Design/Logic Flaw

The remote keyless system on Honda Civic 2018 vehicles sends the same RF signal for each door-open request, which allows for a replay attack, a related issue to CVE-2019-20626...

CVE-2022-27254

The remote keyless system on Honda Civic 2018 vehicles sends the same RF signal for each door-open request, which allows for a replay attack, a related issue to CVE-2019-20626...

CVE-2022-27254

The CVE-2022-27254 issue concerns Honda Civic family models (notably 2016–2020 per PT-2022-18332; 2018 Civic noted in the CVE) where the remote keyless system transmits the same RF signal for door open (and related actions), enabling a replay attack. Red Hat RH entries link this to CVE-2019-20626...

PT-2022-18332 · Honda · Honda Civic

Name of the Vulnerable Software and Affected Versions: Honda Civic versions 2016 through 2020 Description: The issue concerns a replay attack vulnerability in the remote keyless system of certain Honda vehicles, allowing unauthorized individuals to unlock doors and start the engine by interceptin...

Replay Attack

laravel/fortify is vulnerable to replay attacks. A remote attacker is able to reuse the user's TOTP code within a short time window to gain unauthorized access to the victim's account...

CVE-2021-39363

Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow a video replay attack after ARP cache poisoning has been achieved...

Design/Logic Flaw

Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow a video replay attack after ARP cache poisoning has been achieved...

CVE-2021-39363

Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow a video replay attack after ARP cache poisoning has been achieved...

CVE-2021-39363

CVE-2021-39363 affects Honeywell HDZP252DI (1.00.HW02.4) and HBW2PER1 (1.000.HW01.3) devices. Reported impact is a video replay attack that occurs after ARP cache poisoning is achieved. The NVD notes a high-severity, network-based vulnerability with CVSS v3.1 base score 9.8 (C:H, I:H, A:H; no pri...

permit() without updating nonce can result in replay attacks

Lines of code Vulnerability details Impact In PermitAndMulticall.sol the permit is called on the permitToken which allows you to sign the meta-transaction while someone else can submit it to the blockchain on your behalf. The problem is that a valid signature might be used several times in other...

Jenkins Pipeline 信息泄露漏洞

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Pipeline Groovy Plugin 2648.va9433432b33c and earlier versions are vulnerable to an information disclosure...

Emerson DL Command Injection (CVE-2013-2810)

Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary commands via a TCP replay attack. This plugin only works with Tenable.ot. Please visit...

Mageia: Security Advisory (MGASA-2018-0487)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Z-Wave 安全漏洞

Z-Wave is a wireless communication protocol used primarily for home automation. It is a mesh network that uses low-power radio waves to communicate from device to device to wirelessly control appliances and other devices in the home, such as controlling lighting, security systems, thermostats,...

CVE-2021-46145

The keyfob subsystem in Honda Civic 2012 vehicles allows a replay attack for unlocking. This is related to a non-expiring rolling code and counter resynchronization...

Design/Logic Flaw

The keyfob subsystem in Honda Civic 2012 vehicles allows a replay attack for unlocking. This is related to a non-expiring rolling code and counter resynchronization...

CVE-2021-46145

The CVE-2021-46145 issue concerns Honda Civic 2012 keyfob subsystem replay vulnerability due to a non-expiring rolling code and counter resynchronization. An attacker with software‑defined radio can intercept and replay codes to unlock (and potentially start the engine). Public details show affec...

CVE-2021-46145

The keyfob subsystem in Honda Civic 2012 vehicles allows a replay attack for unlocking. This is related to a non-expiring rolling code and counter resynchronization...

Honda-Civic Keyfob System 代码问题漏洞

The Honda-Civic Keyfob System is a vehicle keyfob system from Honda Japan. A code issue vulnerability exists in the Honda-Civic Keyfob System that stems from an incorrect implementation of the product's unlock counter. An attacker could cause an unlock through a replay attack...

lockWithPermit() function allows for replay attacks and signature malleability

Handle jayjonah8 Vulnerability details Impact In XDEFIDistribution.sol the lockWithPermit function calls permit on the XDEFI token. The problem with simply using permit alone for this is the message that is signed by the owner using the ECDSA algorithm. The message only contains the receiver...