CVE-2018-16618

VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x service on port 1668 listening for requests on localhost. Requests submitted to this service are checked for a string of random characters...

CVE-2018-16618

VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x service on port 1668 listening for requests on localhost. Requests submitted to this service are checked for a string of random characters...

Command injection

VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x service on port 1668 listening for requests on localhost. Requests submitted to this service are checked for a string of random characters...

CVE-2018-16618

VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x service on port 1668 listening for requests on localhost. Requests submitted to this service are checked for a string of random characters...

CVE-2018-16618

VTech Storio Max devices running before 56.D3JM6 are affected by CVE-2018-16618. An exposed storeintenttranslate.x service on localhost:1668 accepts requests that combine random characters with an Android activity name; the activity name is inserted into a shell command. By injecting shell metach...

VTech DigiGo 83.60630 Browser Overlay Attack Vulnerability

Exploit for cgi platform in category web applications ------------------------------------------------------------------------ Multiple vulnerabilities in VTech DigiGo allow browser overlay attack ------------------------------------------------------------------------ Sipke Mellema, September 20...

A week in security (January 8 – January 14)

It's very early in the year, yet everyone has already had a complete meltdown pun intended over a number of serious vulnerabilities found in legacy and modern microprocessors. Last week, rightly so, vendors released patches for hardware and OSes to help mitigate these threats. However, problems i...

VTech DigiGo 83.60630 Broken TLS Certificate Validation

------------------------------------------------------------------------ Broken TLS certificate validation in VTech DigiGo browser ------------------------------------------------------------------------ Sipke Mellema, September 2017...

VTech DigiGo 83.60630 Browser Overlay Attack

------------------------------------------------------------------------ Multiple vulnerabilities in VTech DigiGo allow browser overlay attack ------------------------------------------------------------------------ Sipke Mellema, September 2017...

Senator Demands Answers About CloudPets Breach

A U.S. senator has called Spiral Toys onto the carpet for its data security practices in light of the recent CloudPets breach. Sen. Bill Nelson D-FL, a ranking member of the Committee on Commerce, Science and Transportation and backer of a 2016 report on security and privacy concerns related to...

VTech Kid Connect - Customized SSL, MIT license, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application VTech Kid Connect published at the 'play' market has multiple vulnerabilities...

VTech Kid Connect (Deutsch) - Customized SSL, MIT license, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application VTech Kid Connect Deutsch published at the 'play' market has multiple vulnerabilities...

One after another: the VTech user data leaked, and was broke two major vulnerability-vulnerability warning-the black bar safety net

Recently, the world's largest infant electronic learning product Maker Vtech（Vtech）is aeration 4 8 0 million parents and 6 4 0 million for children information disclosure. ! Due to this event, Vtech its share price fell to a year low. Followed, with security researchers in their innotab Max produ...

VTech Tablet: a plurality of data breach risks hidden-vulnerability warning-the black bar safety net

! In a recent VTech data leak after the event, everyone might think that VTech electronic toy safety won't be better than now worse. However, in this case, we found two vulnerabilities, a hacker can be from the children of their innotab tablet in grabbing data. Brush mode to steal data For lost,...

The largest infant electronic learning product Maker Vtech（Vtech）is aeration 4 8 0 million parents and children to information disclosure-vulnerability warning-the black bar safety net

Vtech Vtech, the company is located in Hong Kong, as the world's largest infant and preschool electronic learning products business, before being exposed user data leakage. From the current analysis point of view, leaked the data relates to the range has covered 4 of 8 0 million parents and more...

Toymaker VTech Hack Exposes 4.8 Million Customers, including Photos of Children

Earlier this month, a massive data breach at VTech – the maker of tablets and gadgets aimed at children – exposed the personal details of about 4.8 Million parents and photos of more than 200,000 Children. If that was not bad enough… …it turns out that the massive cyber attack against the toymake...

Data on 5 Million Users Compromised in Breach at Toy Maker VTech

UPDATE VTech, a company that manufactures electronic learning devices, baby monitors, toys, and other equipment, announced Monday that information from five million customer accounts, which include identity information belonging to children, were accessed in an attack earlier this month. The news...

CVE-2008-5952

SQL injection vulnerability in KTP Computer Customer Database KTPCCD CMS, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a vtech action to the default URI...