CVE-2018-15124

The CVE-2018-15124 entry concerns Zipato Zipabox Smart Home Controller, BOARD REV-1, System Version -118. A weak hashing algorithm is identified as the root cause, enabling an unauthenticated attacker to extract cleartext passwords and obtain root access on the device. What is vulnerable: the dev...

CVE-2018-15125

Sensitive Information Disclosure in Zipato Zipabox Smart Home Controller allows remote attacker get sensitive information that expands attack surface...

CVE-2018-15125

CVE-2018-15125 affects the Zipato Zipabox Smart Home Controller. The vulnerability is described as a Sensitive Information Disclosure that enables a remote attacker to obtain sensitive information and expand the attack surface. Public details include a network attack vector with low complexity an...

CVE-2018-15123

The CVE-2018-15123 entry concerns Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118, where insecure configuration storage is identified as the root cause. According to NVD, the vulnerability has a high to critical impact profile with CVSSv3 base score 9.8 (NETWORK, LOW c...

CVE-2018-15123

Insecure configuration storage in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows remote attacker perform new attack vectors and take under control device and smart home...

Black Hat 2018: IoT Security Issues Will Lead to Legal ‘Feeding Frenzy’

LAS VEGAS – The troves of insecure internet of things IoT devices have not yet led to widespread legal implications. But that’s set to change, a well-known attorney warned at Black Hat USA last week. Ijay Palansky, partner at the law firm Armstrong Teasdale, said at the conference last week that...

Black Hat 2018: Voice Authentication is Broken, Researchers Say

LAS VEGAS – We live in a world increasingly dominated by voice-enabled smart digital assistants. More and more we rely on Amazon’s Alexa to tell us if we have any new messages. We ask Google Home smart speakers to remind us of calendar appointments. Some banks even allow users to use their voice ...

CloudMe Sync 1.10.9 - Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits Exploit Title: CloudMe Sync 1.10.9 - Buffer Overflow SEHDEP Bypass Exploit Author: Manoj Ahuje Linkedin: https://www.linkedin.com/in/manojahuje/ Vendor Homepage: https://www.cloudme.com/ Software Link:...

casterlinefuneralhome.com XSS vulnerability

Open Bug Bounty ID: OBB-658451 Description| Value ---|--- Affected Website:| casterlinefuneralhome.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

clinehansonfuneralhome.com XSS vulnerability

Open Bug Bounty ID: OBB-658448 Description| Value ---|--- Affected Website:| clinehansonfuneralhome.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

memphisfuneralhome-mo.com XSS vulnerability

Open Bug Bounty ID: OBB-658446 Description| Value ---|--- Affected Website:| memphisfuneralhome-mo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mcwilliams-funeralhome.com XSS vulnerability

Open Bug Bounty ID: OBB-658383 Description| Value ---|--- Affected Website:| mcwilliams-funeralhome.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

warrensfuneralhome.ca XSS vulnerability

Open Bug Bounty ID: OBB-658321 Description| Value ---|--- Affected Website:| warrensfuneralhome.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

stantonfuneralhome.com XSS vulnerability

Open Bug Bounty ID: OBB-658206 Description| Value ---|--- Affected Website:| stantonfuneralhome.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

normanfuneralhome.net XSS vulnerability

Open Bug Bounty ID: OBB-658170 Description| Value ---|--- Affected Website:| normanfuneralhome.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-14929

Matera Banco 1.0.0 is vulnerable to multiple reflected XSS, as demonstrated by the /contingency/web/index.jsp aka home page url parameter...

CVE-2018-14608

Thomson Reuters UltraTax CS 2017 on Windows has a password protection option; however, the level of protection might be inconsistent with some customers' expectations because the data is directly accessible in cleartext. Specifically, it stores customer data in unique directories...

Bugs in Samsung IoT Hub Leave Smart Home Open To Attack

Researchers found 20 vulnerabilities in Samsung’s SmartThings Hub, allowing attackers to control smart locks, remotely monitor the home via connected cameras and perform other alarming functions. Cisco Talos researchers, who published a technical breakdown of the vulnerabilities on Thursday, said...

Vulnerability Spotlight: Multiple Vulnerabilities in Samsung SmartThings Hub

These vulnerabilities were discovered by Claudio Bozzato of Cisco Talos. Executive Summary Cisco Talos recently discovered several vulnerabilities present within the firmware of the Samsung SmartThings Hub. In accordance with our coordinated disclosure policy, Cisco Talos has worked with Samsung ...

PT-2018-12614 · Thomson Reuters · Thomson Reuters Ultratax Cs

Name of the Vulnerable Software and Affected Versions: Thomson Reuters UltraTax CS version 2017 Description: The software has a password protection option, but the level of protection may not meet some customers' expectations because the data is stored in cleartext. Customer data is stored in...