7344 matches found
CVE-2019-19688
The CVE-2019-19688 entry concerns Trend Micro HouseCall for Home Networks (versions below 5.3.0.1063). Connected sources confirm a local privilege escalation vulnerability in which an attacker can place a malicious DLL into the application directory to elevate privileges. Affected component: the ...
Alexa, Google Home Eavesdropping Hack Not Yet Fixed
Months after researchers disclosed a new way to exploit Alexa and Google Home smart speakers to spy on users, those same researchers now warn that Amazon and Google have yet to create effective ways to prevent the eavesdropping hack. The researchers who in October disclosed the “Smart Spies” hack...
Why Ring Doorbells Perfectly Exemplify the IoT Security Crisis
A new wave of reports about the home surveillance cameras getting hijacked by creeps is painfully familiar...
Inim Electronics Smartliving SmartLAN 6.x - Hard-coded Credentials Vulnerability
Exploit for hardware platform in category web applications Exploit Title: Inim Electronics Smartliving SmartLAN 6.x - Hard-coded Credentials Exploit Author: LiquidWorm Product web page: https://www.inim.biz Link:...
Amazon's Blink Smart Security Cameras Open to Hijack
Multiple high-severity vulnerabilities have been discovered in Amazon-owned Blink XT2 security camera systems, which if exploited could give attackers complete control over them. The internet of things IoT cameras not to be confused with the Blink open-source browser engine, consist of a wireless...
Command Injection
Overview chrome-launcher is a library to launch Google Chrome with ease from node. Affected versions of this package are vulnerable to Command Injection. By controlling the $HOME environment variable in Linux operating systems, an attacker can execute arbitrary code. PoC: var maliciouscode = '&...
You’re In Safe Hands with Trend Micro Home Network Security
A three-part series on using Home Network Security to protect your home Your home should be a haven that protects you. In the cyber age, however, your router, computers, and TVs, your game consoles and smart devices, are continuously connected to the internet and run the risk of being...
A week in security (November 25 – December 1)
Last week on Malwarebytes Labs, we discussed why the notion of "data as property" may potentially hurt more than help, homed in on sextortion scammers getting more creative, and explored the possible security risks Americans might face if the US changed to universal healthcare coverage. Other...
Smart TVs: The Cyberthreat Lurking in Your Living Room, Feds Warn
Black Friday and Cyber Monday sales of smart TVs are likely prodigious this Thanksgiving weekend – but consumers need to be aware of the hole they can punch in home cyber-defenses. That’s the word from the FBI, which warned that smart TVs, which hook up to the internet to allow users to access ap...
CVE-2019-5268
Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories...
CVE-2019-5268
CVE-2019-5268 affects certain Huawei home routers due to improper input validation (input parameter not correctly verified). An attacker can send specially crafted packets to obtain files from the device and upload files to some directories, impacting confidentiality and integrity. The issue is d...
CVE-2019-5269
CVE-2019-5269 affects Huawei home routers. The issue stems from improper authorization of certain programs, allowing an attacker to upload and execute malicious files and escalate privileges. Based on the provided documents, the vulnerability enables local access impact with high confidentiality,...
CVE-2012-5644
libuser has information disclosure when moving user's home directory...
CVE-2012-5644
libuser has information disclosure when moving user's home directory...
DEBIAN-CVE-2012-5644
libuser has information disclosure when moving user's home directory...
CVE-2012-5644
libuser has information disclosure when moving user's home directory...
UBUNTU-CVE-2012-5644
libuser has information disclosure when moving user's home directory...
CVE-2012-5644
libuser has information disclosure when moving user's home directory...
CVE-2012-5644
CVE-2012-5644 : The libuser component has an information disclosure vulnerability when moving a user’s home directory. The issue is confirmed across multiple feeds (NVD entry and downstream advisories/OpenVAS/Nessus references) and is described as enabling unauthorized access to confidential data...
