Input validation

HUAWEI P9 smartphones with software versions earlier before EVA-L09C432B383, versions earlier before EVA-L09C636B380, versions earlier before VIE-L09C432B370, versions earlier before VIE-L29C636B370 have an insufficient input validation vulnerability. An attacker could exploit this vulnerability ...

CVE-2017-2713

HUAWEI P9 smartphones with software versions earlier before EVA-L09C432B383, versions earlier before EVA-L09C636B380, versions earlier before VIE-L09C432B370, versions earlier before VIE-L29C636B370 have an insufficient input validation vulnerability. An attacker could exploit this vulnerability ...

Multiple Jensen of Scandinavia AS Air:Link Router Stack Buffer Overflow Vulnerabilities

Jensen of Scandinavia AS Air:Link 3G and others are routers from Jensen of Scandinavia AS in Norway. A stack buffer overflow vulnerability exists in multiple Jensen of Scandinavia AS Air:Link routers. A remote attacker could exploit this vulnerability by leveraging multiple parameters in the...

air-jordan-sneaker.com XSS vulnerability

Open Bug Bounty ID: OBB-372544 Description| Value ---|--- Affected Website:| air-jordan-sneaker.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

air-gun.ru XSS vulnerability

Open Bug Bounty ID: OBB-353211 Description| Value ---|--- Affected Website:| air-gun.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

BlueBorne – Bluetooth’s airborne influenza

Armis Labs has discovered a new attack vector that targets any device that has Bluetooth capability. This includes mobile, desktop, and IoT — roughly accounting for 8.2 billion devices. All operating systems are susceptible — Android, iOS, Windows, and Linux. Dubbed BlueBorne, it exposes several...

mpi.mb.ca XSS vulnerability

Vulnerable URL: https://www.mpi.mb.ca/en/Rd-Safety/Occupant-Protection/Pages/air-bags.aspx?FollowSite=0=%27-confirm%27OPENBUGBOUNTY%27-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

CVE-2017-11121

On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, properly crafted malicious over-the-air Fast Transition frames can potentially trigger internal Wi-Fi firmware heap and/or stack overflows, leading to denial of service or other effects, aka B-V2017061205...

Malware Steals Data From Air-Gapped Network via Security Cameras

Proof-of-concept malware called aIR-Jumper can be used to defeat air-gapped network protections and send data in and out of a targeted network. The technique uses security cameras and infrared LED lights that can blink back and forth to each other transmitting data that has been converted into da...

Hacker Can Steal Data from Air-Gapped Computers Using IR CCTV Cameras

Air-gapped computers that are isolated from the Internet and physically separated from local networks are believed to be the most secure computers which are difficult to infiltrate. However, these networks have been a regular target in recent years for researchers, who have been trying to...

Bluetooth Vulnerabilities

A bunch of Bluetooth vulnerabilities are being reported, some pretty nasty. BlueBorne concerns us because of the medium by which it operates. Unlike the majority of attacks today, which rely on the internet, a BlueBorne attack spreads through the air. This works similarly to the two less extensiv...

aircanada.com XSS vulnerability

Vulnerable URL: https://www.aircanada.com/ca/en/aco/home/search-results.html?q=toto%27a%27.constructor.prototype.charAt=.join;$eval%27x=1%20%20;promptdocument.domain//%27; Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.12.2017 Vulnerability type:| XSS Vulnerability...

czechairspotters.com XSS vulnerability

Vulnerable URL: http://www.czechairspotters.com/search.php?cn=39-3311%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Type=Text%20AutoFocus%20/;%20OnFocus=confirmOPENBUGBOUNTY%20//%3E%3CSvg%3Etype=m8 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.12.2017 Vulnerability type:| XSS...

Carel PlantVisor 2.4.4 - Directory Traversal Vulnerability

Exploit for windows platform in category web applications Application: Carel PlantVisor http://www.carel.com/carelcom/web/eng/catalogo/prodottodett.jsp?idprodotto=310 Versions: = 2.4.4 Platforms: Windows Bug: directory traversal Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail...

BlueBorne: Critical Bluetooth Attack Puts Billions of Devices at Risk of Hacking

If you are using a Bluetooth enabled device, be it a smartphone, laptop, smart TV or any other IoT device, you are at risk of malware attacks that can carry out remotely to take over your device even without requiring any interaction from your side. Security researchers have just discovered total...

August 17, 2017 – Morning Cyber Coffee Headlines – “Davy Crockett” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! August 17, 2017 - Headlines Students offer hope for narrowing of skills gap in...

17-years-old kid hacks US air force for the good

By Uzair Amir In April 2017, it was reported that the US Department of Defence This is a post from HackRead.com Read the original post: 17-years-old kid hacks US air force for the good...

Many Factors Conspire in ICS/SCADA Attacks

Critical infrastructure operators can’t be blamed for a perpetual case of whiplash. They are mired between hackers targeting internet-facing and air-gapped systems with equal precision, and vendors and management unwilling to properly tackle security for fear of downtime and incompatibility. “The...

Google Patches 10 Critical Bugs in August Android Security Bulletin

Google patched 10 critical remote code execution bugs in its August Android Security Bulletin issued Monday. It warned the most severe RCE vulnerabilities could enable a remote attacker, using a specially crafted file, to execute arbitrary code within the context of a privileged process. The...

airfrance.co.uk XSS vulnerability

Vulnerable URL: https://www.airfrance.co.uk/cgi-bin/AF/GB/en/local/process/standard/rebooking/ValidateSearchPnrRbkAction.do?recordLocator=xxx%22oncut%3D%22alert/XSSPOSED/=yyy Details: Description| Value ---|--- Patched:| Yes, at 08.09.2017 Latest check for patch:| 08.09.2017 06:59 GMT Vulnerabili...