CVE-2021-34086

CVE-2021-34086 affects Ultimaker S3/S5 and Ultimaker 3 (S-line up to 6.3; 3 through 5.2.16) where the local webserver exposes APIs that are vulnerable to CSRF due to lack of request verification. Root cause: insufficient CSRF protection on the local webserver APIs. Impact: CVSS3.1/AV:N/AC:L/PR:N/...

CVE-2021-34087

In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5.2.16, the local webserver can be used for clickjacking. This includes the settings page...

CVE-2021-34087

The CVE-2021-34087 entry describes a clickjacking vulnerability in the local webserver of Ultimaker printers. Affected products: Ultimaker S3, Ultimaker S5, and Ultimaker 3 family (S-line through firmware 6.3; Ultimaker 3 through 5.2.16). The issue is specifically on the settings page of the loca...

OctoPrint Cross-Site Request Vulnerability

OctoPrint is an application. Provides a fast web interface for controlling consumer 3D printers. A cross-site request vulnerability existed prior to OctoPrint version 1.6.0. The vulnerability originated in the program because an API error message included the value of an input parameter. No...

Prusa Research PrusaSlicer Objparser::objparse() stack-based buffer overflow vulnerability

Summary A stack-based buffer overflow vulnerability exists in the Objparser::objparse functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

A Cheap 3D Printer Can Trick Smartphone Fingerprint Locks

With a budget of just $2,000, researchers could fool biometric scanners 80 percent of the time...

With IoT, common devices pose new threats

For Instance… Hackers Setting Your 3D Printer on Fire The world is careening toward the reality that almost all electronics in your home and business are connected to the internet. Many of these devices contain things like heating elements, batteries, and motors that are entirely...

TV B Gone Kit - New Universal Device Case

Document Title: =============== TV B Gone Kit - New Universal Device Case References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2172 Download: https://www.vulnerability-lab.com/resources/documents/TVBGoneKitSTL.zip Informativ: https://learn.adafruit.com/tv-b-gone-kit/overvie...

TV B Gone Kit - New Universal Device Case

Document Title: =============== TV B Gone Kit - New Universal Device Case References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2172 Download: https://www.vulnerability-lab.com/resources/documents/TVBGoneKitSTL.zip Informativ: https://learn.adafruit.com/tv-b-gone-kit/overvie...

[SECURITY] Fedora 28 Update: lulzbot-marlin-firmware-1.1.8.62-1.fc28

Marlin firmware files for the Lulzbot family of 3D printers...

Banana PI Lamobo R1 SD v3 - New Universal Router Case

Document Title: =============== Banana PI Lamobo R1 SD v3 - New Universal Router Case References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2140 Download: https://www.vulnerability-lab.com/resources/documents/2140.rar Vulnerability Magazine:...

CVE-2018-1000537: Improper Restriction of Operations within the Bounds of a Memory Buffer

Marlin Firmware Marlin version 1.1.x and earlier contains a Buffer Overflow vulnerability in cardreader.cpp Depending on branch/version that can result in Arbitrary code execution. This attack appear to be exploitable via Crafted G-Code instruction/file is sent to the printer...

Apple iPhone X Face ID Fooled by a Mask

Apple’s Face ID technology, the centerpiece biometric authentication mechanism for the iPhone X, has been cracked a little more than a week after it was introduced to the public. Researchers from Vietnamese security company Bkav demonstrated that they could fool the technology to unlock the phone...