767 matches found
Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15624)
The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the setpassphrase method of Quest DR Series disk backup software before 4.0.3.1. An attacker could exploit this vulnerability to execute arbitrary system commands...
Seven security tips for staying safe on an iPhone
iPhones have a reputation for being notoriously secure. After all, they caused quite the kerfuffle between Apple and the FBI because they are, from the FBI's point of view, too secure! However, don't let that lull you into a false sense of security. Using an iPhone is not an automatic guarantee o...
CVE-2018-0021
If all 64 digits of the connectivity association name CKN key or all 32 digits of the connectivity association key CAK key are not configured, all remaining digits will be auto-configured to 0. Hence, Juniper devices configured with short MacSec keys are at risk to an increased likelihood that an...
SSH / SSL RSA Private Key Passphrase Dictionary Enumerator Exploit
This is a script to perform SSH/SSL RSA private key passphrase enumeration with a dictionary attack. !/usr/bin/perl SSH/SSL RSA Private Key Passphrase dictionary enumerator Copyright 2018 c Todor Donev https://ethical-hacker.org/ https://facebook.com/ethicalhackerorg email protected$ ssh-keygen -...
Creating and Managing Strong Passwords
NCCIC/US-CERT reminds users of the importance of creating and managing strong passwords. Passwords are often the only barrier between you and your personal information. There are several programs attackers can use to help guess or "crack" passwords. However, choosing strong passwords and keeping...
CVE-2017-1000245: Insufficiently Protected Credentials
The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file...
Technicolor TC7337 - SSID Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications // Device : Technicolor TC7337 // Vulnerable URL : https://your.rou.ter.ip/wlscanresults.html // XSS through SSID : ' Exactly 32 bytes uu // ^ // 5char domains are running | 'src' does not requires quotes , and passing the URL with ony '//' //...
CVE-2017-9522
The Time Warner firmware on Technicolor TC8717T devices sets the default Wi-Fi passphrase to a combination of the SSID and BSSID, which makes it easier for remote attackers to obtain network access by reading a beacon frame...
Code injection
The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST; Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST; and Arris TG1682G eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG16822.2p7s2PRODsey devices makes it easy for...
Design/Logic Flaw
The Time Warner firmware on Technicolor TC8717T devices sets the default Wi-Fi passphrase to a combination of the SSID and BSSID, which makes it easier for remote attackers to obtain network access by reading a beacon frame...
CVE-2017-9476
The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST; Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST; and Arris TG1682G eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG16822.2p7s2PRODsey devices makes it easy for...
CVE-2017-9476
The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST; Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST; and Arris TG1682G eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG16822.2p7s2PRODsey devices makes it easy for...
CVE-2017-9522
The Time Warner firmware on Technicolor TC8717T devices sets the default Wi-Fi passphrase to a combination of the SSID and BSSID, which makes it easier for remote attackers to obtain network access by reading a beacon frame...
CVE-2017-9476
The CVE-2017-9476 entry concerns Cisco DPC3939 and Arris TG1682G devices (Comcast firmware on Cisco DPC3939 and eMTA/DOCSIS TG1682G) where a vulnerability allows remote attackers to determine the hidden SSID and passphrase of a Home Security Wi‑Fi network. Public detail in connected sources confi...
CVE-2017-9522
The Technicolor TC8717T router firmware from Time Warner is affected by CVE-2017-9522: the default Wi‑Fi passphrase is derived from the SSID and BSSID, allowing remote attackers with network access to read beacon frames and gain access. The vulnerability stems from the passphrase derivation, yiel...
PT-2017-18949
Name of the Vulnerable Software and Affected Versions Cisco DPC3939 version dpc3939-P20-18-v303r20421733-160420a-CMCST Cisco DPC3939 version dpc3939-P20-18-v303r20421746-170221a-CMCST Arris TG1682G eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682 2.2p7s2 PROD sey Description The...
CVE-2017-9522: Undefined Security Weakness
The Time Warner firmware on Technicolor TC8717T devices sets the default Wi-Fi passphrase to a combination of the SSID and BSSID, which makes it easier for remote attackers to obtain network access by reading a beacon frame...
CVE-2017-9476: Exposure of Sensitive Information to an Unauthorized Actor
The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST; Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST; and Arris TG1682G eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG16822.2p7s2PRODsey devices makes it easy for...
PT-2017-18989
Name of the Vulnerable Software and Affected Versions Technicolor TC8717T devices affected versions not specified Description The issue concerns the default Wi-Fi passphrase setting in the Time Warner firmware on Technicolor TC8717T devices. This setting uses a combination of the SSID and BSSID,...
SSH Public Key Login Scanner
This module will test ssh logins on a range of machines using a defined private key file, and report successful logins. If you have loaded a database plugin and connected to a database this module will record successful logins and hosts so you can track your access. Key files may be a single...