Apple Security Update: iOS 14.0.1 and iPadOS 14.0.1

Apple recommends to install security update iOS 14.0.1 and iPadOS 14.0.1 on devices iPhone 6s and later, iPod touch 7th generation, iPad Air 2 and later, and iPad mini 4 and later...

Apple Security Update: iOS 14.0.1

Apple recommends to install security update iOS 14.0.1 on devices iPhone 6s and later, iPod touch 7th generation, iPad Air 2 and later, and iPad mini 4 and later...

air-austral.com Cross Site Scripting vulnerability OBB-1332421

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-14096

Memory overflow in Xiaomi AI speaker Rom version 1.59.6 can happen when the speaker verifying a malicious firmware during OTA process...

Downloads Resources over HTTP in node-air-sdk

Affected versions of node-air-sdk insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

airc (>=0.1.3, <=0.1.8), airc2 (>=1.0.0, <=1.3.1) potentially affected by CVE-2016-10647 via node-air-sdk (>=0.1.0, <=0.3.0)

node-air-sdk NPM version =0.1.0, =0.1.3, =1.0.0, =1.3.1 Source cves: CVE-2016-10647 Source advisory: OSV:GHSA-7HVM-29RF-2GF2...

book.flyairsenegal.com Cross Site Scripting vulnerability OBB-1283012

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-15858

Some devices of Thales DIS formerly Gemalto, formerly Cinterion allow Directory Traversal by physically proximate attackers. The directory path access check of the internal flash file system can be circumvented. This flash file system can store application-specific data and data needed for custom...

air.travel.pl Cross Site Scripting vulnerability OBB-1266447

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-15531

Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data. This is an over-the-air remote code execution vulnerability in Bluetooth LE in EFR32 SoCs and associated modules running Bluetooth SDK, supporting Central or Observer roles...

CVE-2020-15532

Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data. This is an over-the-air denial of service vulnerability in Bluetooth LE in EFR32 SoCs and associated modules running Bluetooth SDK, supporting Central or Observer roles...

CVE-2020-15531

CVE-2020-15531 : Silicon Labs Bluetooth Low Energy SDK (pre-2.13.3) contains a buffer overflow in packet data, enabling an over-the-air remote code execution on EFR32 SoCs/modules running the Bluetooth SDK in Central/Observer roles. Documents confirm a remote-exec impact via crafted Bluetooth LE ...

SQL Injection Vulnerability in Air Pollution Control Monitoring, Early Warning and Decision Support System of Huainan Runcheng Technology Co.

The framework of the air pollution prevention and control grid-based monitoring, early warning and decision support system consists of three parts: the perception layer, the platform layer and the application layer. In the sensing layer, monitoring points are laid out according to the actual dema...

The Feds Want These Teams to Hack a Satellite—From Home

Meet the hackers who, this weekend, will try to commandeer an actual orbiter as part of a Defcon contest hosted by the Air Force and the Defense Digital Service...

OneDrive DLL hijack privilege escalation

There exists a dll hijacking vulnerability in Onedrive versions after 20.073. Recent assessments: bwatters-r7 at July 31, 2020 9:04pm UTC reported: EDIT: This is not a privilege escalation per se. This overwrites the dll and gains injection, but it relies on a second user with greater privileges ...

airalbania.com.al Cross Site Scripting vulnerability OBB-1237717

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Logic flaws and vulnerabilities in Air China APP order logistics information query

Air China App is a mobile software for national aviation service. A logic flaw vulnerability exists at the Air China APP order logistics information query. An attacker can use the vulnerability to view the logistics information of any order, including sensitive information such as the user's...

Apple Security Update: iOS 12.4.8

Apple recommends to install security update iOS 12.4.8 on devices iPhone 5s, iPhone 6 and 6 Plus, iPad Air, iPad mini 2 and 3, iPod touch 6th generation...

Apple Security Update: iOS 12.4.8

Apple recommends to install security update iOS 12.4.8 on devices iPhone 5s, iPhone 6 and 6 Plus, iPad Air, iPad mini 2 and 3, iPod touch 6th generation...

Apple Security Update: iOS 12.4.8

Apple recommends to install security update iOS 12.4.8 on devices iPhone 5s, iPhone 6 and 6 Plus, iPad Air, iPad mini 2 and 3, iPod touch 6th generation...