761 matches found
CVE-2018-11548
CVE-2018-11548 affects EOS.IO DAWN 4.2. The vulnerability lies in plugins/net_plugin/net_plugin.cpp not limiting the number of P2P connections from a single source IP, potentially enabling denial of service. Documented across multiple sources (Red Hat, CNVD, OSV, NVD) with DoS implications and CV...
Securing financial data of the future: behavioral biometrics explained
Some of us would be pretty excited about a brave, new passwordless world. Gone would be the days of having to write down 27 passwords and post them beside monitor screens. Or having to yell them out loud to a colleague on the other side of the room. For banks and other financial institutions, a...
A week in security (March 26 – April 01)
Last week, we looked at the thought process behind creating a ransomware decryptor, the inner workings of QuantLoader, the ways one can protect their Android devices, the exploit kits we have encountered this winter, the now-known epidemic of data breaches, the coming of TLS 1.3, and the ways one...
You down with P2P? 10 tips to secure your mobile payment app
If you look at the figures, you cannot deny that the eCommerce industry is steadily growing. More and more people are doing their shopping online, not only for products and services geared toward the use of technologies and the Internet, but also for items previously only found in brick and morta...
A state of constant uncertainty or uncertain constancy? Fast flux explained
Last August, WireX made headlines. For one thing, it was dubbed the first-known DDoS botnet that used the Android platform. For another, it used a technique that—for those who have been around in the industry for quite a while now—rung familiar in the ears: fast flux. In the context of...
VulnCheck KEV: CVE-2017-8225
On Wireless IP Camera P2P WIFICAM devices, access to .ini files containing credentials is not correctly checked. An attacker can bypass authentication by providing an empty loginuse parameter and an empty loginpas parameter in the URI...
Password Bypass Vulnerability in Yoosee APP for Android
Yoosee is a free APP customized for the new generation of smart home products by Shenzhen GW Times, which adopts the advanced Cloudlink P2P network transmission technology. There is a password bypass vulnerability in the Android version of Yoosee APP, which can be exploited by an attacker to...
Private Internet Access – Get a Secure VPN to Protect Your Online Privacy
Since most of us rely upon the Internet for day-to-day activities today, hacking and spying have become a prime concern, and so have online security and privacy. The Internet has become a digital universe with websites collecting your sensitive information and selling them to advertisers, hackers...
JETCO Pay P2P Collect - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application JETCO Pay P2P Collect published at the 'play' market has multiple vulnerabilities...
Wireless IP Camera (P2P) WIFICAM Cameras Remote Code Execution
A code execution vulnerability exists in multiple Wireless IP Camera P2P WIFICAM cameras. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2017-8224
Wireless IP Camera P2P WIFICAM devices have a backdoor root account that can be accessed with TELNET...
CVE-2017-8225
On Wireless IP Camera P2P WIFICAM devices, access to .ini files containing credentials is not correctly checked. An attacker can bypass authentication by providing an empty loginuse parameter and an empty loginpas parameter in the URI...
CVE-2017-8222
CVE-2017-8222 concerns Wireless IP Camera (P2P) WIFICAM devices using the GoAhead web server. A private RSA key and certificate for Apple Push Services are stored in /system/www/pem/ck.pem inside the firmware, enabling an information disclosure risk. The GoAhead HTTP server also exposes a pre-aut...
CVE-2017-8223
CVE-2017-8223 affects Wireless IP Camera (P2P) WIFICAM devices using the GoAhead HTTP server. The advisory details a pre-auth info-leak in the GoAhead web interface (credentials can be retrieved from system.ini via unauthenticated or weakly authenticated access) and an unauthenticated path to wat...
CVE-2017-8224
CVE-2017-8224 involves Wireless IP Camera (P2P) WIFICAM devices with multiple GoAhead-based vulnerabilities. Public disclosures detail a backdoor root account accessible via TELNET, enabling unauthenticated root access on affected devices, and a pre-auth information-leak in the GoAhead HTTP serve...
CVE-2017-8225
CVE-2017-8225 is a pre-auth information disclosure in GoAhead-powered Wireless IP Camera (P2P) WIFICAM devices. The vulnerability lets an unauthenticated attacker bypass login by supplying empty loginuse/loginpas in the URI, enabling access to credentials stored in .ini/config files via the HTTP ...
Broadcom: Heap overflow in "wl_run_escan" when handling WLC_GET_VALID_CHANNELS ioctl results(CVE-2017-0568)
Broadcom produces Wi-Fi HardMAC SoCs which are used to handle the PHY and MAC layer processing. These chips are present in both mobile devices and Wi-Fi routers, and are capable of handling many Wi-Fi related events without delegating to the host OS. On Android devices, the "bcmdhd" driver is use...
Wireless IP Camera (P2P) WIFICAM GoAhead Backdoor / Remote Command Execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: Multiple vulnerabilities found in Wireless IP Camera P2P WIFICAM cameras and vulnerabilities in GoAhead Advisory URL: https://pierrekim.github.io/advisories/2017-goahead-camera-0x00.txt Blog URL:...
Wireless IP Camera (P2P) WIFICAM - Remote Code Execution
Wireless IP Camera P2P WIFICAM - Remote Code Execution // Exploit-DB Note Source: https://pierrekim.github.io/advisories/expl-goahead-camera.c // Exploit-DB Note Credit: https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html include include include include include include include...