1313 matches found
Extract Digital Evidences From Images: Imago-Forensics
Imago is a python tool that extract digital evidences from images recursively. This tool is useful throughout a digital forensic investigation. If you need to extract digital evidences and you have a lot of images, through this tool you will be able to compare them easily. Imago allows to extract...
Connected Wristwatch Allows Hackers to Stalk, Spy On Children
Wristwatches with tracking capabilities have gained popularity over the years as an easy way for parents to keep tabs on their children. But a newly-discovered hole in a popular Misafes watch opens up these tracking capabilities to bad actors, which could ultimately threaten the physical safety o...
Consumer Advice: Kids GPS tracker watch security
Parents are advised to rethink using GPS tracking watches for their children as a result of serious security concerns. Tracker watches can be worn by children and report their position to their parents via a mobile app. They are designed to increase child safety: you always know where your child...
Tracking and snooping on a million kids
How I found vulnerabilities that could jeopardise child safety. How it started A friend recently showed me a tracker watch that he’d purchased for his young son for less than £10. It offered useful functionality such as two-way calling using a SIM and cellular connection. The accompanying app...
gpsd Open Source Project
1. EXECUTIVE SUMMARY CVSS v3 8.3 Vendor: gpsd Open Source Project Equipment: gpsd, microjson Vulnerability: Stack-based Buffer Overflow 2. REPOSTED INFORMATION This advisory was originally posted to the HSIN ICS-CERT library on November 6, 2018, and is being released to the NCCIC/ICS-CERT...
DEBIAN-CVE-2018-16554
The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAGGPSALT handling...
UBUNTU-CVE-2018-16554
The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAGGPSALT handling...
PT-2018-13629
Name of the Vulnerable Software and Affected Versions jhead version 3.00 Description The issue is related to the ProcessGpsInfo function in the gpsinfo.c file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file. This is due ...
Automotive theft affects shipping security
Cars and ships – there’s not that much in common with two areas that we carry out a lot of research in to. One uses CAN for safety critical controls, the other uses serial and +/- 10V. Yet, security of the two sectors is linked through vehicle theft and fraud: Most modern vehicles have telematic...
PT-2020-7746
Name of the Vulnerable Software and Affected Versions Aircrack-ng versions prior to 1.2 RC 1 Description The issue is a stack-based buffer overflow in the gps tracker function, located in the airodump-ng.c file. This allows local users to potentially execute arbitrary code or gain privileges...
Federal Aviation Administration GPS Testing
Overview The US Federal Aviation Administration FAA has issued two flight advisories identifying planned Global Positioning System GPS temporary outages and the affected areas, due Department of Defense testing. During testing, the GPS signal may be unreliable or unavailable. ICS-CERT is issuing...
Triout Malware Carries Out Extensive, Targeted Android Surveillance
A mobile spyware for Android was disclosed today, with extensive, advanced surveillance capabilities that suggest that a sophisticated actor is pulling the strings. Using a recently discovered malware dubbed Triout, bad actors are tapping into the proliferating footprint of Android-based...
Black Hat Video Exclusive: Mobile APTs Redefining Phishing Attacks
LAS VEGAS: Mike Murray, vice president of security intelligence at Lookout, talks with Threatpost’s Tom Spring to discuss the latest trends in mobile advanced persistence threats APTs. He said mobile is redefining traditional inbox phishing. On smartphones, phishing includes dangerous links insid...
Pentagon Bans Soldiers from Using GPS Apps and Devices
After fitness apps have been shown to reveal the locations of U.S. military personnel in hot zones around the world, the Pentagon is mandating that armed service members must switch off any device using GPS functionality if they are deployed in “operational areas.” “Effective immediately, Defense...
gps-store.be XSS vulnerability
Open Bug Bounty ID: OBB-659488 Description| Value ---|--- Affected Website:| gps-store.be Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
GangWang GPS Navigation Attack Leads Unsuspecting Drivers Astray
A proof-of-concept attack that uses realistic fake turn-by-turn navigation directions for in-car GPS systems has managed to fool drivers into following them a full 95 percent of the time in testing. Mobile navigation services are used by billions of users around the globe today. While GPS spoofin...
Road navigation systems can be spoofed using $223 equipment
By Waqas Researchers from a number of renowned institutions including Virginia Tech, the University of Electronic Science and Technology of China and Microsoft Research have concluded that it is possible to spoof GPS signals and send people in the wrong direction. The ironic part is that such an...
Authentication flaw
getgps data in iTrack Easy can be modified without authentication by setting the data using the parametercmd:setothergps. This vulnerability can be exploited to alter the GPS data of a lost device...
