54 matches found
Touch-to-operate password-store with YubiKey 4
There are dozens of tutorials on how to fight GnuPG to use YubiKeys for everything, but my favorite overlooked feature of the YubiKey 4 is "touch to operate", where each cryptographic operation takes a physical touch of the gold surface. That pairs particularly well with password-store, a PGP...
Touch-to-operate password-store with YubiKey 4
There are dozens of tutorials on how to fight GnuPG to use YubiKeys for everything, but my favorite overlooked feature of the YubiKey 4 is "touch to operate", where each cryptographic operation takes a physical touch of the gold surface. That pairs particularly well with password-store, a PGP...
Siemens OpenSSL Vulnerability in Industrial Products (Update E)
1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION : Exploitable remotely Vendor : Siemens Equipment : Industrial Products Vulnerability : Cleartext Transmission of Sensitive Information 2. UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled ICSA-18-226-02 Siemens...
HPE Matrix Operating Environment Software and Systems Insight Manager Software Clickjacking Vulnerability (CNVD-2018-05096)
HPE Matrix Operating Environment Software and Systems Insight Manager SIM Software are both products of Hewlett Packard Enterprise HPE, U.S. HPE Matrix Operating Environment Software is a set of cloud management software designed for infrastructure services. HPE Matrix Operating Environment...
IBM InfoSphere Master Data Management Point Hijacking Vulnerability
IBM InfoSphere Master Data Management MDM is an IBM USA solution for helping organizations manage enterprise-wide master data information about customers, suppliers, products, and accounts. The solution supports the centralization of multiple data domains through three master data usage styles:...
Siemens SINUMERIK Integrate Operate Clients Man-in-the-Middle Security Bypass Vulnerability
Siemens SINUMERIK Integrate Operate Clients is a standard HMI system client for SINUMERIK digital controls from Siemens. A man-in-the-middle security bypass vulnerability exists in Siemens SINUMERIK Integrate Operate Clients. An attacker could use this vulnerability to conduct a man-in-the-middle...
Siemens SINUMERIK Integrate and SINUMERIK Operate
CVSS v3 7.4 ATTENTION: Remotely exploitable. Vendor: Siemens Equipment: SINUMERIK Integrate, SINUMERIK Operate Vulnerability: Man-in-the-Middle AFFECTED PRODUCTS Siemens reports that the vulnerability affects the following SINUMERIK Integrate and Operate product suite versions: SINUMERIK Integrat...
CVE-2017-2685
Siemens SINUMERIK Integrate Operate Clients between 2.0.3.00.016 including and 2.0.6 excluding and between 3.0.4.00.032 including and 3.0.6 excluding contain a vulnerability that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle MITM attack...
Code injection
Siemens SINUMERIK Integrate Operate Clients between 2.0.3.00.016 including and 2.0.6 excluding and between 3.0.4.00.032 including and 3.0.6 excluding contain a vulnerability that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle MITM attack...
CVE-2017-2685
CVE-2017-2685 affects Siemens SINUMERIK Integrate Operate Clients. Affected: SINUMERIK Integrate Operate Client in versions within 2.0.3.00.016–2.0.6 (inclusive/exclusive bounds as listed) and 3.0.4.00.032–3.0.6. The issue is a man-in-the-middle vulnerability allowing reading and modification of ...
[CVE-2014-7303] SGI Tempo System Database Exposure
SGI Tempo System Database Exposure Software: SGI Tempo SGI ICE-X Supercomputers Affected Versions: Unknown CVE Reference: CVE-2014-7303 Author: John Fitzpatrick, MWR Labs Severity: Low Risk Vendor: Silicon Graphics International Corp SGI Vendor Response: Uncooperative Description It is possible f...
Incapsula introduces 'Backdoor Protect' feature in Cloud-based Website Security
Incapsula announced this week that they’re offering an intriguing Backdoor Protection feature for sites using their cloud-based website security and performance services. What’s a Backdoor? A backdoor is a malicious function that enables hackers to remotely operate a site or server, even after...
