The vulnerability in the BPF subsystem of the `map_create` or `check_btf_info` function of the Linux kernel allows a malicious actor to cause an unexpected termination of the application.

The vulnerability of the BPF subsystem of the mapcreate function kernel/bpf/syscall.c or checkbtfinfo function kernel/bpf/verifier.c in the Linux operating system kernel is due to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to cause an applicati...

Weak password vulnerability in DrayTek Vigor2922

Vigor2922 is a high-performance Internet behavior management VPN router product for small and medium-sized businesses. DrayTek Vigor2922 suffers from a weak password vulnerability. Attackers use the weak password to log into the backend and obtain sensitive information...

LOGBASE Operations Security Management System suffers from weak password vulnerability

LogBase O&M Security Management System is a new generation of operational behavior management security audit system. A weak password vulnerability exists in the LOGBASE Operations and Maintenance Security Management System. The vulnerability is due to the system is not set up for the first login ...

Weak Password Vulnerability in CPS Unlimited Routers

CIGNA provides full-system security services ranging from security systems to intelligent security management, surveillance, and fire protection. CIGNA can combine graphic control software, surveillance access control integration solutions, biotechnology identification systems, computerized fire...

The vulnerability of the kernel of Microsoft Windows allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the kernel of Microsoft Windows is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the ENGINEAPI component of the SAP NetWeaver Java Application Server web application server allows a attacker to cause a service failure.

The vulnerability of the ENGINEAPI component in SAP NetWeaver Java Application Server web applications is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Weak Password Vulnerability in DrayTek Vigor2912

The Vigor 2912 is a high-performance firewall router product for small and medium-sized businesses. A weak password vulnerability exists in DrayTek Vigor 2912. An attacker uses a weak password to log into the backend and obtain sensitive information...

Nextcloud: Password policy changes not enforced for existing passwords

So this is two reports in one. Sort of. But they are the same issue, or at least related. 1. When you setup your nextcloud there is no password policy at all. There is the strength indicator. I get the password policy app is not yet active at that point. But a minimum length would not be that...

Weak Password Vulnerability in Zhongxin Golden Shield Information Security Management System

Zhongxin Golden Shield information security management system realizes the collection, monitoring, analysis, early warning and control of all kinds of resource information such as network traffic, IP address, domain name, information content, application and so on in the IDC server room. Weak...

Weak Password Vulnerability in RG-NBR700G of Riptide Networks Inc.

RG-NBR700G is an Internet Behavior Management router from Riptide, which is designed for office full scenarios. A weak password vulnerability exists in RG-NBR700G, which can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in AC centralized management platform of China Construction Zhiyun Network Communications Co.

CCTC Zhiyun Network Communications Co., Ltd. is a service provider specializing in the research and development, production, sales and service of network communications equipment, and providing network security, routers, switches, firewalls, wireless AP coverage and other network products and...

Weak Password Vulnerability in DPX8000 of Hangzhou Dipu Technology Co.

DPX8000 is a deep service routing and switching gateway designed based on the three core technologies of APP-X hardware architecture, ConPlat operating system and APP-ID application and threat feature library developed by DP Technology. Ltd. DPX8000 has a weak password vulnerability, which can be...

Weak Password Vulnerability in PA-5500-U06 of Humber Technology Ltd.

English: Opzoon is a leading global provider of cloud computing data center solutions and the first high-tech enterprise in China to establish an enterprise-level applied mathematics laboratory. A weak password vulnerability exists in Humber Technology Limited PA-5500-U06, which can be exploited ...

Weak password vulnerability in AC centralized management platform of Shenzhen Jianxin Technology Company Limited (CNVD-2021-32069)

Ltd. is an emerging technology enterprise focusing on intelligent networking solution provider. Ltd. AC centralized management platform has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in China Telecom's NB-IOT smart device management platform

China Telecom NB-IOT Smart Device Management Platform is an IoT management platform. A weak password vulnerability exists in China Telecom's NB-IOT Smart Device Management Platform, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in ADX3000 of Hangzhou Dipu Technology Co.

Hangzhou Dipu Technology Co., Ltd. is a high-tech listed enterprise integrating R&D, production and sales. Ltd. ADX3000 has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2021-3505

A flaw was found in libtpms in versions before 0.8.0. The TPM 2 implementation returns 2048 bit keys with 1984 bit strength due to a bug in the TCG specification. The bug is in the key creation algorithm in RsaAdjustPrimeCandidate, which is called before the prime number check. The highest threat...

U.S. General Services Administration: Weak password policy leading to exposure of administrator account access

Hi, The login endpoint https://mysmartplans.gsa.gov/Marathon/Default.aspx is having weak password policy. During the recon, I came across a mysmartplans overview document http://www.accentimaging.com/accent/pdfs/Accent%20MySmartPlans.pdf . In this document few users are mentioned like - rick, ban...

Weak Password Vulnerability in RMP Router Management Platform of Xiamen Sihsin Communication Technology Co.

Xiamen Sihsin Communication Technology Co., Ltd. focuses on the research and development, production, promotion and service of high-end wireless communication transmission equipment in the industrial field, and is a backbone enterprise in the field of wireless communication of the Internet of...

Weak Password Vulnerability in Fusion Router FR3008

Ltd. was founded in 2009, is to provide users with intelligent products and cloud services in the field of smart home technology innovative enterprises Smart Life is Fusion's Internet strategy segment, with intelligent network devices, smart hardware, APP and Internet communication channels as th...