GHSA-886V-MM6P-4M66 High severity vulnerability that affects gun

Urgent Upgrade The static file server module included with GUN had a serious vulnerability: - Using curl --path-as-is allowed reads on any parent directory or files. This did not work via the browser or via curl without as-is option. Fixed This has been fixed since version 0.2019.416 and higher...

@arve.knudsen/hapi-cache-plugin (>=0.0.1, <=0.0.4), @ezraobiwale/vue-gun (>=0.1.0, <=0.6.2) +46 more potentially affected by unknown CVE via gun (>=0.1.0, <=0.2019.413)

gun NPM version =0.1.0, =0.0.1, =0.1.0, =1.0.0-alpha.1, =0.0.2, =0.2.1, =0.1.0, =0.0.9, =0.0.13, =1.1.0-alpha5, =1.0.0, =1.0.1, =1.0.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-886V-MM6P-4M66...

PT-2019-20025

Name of the Vulnerable Software and Affected Versions GUN versions prior to 0.2019.416 Description A serious issue was found in the static file server module included with GUN, where using curl --path-as-is allowed reads on any parent directory or files. This issue did not affect requests made vi...

Artificial Intelligence May Not 'Hallucinate' After All

What makes an algorithm mistake a helicopter for a gun? Researchers think the answer has to do more with man than machine...

In the Face of Danger, We’re Turning to Surveillance

From the Rose Bowl to upstate New York, people are turning to surveillance systems in the face America’s inability to meaningfully address gun violence...

The US Is the Only Country Where There Are More Guns Than People

The US has the worst rate of gun violence among all developed countries, and still we fail to regulate...

Information Disclosure Vulnerability in Xiongmai Gun Machine XM-JPE13-2R 960P and Xiongmai XM-JPR13-R(OL)

Xiongmai gun camera XM-JPE13-2R 960P is a HD night vision wireless smart surveillance camera. Xiongmai XM-JPR13-ROL is a 960P fisheye panoramic smart PTZ surveillance camera. Xiongmai Gun Camera XM-JPE13-2R 960P and Xiongmai XM-JPR13-ROL have information disclosure vulnerability. An attacker can...

DIY Gun Activist Cody Wilson Accused of Child Sexual Assault

A Texas court issued a warrant for the Defense Distributed founder's arrest on Wednesday...

Vaultek Gun Safe VT20i Information Disclosure Vulnerability (CNVD-2018-00316)

The Vaultek Gun Safe VT20i aka BlueSteal is a fingerprint-enabled gun safe product. A security vulnerability exists in the Vaultek Gun Safe VT20i that stems from the program's failure to encrypt the session between the Android application and the safe. An attacker could exploit the vulnerability ...

Vaultek Gun Safe VT20i Information Disclosure Vulnerability

The Vaultek Gun Safe VT20i aka BlueSteal is a fingerprint-enabled gun safe product. An information disclosure vulnerability exists in the Vaultek Gun Safe VT20i. A remote attacker could exploit this vulnerability to open any safe in this product line...

Code injection

An issue was discovered in the software on Vaultek Gun Safe VT20i products. There is no encryption of the session between the Android application and the safe. The website and marketing materials advertise that this communication channel is encrypted with "Highest Level Bluetooth Encryption" and...

CVE-2017-17436

An issue was discovered in the software on Vaultek Gun Safe VT20i products. There is no encryption of the session between the Android application and the safe. The website and marketing materials advertise that this communication channel is encrypted with "Highest Level Bluetooth Encryption" and...

CVE-2017-17435

An issue was discovered in the software on Vaultek Gun Safe VT20i products, aka BlueSteal. An attacker can remotely unlock any safe in this product line without a valid PIN code. Even though the phone application requires it and there is a field to supply the PIN code in an authorization request,...

CVE-2017-17435

CVE-2017-17435 (Vaultek VT20i / BlueSteal) : A vulnerability in Vaultek Gun Safe VT20i products allows remote unlocking without a valid PIN. An attacker who observes the BLE advertisement can write a BLE characteristic to enable notifications, craft a getAuthor packet that returns a temporary key...

CVE-2017-17436

Technical details about CVE-2017-17436 are not present in the provided connected documents. No specific affected products, versions, root cause, or remediation are disclosed here. Monitor for updates as new information becomes available.

CVE-2017-17435

An issue was discovered in the software on Vaultek Gun Safe VT20i products, aka BlueSteal. An attacker can remotely unlock any safe in this product line without a valid PIN code. Even though the phone application requires it and there is a field to supply the PIN code in an authorization request,...

CVE-2017-17436: Inadequate Encryption Strength

An issue was discovered in the software on Vaultek Gun Safe VT20i products. There is no encryption of the session between the Android application and the safe. The website and marketing materials advertise that this communication channel is encrypted with "Highest Level Bluetooth Encryption" and...

CVE-2017-17435: Improper Authentication

An issue was discovered in the software on Vaultek Gun Safe VT20i products, aka BlueSteal. An attacker can remotely unlock any safe in this product line without a valid PIN code. Even though the phone application requires it and there is a field to supply the PIN code in an authorization request,...

PT-2017-14778

Name of the Vulnerable Software and Affected Versions Vaultek Gun Safe VT20i products Description An issue in the Vaultek Gun Safe VT20i products allows an attacker to remotely unlock any safe without a valid PIN code. The safe does not verify the PIN code supplied in the authorization request,...

CVE-2017-17436

An issue was discovered in the software on Vaultek Gun Safe VT20i products. There is no encryption of the session between the Android application and the safe. The website and marketing materials advertise that this communication channel is encrypted with "Highest Level Bluetooth Encryption" and...