CVE-2018-13410

CVE-2018-13410 affects Info-ZIP Zip 3.0; using -T and -TT can cause a denial of service via an off-by-one error (invalid free and crash) and possibly other impact. It is unclear if an untrusted party can realistically control -TT. Public advisories note vulnerable packages and patches (e.g., zip ...

CVE-2018-13196

The sell function of a smart contract implementation for T-Swap-Token T-S-T, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

Integer overflow

The sell function of a smart contract implementation for T-Swap-Token T-S-T, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13196

CVE-2018-13196 affects the T-Swap-Token (T-S-T) smart contract on Ethereum. The sell function contains an integer overflow where amount * sellPrice can evaluate to zero, leading to a reduction of a seller’s assets. The connected sources (NVD entry and related records) describe the vulnerability c...

CVE-2018-13196

The sell function of a smart contract implementation for T-Swap-Token T-S-T, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

AT&T Bizcircle - Persistent Profile Cross Site Vulnerability

Document Title: =============== AT&T Bizcircle - Persistent Profile Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2108 AT&T Reference ID: 1502971499862 Vulnerability Magazine:...

AT&T Bizcircle - Persistent Profile Cross Site Vulnerability

Document Title: =============== AT&T Bizcircle - Persistent Profile Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2108 AT&T Reference ID: 1502971499862 Vulnerability Magazine:...

Samsung Investigates Claims of Spontaneous Texting of Images to Contacts

Samsung says it isn’t seeing any software or hardware issues after a slew of Samsung phone users reported that their devices are randomly sending camera roll photos to their contacts without permission. Users took to Reddit and Samsung’s official forums over the past week to complain that their...

Teradek T-RAX 7.3.2 (snapshot.cgi) Stream Disclosure

Summary T-RAX is a high-density enterprise-grade H.264 platform that encodes, decodes, and streams video at broadcast quality. Description T-RAX suffers from an unauthenticated and unauthorized live stream disclosure when snapshot.cgi script is called. Vendor Teradek, LLC - https://www.teradek.co...

t-hoekje-ferwert.nl XSS vulnerability

Open Bug Bounty ID: OBB-637583 Description| Value ---|--- Affected Website:| t-hoekje-ferwert.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

t-shock.eu XSS vulnerability

Open Bug Bounty ID: OBB-636191 Description| Value ---|--- Affected Website:| t-shock.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Supreme Court: Police Need Warrant for Mobile Location Data

The U.S. Supreme Court today ruled that the government needs to obtain a court-ordered warrant to gather location data on mobile device users. The decision is a major development for privacy rights, but experts say it may have limited bearing on the selling of real-time customer location data by...

bsp.t-mobile.de XSS vulnerability

Open Bug Bounty ID: OBB-633287 Description| Value ---|--- Affected Website:| bsp.t-mobile.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lookup.t-mobile.com XSS vulnerability

Open Bug Bounty ID: OBB-626522 Description| Value ---|--- Affected Website:| lookup.t-mobile.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-11517

mySCADA myPRO 7 allows remote attackers to discover all ProjectIDs in a project by sending all of the prj parameter values from 870000 to 875000 in t=0&rq=0 requests to TCP port 11010...

Teradek T-RAX 7.3.2 (snapshot.cgi) Stream Disclosure

Teradek T-RAX 7.3.2 snapshot.cgi Stream Disclosure Vendor: Teradek, LLC Product web page: https://www.teradek.com Affected version: Firmware Version: 7.3.2 build 24453 Teradek Firmware Version 7.3.15 Summary: T-RAX is a high-density enterprise-grade H.264 platform that encodes, decodes, and strea...

T-Mobile Employee Made Unauthorized ‘SIM Swap’ to Steal Instagram Account

T-Mobile is investigating a retail store employee who allegedly made unauthorized changes to a subscriber's account in an elaborate scheme to steal the customer's three-letter Instagram username. The modifications, which could have let the rogue employee empty bank accounts associated with the...

Tracking Firm LocationSmart Leaked Location Data for Customers of All Major U.S. Mobile Carriers Without Consent in Real Time Via Its Web Site

LocationSmart, a U.S. based company that acts as an aggregator of real-time data about the precise location of mobile phone devices, has been leaking this information to anyone via a buggy component of its Web site -- without the need for any password or other form of authentication or...

Cross site scripting

Cross Site Scripting XSS exists on the Foxconn FEMTO AP-FC4064-T APGTB385.8.3lb15-W47 LTE Build 15 via the configuration of a user account. An attacker can execute arbitrary script on an unsuspecting user's browser...

Default credentials

A low privileged admin account with a weak default password of admin exists on the Foxconn FEMTO AP-FC4064-T APGTB385.8.3lb15-W47 LTE Build 15. In addition, its web management page relies on the existence or values of cookies when performing security-critical operations. One can gain privileges b...