iBall ADSL2+ Home Router suffers from multiple authentication bypass vulnerabilities.
1d79305ff9e23d0f385e458888f5616fUTStar WA3002G4 ADSL Broadband Modem suffers from multiple authentication bypass vulnerabilities.
76b06148bd896167e3da312b301ddd69SAP E-Recruiting versions 605, 606, 616, and 617 suffer from an email verification bypass vulnerability.
bd82d9bed91744c5d4882ea45c5811e1Hikvision IP Cameras suffers from multiple access bypass vulnerabilities.
6fc12ebc93196ea83a1dbcc6864fa795Debian Linux Security Advisory 3967-1 - An authentication bypass vulnerability was discovered in mbed TLS, a lightweight crypto and SSL/TLS library, when the authentication mode is configured as 'optional'. A remote attacker can take advantage of this flaw to mount a man-in-the-middle attack and impersonate an intended peer via an X.509 certificate chain with many intermediates.
6090bbf6fd99aeda841cc87bed7996d4FiberHome suffers from an unauthenticated ADSL router factory reset vulnerability.
1f1aebe9984030ffad3264aab7615426eNom appears to not check for any confirmation from owners when performing domain transfers.
70095f8716910559984cb06ad2ccab0dVulnerable versions of the Motorola Android Bootloader (ABOOT) allow for kernel command-line injection. Additionally it suffers from a bypass vulnerability.
f54a07c030c9fe4687175e84ce86bb26Red-Gate SQL Monitor versions prior to 3.10 and 4.2 suffers from an authentication bypass vulnerability.
849e97fb399ffa034d865ee280f85f45VirtualBox suffers from a privilege escalation vulnerability due to a windows process DLL UNC path signature bypass vulnerability.
b7b24727a13df6c61f230dfaf8caa4b7VirtualBox suffers from a privilege escalation vulnerability due to a windows process DLL signature bypass vulnerability.
e1476610f1872866ca63ea58ddd4a886VehicleWorkshop suffers from a remote SQL injection vulnerability that allows for authentication bypass.
64764044ccdef8622fdfc659f7902ff2Friends in War Make or Break version 1.7 suffers from a remote SQL injection vulnerability that allows for login bypass.
9e69d4ab1c94c51b9c7bc0dfe083c0cbCisco DDR2200 and 2201v1 ADSL2+ Residential Gateway devices suffer from insecure direct object reference vulnerabilities that allow for remote code execution as well as a path traversal issue.
3d75aff532e38b6b2a6184d2c0b2e44dTelegram version 4.0.1 suffers from a two-factor authentication bypass vulnerability.
a874728318ad389b5b51f22df6fc748fApache httpd versions 2.2.0 through 2.2.32 and 2.4.0 through 2.4.25 suffer from an ap_get_basic_auth_pw authentication bypass vulnerability.
cb420682d67ca6cb1a509889ce890788EMC ESRS Virtual Edition versions 3.18 and below suffer from an authentication bypass vulnerability.
251bf4de8dd0bb54efd42555b138296dAtlassian Confluence versions 4.3.0 through 6.1.1 suffers from an access restriction bypass vulnerability.
71d758377b0464d5863a7cf56d17a000Easy File Sharing Web Server version 7.2 suffers from an authentication bypass vulnerability. suffers from a bypass vulnerability.
cb6cabfb18bb30057a5918cb51b25080D-Link DIR-600M Wireless N 150 suffers from an authentication bypass vulnerability.
177eb06dde58e466bffebdce91d3056eManageEngine ServiceDesk Plus version 9.0 suffers from an authentication bypass vulnerability.
f57b227c1d9fe11249ee5d75222c47ccQNAP PhotoStation version 5.2.4 and MusicStation version 4.8.4 suffer from an authentication bypass vulnerability.
9e5b18523ce0b371a5bd11a3f875f96aStarscream library version prior to 2.0.4 suffer from an SSL pinning vulnerability due to the pinning occurring too late in the stream function.
b0989ba797389d3201af3d8be771474fWestern Digital My Cloud with firmware version 2.21.126 suffers from an authentication bypass vulnerability that allows escalation to administrative privileges.
03efc4e9cf55948800f65cb80dd0da13WebSocket.swift in Starscream versions 2.0.3 and below allows an SSL Pinning bypass because of incorrect management of the certValidated variable (it can be set to true but cannot be set to false). An attacker can achieve traffic interception from a man-in-the-middle position, first by resetting the TCP connection between the client and server, and afterwards by injecting an SSL server certificates they control.
4a7af40db402a792926151e595919340
© 2016 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed