Svart natt, Svart katt, Svart hatt.
- Projekt
- 1
- Publicerade CVE
- 2
Projekt
Sårbarheter
-
privacyIDEA Authenticator OTP Seed Disclosure
privacyIDEA Authenticator for Android 4.3.0 lets a local attacker with root recover enrolled OTP/TOTP/HOTP seeds by hooking the app's cryptographic functions at runtime.
6.8 Medel · CVSS 3.1 -
MikroTik RouterOS and SwOS WebFig Default HTTP Configuration Allows Credential Interception
MikroTik RouterOS and SwOS ship WebFig with HTTP enabled and no redirect to HTTPS, so admin credentials cross the network in cleartext after a factory reset.
10.0 Kritisk · CVSS 3.1