18 matches found
EUVD-2000-0110
Malware in sbrugna...
EUVD-2025-24816
Malicious code in bioql PyPI...
PT-2025-33283 · Unknown · Armorblock 5000 +1
Name of the Vulnerable Software and Affected Versions: ArmorBlock 5000 affected versions not specified Description: A security issue exists within the 5032 16pt Digital Configurable module’s web server. The web server’s session number increments at an interval that correlates to the last two...
CVE-2025-7773: Incorrect Authorization
A security issue exists within the 5032 16pt Digital Configurable module’s web server. The web server’s session number increments at an interval that correlates to the last two consecutive sign in session interval, making it predictable...
The vulnerability of Mitsubishi Electric’s GOT2000 and GOT SIMPLE graphic panel controllers lies in the predictability of random initial TCP session numbers. This allows attackers to intercept connections for data transmission and prevent the establishment of connections for data transfer.
The vulnerability of Mitsubishi Electric’s GOT2000 and GOT SIMPLE graphic control panels relates to the predictability of random initial TCP session numbers. Exploiting this vulnerability allows a remote attacker to intercept data transmissions and prevent the establishment of data connection...
CVE-2017-6026
A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The session numbers generated by the web application are lacking randomization an...
CVE-2017-6026: Use of Insufficiently Random Values
A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The session numbers generated by the web application are lacking randomization an...
MGASA-2014-0445 Updated kdebase4-workspace packages fix security vulnerability and various bugs
This update fixes a security vulnerability in the KDE workspace configuration module for setting the date and time CVE-2014-8651, mga14487, and fixes some additional issues: - fix kcm botching unrelated user settings mga3310, bko254430, - do not popup during initialization 0 B Removable media...
CVE-2013-6972
Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-conference attendance, by reading HTML source code, aka Bug ID CSCul57126...
Authentication flaw
Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-conference attendance, by reading HTML source code, aka Bug ID CSCul57126...
CVE-2013-6972
Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-conference attendance, by reading HTML source code, aka Bug ID CSCul57126...
CVE-2013-6972
Cisco WebEx Training Center exposes session numbers via server HTML responses, allowing remote attackers to discover valid session numbers and bypass host approval to join audio-conferences without attendee authorization. Root cause: inappropriate disclosure of sensitive information in server rep...
PT-2013-6213
Name of the Vulnerable Software and Affected Versions Cisco WebEx Training Center affected versions not specified Description The issue allows remote attackers to discover session numbers and bypass host approval for audio-conference attendance by reading HTML source code. Recommendations At the...
CVE-2013-6972: Exposure of Sensitive Information to an Unauthorized Actor
Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-conference attendance, by reading HTML source code, aka Bug ID CSCul57126...
CVE-2000-0111
The RightFax web client uses predictable session numbers, which allows remote attackers to hijack user sessions...
CVE-2000-0111: Undefined Security Weakness
The RightFax web client uses predictable session numbers, which allows remote attackers to hijack user sessions...
rightfax.txt
LoWNOISE Colombia 2000 +---RightFax Web Client v5.2: Hijack user's sessions +---Description Using your web browser When you click to log on to the rightfax server, it opens a new window. In that window you are asked for a username and password. The Toolbar on the browser is hidden, but if you ope...