CVE-2020-27747

CVE-2020-27747 可能的账户接管 | 暴力破解能力 建议描述 在 Click Studios Passwordstate 8.9（内部版本 8973）中发现一个问题。 如果系统用户使用内置生成器（4 位数字）为自己分配了一个用于从移动设备登录的 PIN 码，远程攻击者有机会对该 PIN 码进行暴力破解攻击。 附加信息 已向厂商发送关于该漏洞的通知信。 漏洞类型其他 CWE-307：过度认证尝试限制不当 产品厂商 Click Studios https://www.clickstudios.com.au/ 受影响产品代码库 受影响版本：Passwordstate 8.9 Bui...

Brokerage Wave 安全漏洞

Brokerage Wave is a frontend product from Brokerage, Inc. A security vulnerability exists in Brokerage Wave version 2.0, which stems from a lack of limitations on too many failed authentication attempts for API-based logins, which could allow an attacker to cause unauthorized access by brute-forc...

Use HTC One vulnerability to crack mobile PIN password-vulnerability warning-the black bar safety net

HTC One phone is running Android 4.2.2 and HBOOT 1.54.0000, it exists a file called Bootloader vulnerability. This vulnerability early in the 2 0 1 4 year 2 month's report to the HTC official, and at times months to fix the vulnerability. In get HTC official consent, we will now take the entire...