FingerTec Default Root Password / Remote Enrollment

Exploit Title: Default Root Password and Remote Enrollment on FingerTec Devices Date: 12-01-2016 Exploit Author: Daniel Lawson Contact: http://twitter.com/fang0654 Website: https://digital-panther.com Category: physical access control 1. Description Almost all FingerTec Access Control devices are...

PT-2015-2603

Name of the Vulnerable Software and Affected Versions Janitza UMG versions 508, 509, 511, 604, 605 Description The issue is related to the improper generation of session keys in the software of Janitza UMG devices. This can allow a remote attacker to calculate the PIN code value through...

Swept the world of security applications AppLock, the same may leak your privacy-vulnerability warning-the black bar safety net

! Security researchers found that the DoMobile Ltd. The company developed the well-known Android security app AppLock presence of a plurality of vulnerabilities, vulnerable to hacker attacks. AppLock app lock description App lock in over 5 0 countries with 1 billion users, it itself supports 2-4...

Fragment Injection vulnerability bloopers-vulnerability warning-the black bar safety net

1 3 time of the year, IBM's security researchers discovered 1 Google framework layer of vulnerability Fragment injection vulnerability, this vulnerability can lead to Android phone the PIN code is reset, everyone should be on the figure 1 is not strange. This vulnerability after the industry of t...

Thycotic Password Manager Secret Server iOS Application - MITM SSL Certificate Vulnerability

Thycotic Password Manager Secret Server iOS Application - MITM SSL Certificate Vulnerability -- http://www.info-sec.ca/advisories/Thycotic-SecretServer.html Overview "With the Password Manager Secret Server app, you can access passwords for an EXISTING on-premise Secret Server or Secret Server...

Smartwatch Hacked... Data Exchange with Smartphone Not So Secure

We are living in an era of smart devices that we sync with our smartphones and make our lives very simple and easy, but these smart devices that inter-operates with our phones could leave our important and personal data wide open to hackers and cybercriminals. Security researchers have demonstrat...

Code injection

Cobham Aviator 700D and 700E satellite terminals use an improper algorithm for PIN codes, which makes it easier for attackers to obtain a privileged terminal session by calculating the superuser code, and then leveraging physical access or terminal access to enter this code...

CVE-2014-2942

Cobham Aviator 700D and 700E satellite terminals use an improper algorithm for PIN codes, which makes it easier for attackers to obtain a privileged terminal session by calculating the superuser code, and then leveraging physical access or terminal access to enter this code...

CVE-2014-2942

Cobham Aviator 700D/700E satellite terminals are affected by CVE-2014-2942 due to use of a broken/risky cryptographic algorithm to generate PINs. This enables a local, unauthenticated attacker to calculate a superuser PIN and gain full control of the terminal, given physical access or access to t...

Grand MA 300 Fingerprint Reader insufficient encryption

PIN code is not encrypted during transfer...

Cobham Aviator satellite terminals contain multiple vulnerabilities

Overview Cobham Aviator 700D and 700E satellite terminals contain multiple vulnerabilities. Description Cobham Aviator 700D and 700E satellite communication terminals contain the following vulnerabilities:CWE-327:Use of a Broken or Risky Cryptographic Algorithm - CVE-2014-2942 Please note that th...

Apple iOS 6.1.3 Fixes Evasion Jailbreak Bug, WebKit Flaw

Apple has patched a handful of security vulnerabilities in iOS, including a bug that was used for the latest iPhone jailbreak tool, called Evasion. Apple iOS 6.1.3 has patches for six vulnerabilities, including the screen lock bypass bug and a flaw in WebKit that can be used to execute arbitrary...

Twitter SMS-Spoofing Bug Allows Attackers to Send Tweets From Users' Accounts, Edit Profiles

There is a bug in the way that Twitter handles a feature that enables users to post messages via SMS and the researcher who discovered the bug says that it allows anyone who knows a user’s mobile number to not only tweet from the user’s account but also modify information in the user’s profile. T...

Google Reacts to Google Wallet Security Issues

Google has temporarily disabled the provisioning of prepaid cards as the company deals with the fallout from the discovery of security vulnerabilities affecting Google Wallet. Google Wallet is a mobile payment application that enables users to store information such as credit cards on their mobil...

Mandriva Update for initscripts MDVA-2008:085 (initscripts)

Check for the Version of initscripts OpenVAS Vulnerability Test Mandriva Update for initscripts MDVA-2008:085 initscripts Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

OpenSC smart cards unauthrorized access

It's possible to change smrtcard PIN code...

For the Bluetooth PIN code of the latest attack techniques details of the analysis-vulnerability warning-the black bar safety net

Note: This Chapter is just to explain the determination for the Bluetooth PIN code of the latest attack techniques, in order to draw attention to prevention, and no other purpose. No person shall use in this article the description of the technology to do illegal things. Recently, many domestic a...

PIN code in cleartext in Pointsec for PalmOS

PIN code is stored clear text in memory...

Xircom REX6000 PDA Password Retrieval

Security Advisory TITLE : XIRCOM REX6000 PDA Password Retrieval REVISION : 1 CLASS : Password Retrieval VENDOR : Xircom now Intel CREDIT : Daniel Jonsson [email protected] STATUS : PLATFORMS : VULNERABLE : Xircom REX6000 MicroPDA CREATED : 2001-11-23 LAST UPDATED : 2001-11-23 VENDOR CONTACT : No...

Несанкционированный доступ в Homebet (unauthorized access)

Для авторизации пользователя применяется 4-х символьный pin-код. Сообщения об ошибке для неправильного пин-кода и имени пользователя различаются. Лог-файл содержащий всю информацию доступен через веб...