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Builder XtremeRAT v3.7 Vulnerability: Insecure Crypto Bypass Description: The malware...
WordPress Kaswara Modern WPBakery Page Builder 3.0.1 File Upload Vulnerability
WordPress Kaswara Modern WPBakery Page Builder plugin versions 3.0.1 and below suffer from an arbitrary file upload vulnerability. Description: Arbitrary File Upload/Deletion and Other Affected Plugin: Kaswara Modern WPBakery Page Builder Addons Plugin Slug: kaswara Affected Versions: = 3.0.1 CVE...
[slackware-security] wavpack
New wavpack packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/wavpack-5.5.0-i586-1slack15.0.txz: Upgraded. WavPack 5.5.0 contains a fix for CVE-2021-44269 wherein encoding a...
SUSE SLED15 / SLES15 Security Update : openssl-3 (SUSE-SU-2022:2306-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2306-1 advisory. - The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script...
Multiple TP-Link Wireless Extenders Unauthorized Profile Leakage Vulnerability
TP-Link WA850RE and others are all TP-Link's wireless extenders. A number of wireless extenders have unauthorized profile disclosure vulnerabilities, which can be exploited by remote attackers to access specific routes to unauthorized download of the target device's configuration file, which is...
CVE-2022-1666
The default password for the web application’s root user the vendor’s private account was weak and the MD5 hash was used to crack the password using a widely available open-source tool...
CVE-2022-1666
The default password for the web application’s root user the vendor’s private account was weak and the MD5 hash was used to crack the password using a widely available open-source tool...
Default credentials
The default password for the web application’s root user the vendor’s private account was weak and the MD5 hash was used to crack the password using a widely available open-source tool...
CVE-2022-1666 Secheron SEPCOS Control and Protection Relay
The default password for the web application’s root user the vendor’s private account was weak and the MD5 hash was used to crack the password using a widely available open-source tool...
CVE-2022-1666 Secheron SEPCOS Control and Protection Relay
The default password for the web application’s root user the vendor’s private account was weak and the MD5 hash was used to crack the password using a widely available open-source tool...
CVE-2022-1666
CVE-2022-1666 affects Secheron SEPCOS Control and Protection Relay. The root cause is insufficiently protected credentials: the web app’s root account uses a weak default password, with MD5-based cracking noted. This can allow an attacker with network access to obtain OS/root-level privileges on ...