Unauthorized Access Vulnerability in O1 Smart Padlock of Shenzhen IOT Lock Technology Co.

O1 smart padlock produced by Shenzhen IOT Lock Technology Co., Ltd. is a smart lock that can be unlocked via Bluetooth using cell phone APP. Ltd. O1 smart padlock has an unauthorized access vulnerability that can be exploited by an attacker to remotely unlock the lock by replaying the user's unlo...

CVE-2020-10185

The sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an OTP. NOTE: this issue is potentially relevant to persons outside Yubico who operate a self-hosted OTP validation service with a non-default configuration such as an open sync pool; the issue does NOT...

CVE-2020-10185

CVE-2020-10185 affects the YubiKey Validation Server (YubiVal) prior to version 2.40. The vulnerability resides in the sync endpoint, which can be abused by remote attackers to replay previously used one-time passwords. This issue does not affect YubiCloud. The Debian/OSS advisories note fixes im...

CVE-2017-18642: Exposure of Sensitive Information to an Unauthorized Actor

Syska Smart Bulb devices through 2017-08-06 receive RGB parameters over cleartext Bluetooth Low Energy BLE, leading to sniffing, reverse engineering, and replay attacks...

Security advisory YSA-2020-01 | Yubico

Yubico received a report from LinkedIn Information Security indicating there is insufficient data validation in the open-source project for YubiKey Validation Server git: yubikey-val. Yubico verified the issue and has made a security update available to mitigate this issue and enhance the...

CVE-2019-12393: Authentication Bypass by Capture-replay

Anviz access control devices are vulnerable to replay attacks which could allow attackers to intercept and replay open door requests...

PT-2019-12781

Name of the Vulnerable Software and Affected Versions Anviz access control devices affected versions not specified Description The issue concerns replay attacks that could allow attackers to intercept and replay open door requests. This could potentially compromise the security of the access...

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-2201)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the...

CVE-2019-18226

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products...

Authentication flaw

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products...

CVE-2019-18226

CVE-2019-18226 affects Honeywell equIP series and Performance series IP cameras and Recorders. The root cause is an authentication bypass via capture-replay, retained for legacy compatibility, enabling unauthenticated access and potential playback attacks (per CVSS v3 base 7.5). Public disclosure...

CVE-2019-18226

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products...

PT-2019-15288

Name of the Vulnerable Software and Affected Versions Honeywell equIP series and Performance series IP cameras and recorders affected versions not specified Description A potential replay attack vulnerability exists due to a weak authentication method being retained for compatibility with legacy...

CVE-2019-18226: Authentication Bypass by Capture-replay

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products...

CVE-2019-18199: Cleartext Transmission of Sensitive Information

An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack of proper encryption of 2.4 GHz communication, and because of password-based authentication, they are vulnerable to replay attacks...

CVE-2018-12384

A flaw was found in the way NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. A man-in-the-middle attacker could use this flaw in a passive replay attack...

College-Management-System 1.2 - Authentication Bypass

College-Management-System 1.2 - Authentication Bypass Exploit Title: College-Management-System 1.2 - Authentication Bypass Author: Cakes Discovery Date: 2019-09-14 Vendor Homepage: https://github.com/ajinkyabodade/College-Management-System Software Link:...

PT-2019-9021

Name of the Vulnerable Software and Affected Versions COSPAS-SARSAT protocol affected versions not specified Description The issue allows remote attackers to forge messages, replay encrypted messages, conduct denial of service attacks, and send private messages via a crafted 406 MHz digital signa...

CVE-2018-14062: Undefined Security Weakness

The COSPAS-SARSAT protocol allows remote attackers to forge messages, replay encrypted messages, conduct denial of service attacks, and send private messages unrelated to distress alerts via a crafted 406 MHz digital signal...

NewStart CGSL MAIN 4.05 : nss Vulnerability (NS-SA-2019-0131)

The remote NewStart CGSL host, running version MAIN 4.05, has nss packages installed that are affected by a vulnerability: - A flaw was found in the way NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. A man-in-the-middle attacker could use this fla...