CVE-2017-7305

Summary: CVE-2017-7305 concerns Riverbed RiOS where a bootloader password is optional, allowing physically proximate attackers to bypass the secure-vault protection via crafted boot. The available documents confirm that RiOS up to certain versions (notably 9.6.0 and prior to 9.6.1) does not requi...

PT-2017-17652 · Riverbed · Riverbed Rios

Name of the Vulnerable Software and Affected Versions: Riverbed RiOS versions prior to 9.6.1 Description: The issue is related to a weak default password for the secure vault in Riverbed RiOS, which can be exploited by physically proximate attackers who have knowledge of the password algorithm an...

CVE-2017-7306: Weak Password Requirements

Riverbed RiOS through 9.6.0 has a weak default password for the secure vault, which makes it easier for physically proximate attackers to defeat the secure-vault protection mechanism by leveraging knowledge of the password algorithm and the appliance serial number. NOTE: the vendor believes that...

CVE-2017-7305: Weak Password Requirements

Riverbed RiOS through 9.6.0 does not require a bootloader password, which makes it easier for physically proximate attackers to defeat the secure-vault protection mechanism via a crafted boot. NOTE: the vendor believes that this does not meet the definition of a vulnerability. The product contain...

PT-2017-17651 · Riverbed · Riverbed Rios

Name of the Vulnerable Software and Affected Versions: Riverbed RiOS versions prior to 9.6.1 Description: The issue allows physically proximate attackers to defeat the secure-vault protection mechanism via a crafted boot because a bootloader password is not required. The product contains correct...

WikiLeaks Dark Matter Release Shows CIA Interdiction of iPhone Supply Chain

From the early days of the iPhone, the CIA has had an interest in compromising the flagship Apple mobile device, according to the latest WikiLeaks release of CIA documents. Today’s Vault 7 Dark Matter release shows an unsurprising interest from the intelligence agency in tracking iPhone users, as...

Vault 7 disclosure document follow-up: Cisco for an impact to the 300 switches of the vulnerability early warning-vulnerability warning-the black bar safety net

The CIA Vault 7 leaked event the rest temperature is not over, Cisco experts will find its IOS and IOS XE software the Cluster Management Protocol remote code execution vulnerability exists in. Recently Wikileaks has just announced plans with some IT companies to share some information about thei...

Cisco Warns of Critical Vulnerability Revealed in WikiLeaks 'Vault 7' Data Dump

Cisco Systems warned customers on Friday of a critical vulnerability that could allow an attacker to execute arbitrary code and obtain full control on more than 300 different models of its switches and routers. Cisco said it became aware of the vulnerability after WikiLeaks released its Vault 7...

7 Things That Happened After WikiLeaks Dumped The CIA Hacking Files

This week WikiLeaks published "Vault 7" — a roughly 8,761 documents and files claiming to detail surveillance tools and tactics of the Central Intelligence Agency CIA. The leak outlined a broad range of flaws in smartphones and other devices that the agency uses to intercept communications and sp...

10 Things You Need To Know About 'Wikileaks CIA Leak'

Yesterday WikiLeaks published thousands of documents revealing top CIA hacking secrets, including the agency's ability to break into iPhones, Android phones, smart TVs, and Microsoft, Mac and Linux operating systems. It dubbed the first release as Vault 7. Vault 7 is just the first part of leak...

WordPress WP Vault 0.8.6.6 LFI

Local file include vulnerability in WordPress WP Vault plugin wpv-image parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

Wordpress WP Vault 0.8.6.6 Plugin - Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: WP Vault 0.8.6.6 – Plugin WordPress – Local File Inclusion Date: 28/11/2016 Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/wp-vault/ Software Link: https://wordpress.org/plugins/wp-vault/ Contact:...

Wordpress Plugin WP Vault Local File Inclusion Vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . Wordpress plugin WP Vault '$GET"wpv-image"' there is a local file inclusion vulnerability. Allowing an attacker...

WordPress WP Vault 0.8.6.6 Local File Inclusion

Exploit Title: WP Vault 0.8.6.6 a Plugin WordPress a Local File Inclusion Date: 28/11/2016 Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/wp-vault/ Software Link: https://wordpress.org/plugins/wp-vault/ Contact: http://twitter.com/lenonleite Website:...

WordPress Vault Plugin <= 0.8.6.6 - Local File Inclusion

This plugin is prone to a local file inclusion vulnerability, because $GET“wpv-image” is not escaped. Solution Update the plugin...

WP Vault 0.8.6.6 - Unauthenticated Local File Inclusion (LFI)

The wp-vault WordPress plugin was affected by an Unauthenticated Local File Inclusion LFI security vulnerability...

SecureSafe Digital Vault - Customized SSL, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SecureSafe Digital Vault published at the 'play' market has multiple vulnerabilities...

Brave Software: 2 Directory Listing on ledger.brave.com & vault-staging.brave.com

Hi Brave team, Have found 2 Directory listing on: - https://ledger.brave.com/swaggerui/ - https://vault-staging.brave.com/swaggerui/ Refer to screenshosts for clarification: F127337 F127336...

PHP File Vault 0.9 - Directory Traversal

PHP File Vault 0.9 - Directory Traversal PHP File Vault version 0.9 , remote directory traversal and read file vulnerabilty ================================================================================== Discovered by NA, NAattutanota.com ====================================== Description...

PHP File Vault 0.9 - Directory Traversal

Exploit for php platform in category web applications PHP File Vault version 0.9 , remote directory traversal and read file vulnerabilty ================================================================================== Discovered by NA, NAattutanota.com ======================================...