Lucene search
K

230 matches found

The Hacker News
The Hacker News
added 2018/11/25 6:46 p.m.1 views

How to Hack WiFi Password Easily Using New Attack On WPA/WPA2

Looking for how to hack WiFi password OR WiFi hacking software? Well, a security researcher has revealed a new WiFi hacking technique that makes it easier for hackers to crack WiFi passwords of most modern routers. Discovered by the lead developer of the popular password-cracking tool Hashcat, Je...

6.8AI score
Exploits0
OSV
OSV
added 2018/09/06 9:29 p.m.7 views

CVE-2018-5389

The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IKE could lead to cross-protocol authentication bypasses. It is well known, that the aggressive mode of IKEv1 PSK is vulnerable to offline...

5.9CVSS6.7AI score
Exploits0References5
OSV
OSV
added 2018/09/06 9:29 p.m.1 views

UBUNTU-CVE-2018-5389

The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IKE could lead to cross-protocol authentication bypasses. It is well known, that the aggressive mode of IKEv1 PSK is vulnerable to offline...

5.9CVSS6.5AI score0.01072EPSS
Exploits1References5
OSV
OSV
added 2018/09/06 9:29 p.m.1 views

DEBIAN-CVE-2018-5389

The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IKE could lead to cross-protocol authentication bypasses. It is well known, that the aggressive mode of IKEv1 PSK is vulnerable to offline...

5.9CVSS7AI score0.01072EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2018/09/06 9:0 p.m.20 views

CVE-2018-5389

The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IKE could lead to cross-protocol authentication bypasses. It is well known, that the aggressive mode of IKEv1 PSK is vulnerable to offline...

5.9CVSS5.9AI score0.01072EPSS
Exploits1
Exploit DB
Exploit DB
added 2018/07/10 12:0 a.m.44 views

D-Link DIR601 2.02 - Credential Disclosure

Exploit title: D-Link DIR601 2.02NA - Credential disclosure Date: 2018-07-10 Exploit Author: Richard Rogerson Vendor Homepage: http://ca.dlink.com/ Software Link: http://support.dlink.ca/ProductInfo.aspx?m=DIR-601 Version: = 2.02NA Tested on: D-Link DIR601 Firmware 2.02NA Contact:...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2018/07/10 12:0 a.m.22 views

D-Link DIR601 2.02 - Credential Disclosure

D-Link DIR601 2.02 - Credential Disclosure Exploit title: D-Link DIR601 2.02NA - Credential disclosure Date: 2018-07-10 Exploit Author: Richard Rogerson Vendor Homepage: http://ca.dlink.com/ Software Link: http://support.dlink.ca/ProductInfo.aspx?m=DIR-601 Version: = 2.02NA Tested on: D-Link DIR6...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2018/07/10 12:0 a.m.40 views

D-Link DIR601 2.02 Credential Disclosure

Exploit title: D-Link DIR601 2.02NA - Credential disclosure Date: 2018-07-10 Exploit Author: Richard Rogerson Vendor Homepage: http://ca.dlink.com/ Software Link: http://support.dlink.ca/ProductInfo.aspx?m=DIR-601 Version: = 2.02NA Tested on: D-Link DIR601 Firmware 2.02NA Contact:...

7.4AI score
Exploits0
0day.today
0day.today
added 2018/07/10 12:0 a.m.33 views

D-Link DIR601 2.02 - Credential Disclosure Vulnerability

Exploit for hardware platform in category web applications Exploit title: D-Link DIR601 2.02NA - Credential disclosure Exploit Author: Richard Rogerson Vendor Homepage: http://ca.dlink.com/ Software Link: http://support.dlink.ca/ProductInfo.aspx?m=DIR-601 Version: = 2.02NA Tested on: D-Link DIR60...

Exploits0
OSV
OSV
added 2018/02/14 5:29 p.m.1 views

UBUNTU-CVE-2017-18187

In ARM mbed TLS before 2.7.0, there is a bounds-check bypass through an integer overflow in PSK identity parsing in the sslparseclientpskidentity function in library/sslsrv.c...

