CVE-2017-9645

An Inadequate Encryption Strength issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants including RSD31-AM Package, DRM-1/2 and variants including Solar PWR Package, DRM and RDS Based Boundary Monitors, External Transmitters,...

CVE-2017-9649

CVE-2017-9649 is a vulnerability in Mirion Technologies’ Telemetry Enabled Devices caused by an unchangeable, factory-set key embedded in 900 MHz transmitter firmware (Use of Hard-Coded Cryptographic Key). Affected products include the DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS...

[SECURITY] Fedora 25 Update: lightdm-1.18.3-5.fc25

Lightdm is a display manager that: Is cross-desktop - supports different desktops Supports different display technologies Is lightweight - low memory usage and fast performance...

Microsoft Windows .NET Framework CVE-2017-8759 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successfully exploiting this issue may allow attackers to execute arbitrary code in the context of the application. Failed exploit attempts will result in denial-of-service conditions. Technologies Affected Microsoft...

surmounttechnologies.com XSS vulnerability

Vulnerable URL: http://surmounttechnologies.com/searchresults.html?sitesearchresults1=%3C/script%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27;%3C/script%3E=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

PHOENIX CONTACT, Innominate Security Technologies mGuard Firmware

CVSS v3 7.5 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: PHOENIX CONTACT, Innominate Security Technologies Equipment: mGuard firmware Vulnerability: Null Pointer Dereference AFFECTED PRODUCTS The following versions of mGuard firmware versions 8.0.0 to 8.5.1, running on thes...

FiberHome ADSL AN1020-25 - Improper Access Restrictions

FiberHome ADSL AN1020-25 - Improper Access Restrictions Title: ==== FiberHome Unauthenticated ADSL Router Factory Reset. Credit: ====== Name: Ibad Shah Twitter: @BeeFaauBee09 Website: beefaaubee09.github.io CVE: ===== CVE-2017-14147 Date: ==== 05-09-2017 dd/mm/yyyy About FiberHome: ====== FiberHo...

FiberHome ADSL AN1020-25 - Improper Access Restrictions

Title: ==== FiberHome Unauthenticated ADSL Router Factory Reset. Credit: ====== Name: Ibad Shah Twitter: @BeeFaauBee09 Website: beefaaubee09.github.io CVE: ===== CVE-2017-14147 Date: ==== 05-09-2017 dd/mm/yyyy About FiberHome: ====== FiberHome Technologies is a leading equipment vendor and global...

Motorola Bootloader - Kernel Cmdline Injection Secure Boot and Device Locking Bypass Exploit

Exploit for Android platform in category local exploits Sources: https://alephsecurity.com/2017/08/30/untethered-initroot/ https://github.com/alephsecurity/initroot initroot: Motorola Bootloader Kernel Cmdline Injection Secure Boot & Device Locking Bypass CVE-2016-10277 By Roee Hay / Aleph...

Intel Confirms Its Much-Loathed ME Feature Has A Kill Switch

Researchers at Positive Technologies forced Intel’s hand at revealing that a previously undocumented kill switch exists for its oft-criticized Intel Management Engine, a remote management component of Intel CPUs. Initially, Positive Technologies set out to disable the feature that some security...

Hidden Kill Switch Identified in Controversial Intel ME controller chip

By Uzair Amir Europe’s leading cyber-security firm Positive Technologies’ security researchers have a This is a post from HackRead.com Read the original post: Hidden Kill Switch Identified in Controversial Intel ME controller chip...

[SECURITY] [DSA 3956-1] connman security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3956-1 [email protected] https://www.debian.org/security/ Luciano Bello August 27, 2017 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-3956-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Flash's Final Countdown Has Begun

Few times have there been technologies so reviled and celebrated at the same time as Adobe Flash. Since its introduction as Macromedia Flash Player in the mid-’90s, the technology has helped shape what the web has become today. At the same time, few internet technologies have united so many wanti...

Call for Papers: Qualys Security Conference 2017

Our annual user conference, QSC17, is quickly approaching and we are looking for customer presentations that showcase hot topics related to security and best practices via case studies leveraging the use of Qualys technologies. If you would like to be considered as a presenter, please send a...

Engineering Firm Leaks Data on Dell, SBC and Oracle

A Texas-based firm called Power Quality Engineering publicly exposed sensitive electrical infrastructure data on the public internet. Firms impacted by the leak were Dell Technologies, SBC, Freescale, Oracle, Texas Instruments and the City of Austin. Chris Vickery, cyber risk analyst at security...

Mirion Technologies Telemetry Enabled Devices Denial of Service Vulnerability

Mirion Technologies is the source for solutions for nuclear energy, military, radiation detection and monitoring. The Mirion Technologies Telemetry Enabled Devices denial of service vulnerability can be exploited by attackers to transmit fraudulent data or perform a denial of service...

Mirion Technologies Telemetry Enabled Devices Denial of Service Vulnerability (CNVD-2017-22839)

Mirion Technologies is the source for solutions for nuclear energy, military, radiation detection and monitoring. Mirion Technologies Telemetry Enabled Devices denial of service vulnerability is exploited by attackers to transmit fraudulent data or perform denial of service...

Detecting Stingrays

Researchers are developing technologies that can detect IMSI-catchers: those fake cell phone towers that can be used to surveil people in the area. This is good work, but it's unclear to me whether these devices can detect all the newer IMSI-catchers that are being sold to governments worldwide...

PT-2018-02: Improper Authorization in PHOENIX CONTACT FL SWITCH

The specialists of the Positive Research center have detected an Improper Authorization vulnerability in PHOENIX CONTACT FL SWITCH. An Improper Authorization issue in PHOENIX CONTACT FL SWITCH products allows remote unauthenticated attackers to bypass web-service authentication and obtain...