101 matches found
Win-911 mobile server platform privilege escalation vulnerability
Summary An exploitable local privilege elevation vulnerability exists in the file system permissions of the Mobile-911 Server V2.5 install directory. Depending on the vector chosen, an attacker can overwrite the service executable and execute arbitrary code with System privileges or replace other...
Who’s Behind Monday’s 14-State 911 Outage?
Emergency 911 systems were down for more than an hour on Monday in towns and cities across 14 U.S. states. The outages led many news outlets to speculate the problem was related to Microsofts Azure web services platform, which also was struggling with a widespread outage at the time. However,...
chef-911.com Cross Site Scripting vulnerability OBB-1345354
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
chef-911.com Cross Site Scripting vulnerability OBB-1272830
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2019-20784
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 MTK chipsets software. Interaction of GPS with 911 emergency calls is mishandled. The LG ID is LVE-SMP-180012 January 2019...
Code injection
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 MTK chipsets software. Interaction of GPS with 911 emergency calls is mishandled. The LG ID is LVE-SMP-180012 January 2019...
CVE-2019-20784
CVE-2019-20784 affects LG mobile devices running Android 7.0–8.1 (MTK chipset) where the interaction between GPS and 911 emergency calls is mishandled. The issue is described in multiple sources (NVD, Red Hat, CVE listing) as a GPS-related handling flaw during emergency calls, with LG’s internal ...
CVE-2019-20784
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 MTK chipsets software. Interaction of GPS with 911 emergency calls is mishandled. The LG ID is LVE-SMP-180012 January 2019...
911.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1141293 Security Researcher g0bl1nsec Helped patch 3754 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting 911.com website and its...
911-job.ru Cross Site Scripting vulnerability
Security Researcher DerCraig Helped patch 24 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting 911-job.ru website and its users. Following coordinated and responsible vulnerability...
How Cisco Talos helped Howard County recover from a call center attack
On Aug. 11, 2018 the 911 non-emergency call center in Howard County, Maryland was in crisis — not for the types of calls flooding into dispatchers, but simply for the sheer numbers. The center, which usually receives 300 to 400 calls a day was now getting 2,500 in a 24-hour span of time. The...
Cell-Site surveillance devices (Stingray) could disrupt 911 emergency calls
By Uzair Amir Senator Ron Wyden of Oregon has made startling new revelations about CSS or cell-site stimulators. These cell surveillance devices, better known as Stingray, are used to disrupt communications of cell phones, mostly of criminals and lawbreakers. However, Sen. Wyden asserts that the...
Privacy Advocates Say Kelsey Smith Act Gives Police Too Much Power
The delicate balancing act between security and privacy is once again being tested. A bill making its way through Congress seeks to allow law enforcement to more easily uncover location data for cell phones from mobile carriers. The Kelsey Smith Act H.R. 5983 and S. 2973 would allow police and...
TAC Xenta 511 / 911 Credential Disclosure
Exploit Title: TAC Xenta 511 and 911 Credentials Disclosure Date: 25.05.2018 Exploit Author: Marek Cybul Vendor Homepage: https://download.schneider-electric.com/files?pFileName=TACXenta911SDS-XENTA911.pdf Version: 5.17 Schneider Electric TAC Xenta 911 and 511 PLCs Directory traversal in help...
TAC Xenta 511/911 - Directory Traversal Vulnerability
Exploit for hardware platform in category web applications Exploit Title: TAC Xenta 511 and 911 Credentials Disclosure Exploit Author: Marek Cybul Vendor Homepage: https://download.schneider-electric.com/files?pFileName=TACXenta911SDS-XENTA911.pdf Version: 5.17 Schneider Electric TAC Xenta 911 an...
3 Charged In Fatal Kansas ‘Swatting’ Attack
Federal prosecutors have charged three men with carrying out a deadly hoax known as "swatting," in which perpetrators call or message a target's local 911 operators claiming a fake hostage situation or a bomb threat in progress at the target's address -- with the expectation that local police may...
Baltimore’ 911 CAD system hacked; remained suspended for 17 hours
By Waqas The 911 dispatch system of Baltimore became the target of This is a post from HackRead.com Read the original post: Baltimore’ 911 CAD system hacked; remained suspended for 17 hours...
Amazon Linux AMI : nss (ALAS-2017-911)
Potential use-after-free in TLS 1.2 server when verifying client authentication : A use-after-free flaw was found in the TLS 1.2 implementation in the NSS library when client authentication was used. A malicious client could use this flaw to cause an application compiled against NSS to crash or,...
911.com XSS vulnerability
Vulnerable URL: http://911.com//%22'--!%3E%3CHtml%20Onmouseenter=confirm%60/OPENBUGBOUNTY/%60%20%3C!--//%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2785281 VIP website...
Hacker Caused Panic in Dallas by Turning ON Every Emergency Siren at Once
We have seen hackers flooding 911 emergency service with rogue requests to knock the service offline for an entire state, but some hacking incidents are worse than others. One such incident took place in Dallas on Friday night when hacker triggered a network of 156 emergency warning sirens for...