2334 matches found
Quanta LTE Router Code Execution / Backdoor Accounts
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: Multiple vulnerabilities found in Quanta LTE routers backdoor, backdoor accounts, RCE, weak WPS ... Advisory URL: https://pierrekim.github.io/advisories/2016-quanta-0x00.txt Blog URL:...
Strike! Ten Pin Bowling - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Strike! Ten Pin Bowling published at the 'play' market has multiple vulnerabilities...
Pin Lock Screen - Dynamic Code Loading, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Pin Lock Screen published at the 'play' market has multiple vulnerabilities...
POS Malware Tool "Treasurehunt' Targets Small US-Based Banks, Retailers
As more US companies snuff out point of sale malware by deploying chip-and-PIN bankcard technology, attackers are rushing to exploit existing magnetic strip card systems still vulnerable to malware. A group of hackers that go by the name Bears Inc. are behind the latest barrage of attacks with a...
American Express Notifies of Data Breach
American Express has begun notifying cardholders that their data may have been compromised in a third-party breach. A notification letter filed on March 10 with California’s attorney general indicates that AmEx account numbers, user names and other information including expiration dates may have...
ILASIII图书检索系统 NTBookRetrAuth.aspx 参数Pin SQL注入漏洞
No description provided by source...
PayPal #123 - Security Key Pin Approval & Expire Bypass
Document Title: =============== PayPal 123 - Security Key Pin Approval & Expire Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1697 Video: https://www.youtube.com/watch?v=5O0b88KhJU Release Date: ============= 2016-02-01 Vulnerability Laboratory ID VL-ID:...
PayPal #123 - Security Key Pin Approval & Expire Bypass
Document Title: =============== PayPal 123 - Security Key Pin Approval & Expire Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1697 Video: https://www.youtube.com/watch?v=5O0b88KhJU Release Date: ============= 2016-02-01 Vulnerability Laboratory ID VL-ID:...
FingerTec Fingerprint Reader - Remote Access and Remote Enrolment
FingerTec Fingerprint Reader - Remote Access and Remote Enrolment Exploit Title: Default Root Password and Remote Enrollment on FingerTec Devices Date: 12-01-2016 Exploit Author: Daniel Lawson Contact: http://twitter.com/fang0654 Website: https://digital-panther.com Category: physical access...
FingerTec Default Root Password / Remote Enrollment
Exploit Title: Default Root Password and Remote Enrollment on FingerTec Devices Date: 12-01-2016 Exploit Author: Daniel Lawson Contact: http://twitter.com/fang0654 Website: https://digital-panther.com Category: physical access control 1. Description Almost all FingerTec Access Control devices are...
Credit Card Magstripe Spoofer: MagSpoof
MagSpoof is a device that can spoof/emulate any magnetic stripe or credit card. It can work “wirelessly”, even on standard magstripe/credit card readers, by generating a strong electromagnetic field that emulates a traditional magnetic stripe card. MagSpoof does not enable you to use credit cards...
CVE-2015-7287
CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 use the same 001984 default PIN across different customers' installations, which allows remote attackers to execute commands by leveraging knowledge of this PIN and including it in an SMS message...
Design/Logic Flaw
CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 use the same 001984 default PIN across different customers' installations, which allows remote attackers to execute commands by leveraging knowledge of this PIN and including it in an SMS message...
CVE-2015-7287
The CVE-2015-7287 issue affects CSL DualCom GPRS CS2300-R alarm signaling boards (firmware 1.25–3.53). A non-unique, default PIN (001984) is used across installations, enabling remote command execution via SMS when knowledge of the PIN is included in a message. Impacted devices could be controlle...
CVE-2015-7287
CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 use the same 001984 default PIN across different customers' installations, which allows remote attackers to execute commands by leveraging knowledge of this PIN and including it in an SMS message...
This $10 Device Can Guess and Steal Your Next Credit Card Number before You've Received It
Imagine you have lost your credit card and applied for a fresh credit card from your bank. What if some criminal is using your new credit card before you have even received it? Yes, it's possible at least with this $10 device. Hardware hacker Samy Kamkar has built a $10 device that can predict an...
CSL DualCom GPRS CS2300-R SPT Arbitrary Command Execution Vulnerability
The CSL DualCom GPRS CS2300-R SPT is an alarm signaling board from CSL DualCom, UK, which provides a communication link between the burglar alarm and the monitoring center, allowing signals to be sent to the monitoring center when the alarm goes off, via the mobile network, ordinary phone lines o...
The vulnerability of the microprogramming software in Janitza UMG 508, 509, 511, 604, 605 power supply monitoring systems allows a hacker to calculate the PIN code value.
The vulnerability of the Microprogramming Software in Janitza UMG 508, 509, 511, 604, 605 power supply monitoring systems is related to the incorrect generation of session keys. Exploiting this vulnerability allows a remote attacker to calculate the PIN code by performing mathematical calculation...
The vulnerability of the microprogramming software in Janitza UMG 508, 509, 511, 604, 605 power supply monitoring systems allows a intruder to gain access to the device.
The vulnerability of the web interface of the Microprogramming Software for Control Systems of Power Supply Devices Janitza UMG 508, 509, 511, 604, 605 arises from the fact that these devices only support short PIN codes for authentication. Exploiting this vulnerability could allow an attacker,...
