2282 matches found
Design/Logic Flaw
Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption e.g., TLS/SSL when configured to send treatment data to a PDMS Patient Data Management System or an EMR Electronic Medical Record system. An attacker could observe...
CVE-2020-12036
Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption e.g., TLS/SSL when configured to send treatment data to a PDMS Patient Data Management System or an EMR Electronic Medical Record system. An attacker could observe...
CVE-2020-12037
Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption e.g., TLS/SSL when configured to send treatment data to a PDMS Patient Data Management System or an EMR Electronic Medical Record system. An attacker could observe...
CVE-2019-14094
creationtimestamp| type| source ---|---|--- 2020-06-25 08:55:21+00:00| seen| https://t.me/cibsecurity/13035 2026-01-20 08:04:57+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...
hw: Vector Register Data Sampling
A flaw was found in Intel processors where a local attacker is able to gain information about registers used for vector calculations by observing register states from other processes running on the system. This results in a race condition where store buffers, which were not cleared, could be read...
CVE-2016-11076
creationtimestamp| type| source ---|---|--- 2020-06-20 00:55:31+00:00| seen| https://t.me/cibsecurity/12943...
Eavesdropping on Sound Using Variations in Light Bulbs
New research is able to recover sound waves in a room by observing minute changes in the room's light bulbs. This technique works from a distance, even from a building across the street through a window. Details: In an experiment using three different telescopes with different lens diameters from...
CVE-2019-19110
creationtimestamp| type| source ---|---|--- 2020-06-15 18:55:20+00:00| seen| https://t.me/cibsecurity/12740...
CVE-2020-0113
creationtimestamp| type| source ---|---|--- 2020-06-10 22:55:35+00:00| seen| https://t.me/cibsecurity/12662...
hw: Vector Register Data Sampling
A flaw was found in Intel processors where a local attacker is able to gain information about registers used for vector calculations by observing register states from other processes running on the system. This results in a race condition where store buffers, which were not cleared, could be read...
Citrix Hypervisor Security Updates
Description of Problem Modern CPUs contain random number generators that provide entropy randomness to the software running on those processors to use for purposes such as generating cryptographic encryption keys. Software can obtain entropy by using the RDRAND and RDSEED instructions. A security...
CVE-2016-11060
creationtimestamp| type| source ---|---|--- 2020-04-28 20:35:10+00:00| seen| https://t.me/cibsecurity/11700...
CVE-2017-18765
creationtimestamp| type| source ---|---|--- 2020-04-22 21:37:02+00:00| seen| https://t.me/cibsecurity/11534...
CVE-2019-12522
creationtimestamp| type| source ---|---|--- 2020-04-16 00:14:28+00:00| seen| https://t.me/cibsecurity/11313...
CVE-2020-0991
creationtimestamp| type| source ---|---|--- 2020-04-15 19:14:28+00:00| seen| https://t.me/cibsecurity/11270 2023-12-16 15:07:40+00:00| seen| https://t.me/arpsyndicate/1833...
CVE-2020-0787
creationtimestamp| type| source ---|---|--- 2020-04-12 20:36:33+00:00| published-proof-of-concept| https://t.me/hybgl/146 2020-06-11 06:14:52+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve20200787bitsarbitraryfilemove.rb 2020-10-09...
Code injection
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. Sensitive information is sent to the web server in cleartext, which may allow an attacker to discover the credentials if they...
Phishing Victims From a CDN's Point of View
Overview Being a Content Delivery Network CDN platform, sometimes you can see fractions of attacks on the wire. In this blog, we will focus on phishing websites that, while not being delivered by the Akamai platform, are referring to or...
InnoGames: Create any military unit in any age
Summary of the Issue It's possible to create a sniperbot unit in the bronze age by sending a crafted request to xs1.forgeofempires.com/game/json endpoint Steps to reproduce 1 Login to https://xs1.forgeofempires.com with Chrome browser while observing network tab. 2 Open the poc20200227.html F7304...