CVE-2014-9690

Huawei home gateways WS318 with software V100R001C01B022 and earlier versions are affected by the PIN offline brute force cracking vulnerability of the WPS protocol because the random number generator RNG used in the supplier's solution is not random enough. As a result, brute force cracking the...

CVE-2014-9690

Huawei home gateways WS318 with software V100R001C01B022 and earlier versions are affected by the PIN offline brute force cracking vulnerability of the WPS protocol because the random number generator RNG used in the supplier's solution is not random enough. As a result, brute force cracking the...

CVE-2014-9690

CVE-2014-9690 affects Huawei WS318 home gateways (software versions including V100R001C01B022 and earlier). The underlying issue is an insufficiently random RNG used by the vendor’s WPS implementation, enabling offline PIN brute-forcing. Exploitation allows an attacker to crack the WPS PIN and ga...

impress-remote-discover NSE Script

Tests for the presence of the LibreOffice Impress Remote server. Checks if a PIN is valid if provided and will bruteforce the PIN if requested. When a remote first contacts Impress and sends a client name and PIN, the user must open the "Slide Show - Impress Remote" menu and enter the matching PI...

QIWI: [wallet.rapida.ru] Mass SMS flood

... или сказ о том, как я опрометчиво заказал себе рассылку из 300 смс. Шаги для воспроизведения: 1 Логинимся в wallet.rapida.ru 2 Идём в шаблоны и создаём себе шаблон для оплаты мобилы 3 Если вы до этого нигде не вводили 2FA код - то сейчас самая фишка - нас просят его ввести. 4 Ловим запрос и...

Secure Hub Continuously Prompts for Citrix PIN and Active Directory Password

Secure Hub continuously prompts for domain password on Android devices. Even though we have a Citrix PIN configured for all devices, we are required to put in our full domain password to authenticate...

Hardcoded credentials

An issue was discovered on the D-Link DWR-932B router. There is a hardcoded WPS PIN of 28296607...

CVE-2016-10180

An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srandtime0 seeding...

CVE-2016-10180

An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srandtime0 seeding...

CVE-2016-10179

An issue was discovered on the D-Link DWR-932B router. There is a hardcoded WPS PIN of 28296607...

CVE-2016-10179

An issue was discovered on the D-Link DWR-932B router. There is a hardcoded WPS PIN of 28296607...

Design/Logic Flaw

An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srandtime0 seeding...

CVE-2016-10180

An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srandtime0 seeding...

CVE-2016-10179

An issue was discovered on the D-Link DWR-932B router. There is a hardcoded WPS PIN of 28296607...

CVE-2016-10179

The CVE-2016-10179 entry affects the D-Link DWR-932B router. Multiple sources confirm a hardcoded WPS PIN (28296607) in the device, enabling authentication bypass and potentially unauthorized operations. CNVD-2017-01663 specifically notes exploitation on firmware 02.02eu, and CNVD describes bypas...

CVE-2016-10180

An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srandtime0 seeding...

CVE-2016-10180

CVE-2016-10180 affects the D-Link DWR-932B router. The WPS PIN generation is based on srand(time(0)) seeding, enabling potential PIN predictability. Connected sources confirm the issue and link to multiple entries, with no publicly documented patch/version details in the provided documents. Pract...

PT-2017-7787 · D Link · Dwr-932B

Name of the Vulnerable Software and Affected Versions: D-Link DWR-932B router affected versions not specified Description: An issue was discovered where WPS PIN generation is based on srandtime0 seeding. This indicates a potential predictability in the PIN generation process, which could be...

Unable to Reset Citrix PIN without re-enrolling with Certificate Based Authentication enabled

Question: With Certificate Based Authentication configured as the only authentication method on the NetScaler Gateway, when attempting to reset the Citrix PIN in Secure Hub, the user is required to re-enroll the device. Answer: With Certificate Based Authentication as the only authentication...

Starbucks: Lack of Controls Allowing for Card and PIN Enumeration Leading to Fraud

Summary: The pages https://www.starbucks.com/account/card/addcard and https://www.starbucks.com/account/card/Balance do not properly enforce security controls to limit POST requests. This bug allows attackers to successfully hijack a loaded Starbucks card and transfer all the funds into their own...