1293 matches found
PT-2017-19223 · Sma Solar Technology · Sunny Tripower +3
Name of the Vulnerable Software and Affected Versions: SMA Solar Technology products affected versions not specified Sunny Boy versions TLST-21 and TL-21 Sunny Tripower versions TL-10 and TL-30 Description: The SMAdata2+ communication protocol in SMA Solar Technology products does not properly us...
CVE-2016-10398
Android 6.0 has an authentication bypass for attackers with root and physical access. Cryptographic authentication tokens AuthTokens used by the Trusted Execution Environment TEE are protected by a weak challenge. This allows adversaries to replay previously captured responses and use the TEE...
CVE-2017-7902
A "Reusing a Nonce, Key Pair in Encryption" issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A...
Replay Attack
github.com/minio/minio is vulnerable to replay attacks. The attacks exist because it does not verify the date and time from the headers of HTTP requests...
Replay Attack
github.com/koding/koding is vulnerable to replay attack. It has a flaw in the creation and validation of nonces, failing to detect nonces and disconnect malicious peers...
Replay Attack
github.com/v2ray/v2ray-core is vulnerable to replay attacks. The library doesn't implement session id's in its server, allowing a malicious user to send older packets to the server to establish a connection...
Radio Hack Box - Tool to Demonstrate Vulnerabilities in Wireless Input Devices
The SySS Radio Hack Box is a proof-of-concept software tool to demonstrate the replay and keystroke injection vulnerabilities of the wireless keyboard Cherry B.Unlimited AES. Requirements Raspberry Pi Raspberry Pi Radio Hack Box shield a LCD, some LEDs, and some buttons nRF24LU1+ USB radio dongle...
Replay Attack
libzmq aka ZeroMQ is vulnerable to replay attacks. It is due to a flaw in the creation and validation of nonces, failing to detect nonces and disconnect malicious peers...
CVE-2015-7973
NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network...
DEBIAN-CVE-2015-7973
NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network...
DEBIAN-CVE-2015-8140
The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network...
Design/Logic Flaw
The hardware VPN client in Viprinet MultichannelVPN Router 300 version 2013070830/2013080900 does not validate the remote VPN endpoint identity through the checking of the endpoint's SSL key before initiating the exchange, which allows remote attackers to perform a replay attack...
CVE-2014-9755
The hardware VPN client in Viprinet MultichannelVPN Router 300 version 2013070830/2013080900 does not validate the remote VPN endpoint identity through the checking of the endpoint's SSL key before initiating the exchange, which allows remote attackers to perform a replay attack...
CVE-2014-9755
The CVE concerns Viprinet MultichannelVPN Router 300 hardware VPN client versions 2013070830/2013080900. The root cause is failure to validate the remote VPN endpoint identity by checking the endpoint’s SSL key before initiating the exchange, enabling a replay attack. Affected component: hardware...
CVE-2014-9755
The hardware VPN client in Viprinet MultichannelVPN Router 300 version 2013070830/2013080900 does not validate the remote VPN endpoint identity through the checking of the endpoint's SSL key before initiating the exchange, which allows remote attackers to perform a replay attack...
[ASA-201701-29] powerdns: multiple issues
Arch Linux Security Advisory ASA-201701-29 ========================================== Severity: Medium Date : 2017-01-19 CVE-ID : CVE-2016-2120 CVE-2016-7068 CVE-2016-7072 CVE-2016-7073 CVE-2016-7074 Package : powerdns Type : multiple issues Remote : Yes Link :...
Design flaws in Microprocessor remote control smart lock system
Microprocessor remote control smart lock system is a smart card identification including proximity card, IC card, TM card, etc.. A design vulnerability exists in the Microprocessor Remote Control Lock Smart Lock System when used in conjunction with the Microprocessor WG2082 Mobile APP Door Lock...
Siemens SIMATIC S7-1500 CPU Vulnerabilities
OVERVIEW Siemens has identified two vulnerabilities in the Siemens SIMATIC S7-1500 CPU family. Siemens has produced a firmware update to mitigate these vulnerabilities. These vulnerabilities could be exploited remotely. AFFECTED PRODUCTS The following Siemens SIMATIC S7-1500 CPU versions are...
TGCaptcha2 Replay Attack Vulnerability
TGCaptcha2 is a suite of tools that provide a reduction in spam or malicious activity by combining CAPTCHAs as a single form. A replay attack vulnerability exists in TGCaptcha2 version 0.3.0. An attacker can exploit the vulnerability to use the same CAPTCHA an unlimited number of times...