CVE-2012-6371: Undefined Security Weakness

The WPA2 implementation on the Belkin N900 F9K1104v1 router establishes a WPS PIN based on 6 digits of the LAN/WLAN MAC address, which makes it easier for remote attackers to obtain access to a Wi-Fi network by reading broadcast packets, a different vulnerability than CVE-2012-4366...

PT-2012-6273

Name of the Vulnerable Software and Affected Versions Belkin N900 F9K1104v1 router affected versions not specified Description The issue concerns the WPA2 implementation, which generates a WPS PIN based on 6 digits of the LAN/WLAN MAC address. This makes it easier for remote attackers to gain...

Twitter Downplays SMS-Spoofing Issue

Twitter officials say that a researcher’s claims that the service is open to an SMS-spoofing vulnerability are not completely accurate, and that Twitter users in the United States are not vulnerable to the attack. Moxie Marlinspike of Twitter’s security team said that the company in August had...

Twitter Resolves SMS Bug (For Some Users)

UPDATE–A day after an independant security researcher disclosed a vulnerability in SMS-enabled Twitter accounts, the social network giant announced it’s fixed the flaw – at least for some users. Those who use a “long code” and/or cannot use a PIN code remain at risk. The update came Tuesday eveni...

Twitter SMS-Spoofing Bug Allows Attackers to Send Tweets From Users' Accounts, Edit Profiles

There is a bug in the way that Twitter handles a feature that enables users to post messages via SMS and the researcher who discovered the bug says that it allows anyone who knows a user’s mobile number to not only tweet from the user’s account but also modify information in the user’s profile. T...

Point-of-Sale Terminals Compromised at 63 Barnes & Noble Locations

UPDATE – America’s largest book retailer, Barnes & Noble, announced this morning it has detected evidence of tampering in 63 PIN-pad devices used in as many stores by criminals trying to steal payment card information. Barnes & Noble claims to have disconnected all the affected devices from servi...

Windows 8 Security flaw : Logon Passwords Stores in Plain Text

Windows 8 is the first operating system from Microsoft to support alternative non-biometric authentication mechanisms such as Picture Password and PIN. A vulnerability discovered by a password security vendor - "Passcape" in Microsoft's Windows 8 operating system that it saves a log on password i...

Cisco CallManager vulnerable to brute force attack

Roberto Suggi Liverani, founder of the OWASP Open Web Application Security Project New Zealand chapter discover a vulnerability in Cisco CallManager AKA Unified Communications Manager. It is a software-based call-processing system developed by Cisco Systems. He described on his blog "During a...

6 Million Virgin Mobile users vulnerable to Hackers

Virgin Mobile customers beware: Your phone number is the key to your personal information. According to independent developer Kevin Burke, who warned Virgin Mobile USA customers about a glaring security hole in the phone company's account login protocol said, "If you are one of the six million...

Chip and PIN payment card system vulnerable to Card cloning

At a cryptography gathering in Leuven, Belgium, on Tuesday, Cambridge University researchers made it known that they do not like what they see in chip and pin systems. The chip and PIN system employed by most European and Asian banks is definitely more secure than the magnetic strip one, but it...

Design/Logic Flaw

The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remot...

The hackerproof password? Tips and advice on password management

Having some security expert tell you that you should be creating strong passwords that are unique per account and change frequently is like your dentist telling you that you should floss morning, night and after consuming any dentally dangerous foods. The majority of us say, "yeah right". The tru...

More than 100000 Wireless Routers have Default Backdoor

A recently reported flaw that allowed an attacker to drastically reduce the number of attempts needed to guess the WPS PIN of a wireless router isn't necessary for some Arcadyan based routers anymore. Last year it was exposed that the WiFi Protected Setup WPS PIN is susceptible to a brute force...

Banking System Vulnerability - 3 million bank accounts hacked in Iran

Banking System Vulnerability - 3 million bank accounts hacked in Iran Iran's Central Bank has announced that the electronic information of 3 million customers of 10 Iranian banks have been compromised. These banks now require their customers to change their ATM pin numbers before they can access...

CVE-2012-1223

RabidHamster R2/Extreme 1.65 and earlier uses a small search space of values for the PIN number, which allows remote attackers to obtain the PIN number via a brute force attack...

Code injection

RabidHamster R2/Extreme 1.65 and earlier uses a small search space of values for the PIN number, which allows remote attackers to obtain the PIN number via a brute force attack...

CVE-2012-1223

RabidHamster R2/Extreme 1.65 and earlier uses a small search space of values for the PIN number, which allows remote attackers to obtain the PIN number via a brute force attack...

CVE-2012-1223: Exposure of Sensitive Information to an Unauthorized Actor

RabidHamster R2/Extreme 1.65 and earlier uses a small search space of values for the PIN number, which allows remote attackers to obtain the PIN number via a brute force attack...

CVE-2012-1223

The CVE-2012-1223 entry concerns RabidHamster R2/Extreme 1.65 and earlier. The vulnerability stems from a small PIN-guessing search space that allows remote attackers to brute-force and obtain the PIN, exposing partial confidentiality. According to the provided details, the attack is possible ove...

PT-2012-3146

Name of the Vulnerable Software and Affected Versions RabidHamster R2/Extreme versions 1.65 and earlier Description The issue allows remote attackers to obtain the PIN number via a brute force attack due to the use of a small search space of values for the PIN number. Recommendations For versions...