9.8CVSS7.3AI score0.0275EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2017/12/08 5:29 a.m.1 views

CVE-2017-17463

Vivo modems allow remote attackers to obtain sensitive information by reading the index.cgi?page=wifi HTML source code, as demonstrated by ssid and pskwepkey fields...

7.5CVSS5.5AI score0.00315EPSS
Exploits0References2
Kitploit
Kitploit
added 2017/08/25 2:30 p.m.28 views

ike-scan - Discover and fingerprint IKE hosts (IPsec VPN Servers)

Discover and fingerprint IKE hosts IPsec VPN Servers. Building and Installing ike-scan uses the standard GNU autoconf and automake tools, so installation is the normal process: Run git clone https://github.com/royhills/ike-scan.git to obtain the project source code Run cd ike-scan to enter source...

7.4AI score
Exploits0References2
CNVD
CNVD
added 2017/06/29 12:0 a.m.3 views

OSRAM SYLVANIA Osram Lightify Home Information Disclosure Vulnerability

OSRAM SYLVANIA Osram Lightify Home is an open IoT platform for automated control of lighting devices from German company OSRAM. A security vulnerability exists in OSRAM SYLVANIA Osram Lightify Home versions prior to 2016-07-26, which originates from the program storing the PSK in plaintext in the...

7.5CVSS6.8AI score0.00487EPSS
Exploits1References1
CNVD
CNVD
added 2017/05/23 12:0 a.m.1 views

Mimosa Client Radios Information Disclosure Vulnerability

Mimosa Client Radios is a management program for client devices of the Mimosa multipoint solution from Mimosa Networks, Inc. A security vulnerability exists in Mimosa Client Radios versions prior to 2.2.3. The vulnerability can be exploited by an attacker to download arbitrary files from the devi...

7.8CVSS7AI score0.00118EPSS
Exploits0References1
NVD
NVD
added 2017/05/21 9:29 p.m.8 views

CVE-2017-9136

An issue was discovered on Mimosa Client Radios before 2.2.3. In the device's web interface, there is a page that allows an attacker to use an unsanitized GET parameter to download files from the device as the root user. The attacker can download any file from the device's filesystem. This can be...

7.8CVSS7.5AI score0.00118EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2017/04/20 12:0 a.m.25 views

Cisco ASA Software Internet Key Exchange Version 1 XAUTH Denial of Service Vulnerability (cisco-sa-20170419-asa-xauth)

A vulnerability in the Internet Key Exchange Version 1 IKEv1 XAUTH code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload of an affected system. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and ar...

7.7CVSS7.6AI score0.00623EPSS
Exploits0References1
Cisco
Cisco
added 2017/04/19 4:0 p.m.20 views

Cisco ASA Software Internet Key Exchange Version 1 XAUTH Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange Version 1 IKEv1 XAUTH code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload of an affected system. The vulnerability is due to insufficient validation of the IKEv1 XAUTH parameters passed during an IKEv1 negotiation...

7.7CVSS7.6AI score0.00623EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2017/04/19 12:0 a.m.1 views

PT-2017-17181 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco ASA Software versions prior to 9.17.7 Cisco ASA Software versions prior to 9.24.11 Cisco ASA Software versions prior to 9.44 Cisco ASA Software versions prior to 9.53 Cisco ASA Software versions prior to 9.61.5 Description: A...

7.7CVSS7.4AI score0.00623EPSS
Exploits0References5
OSV
OSV
added 2017/04/10 3:59 a.m.2 views

CVE-2016-5056

OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 uses only 8 hex digits for a PSK...

7.5CVSS5.8AI score0.00487EPSS
Exploits1References1
CNVD
CNVD
added 2017/02/15 12:0 a.m.2 views

Fortinet FortiManager Man-in-the-Middle Attack Vulnerability

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices and can group devices into different management domains ADOM to further simplify multi-device security deployment and managemen...

7.4CVSS6.8AI score0.00128EPSS
Exploits0References1
Rows per page
Query Builder