7339 matches found
SUSE-SU-2017:3380-1 Security update for Salt
This update for salt fixes one security issue and bugs. The following security issues have been fixed: - CVE-2017-14695: A directory traversal vulnerability in minion id validation allowed remote minions with incorrect credentials to authenticate to a master via a crafted minion ID. bsc1062462 -...
asia-home.com XSS vulnerability
Open Bug Bounty ID: OBB-455070 Description| Value ---|--- Affected Website:| asia-home.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...
UBUNTU-CVE-2017-17518
DISPUTED swt/motif/browser.c in Whitedune aka whitedune 0.30.10 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: This issue is being disputed as n...
Huawei HG532e Home Gateway Command Injection
Binary data huaweicmdexec.nbin...
CentOS Update for postgresql CESA-2017:3402 centos7
Check the version of postgresql SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882819";...
Apple Fixes Flaw Impacting HomeKit Devices
Apple said it has fixed an undisclosed vulnerability in its HomeKit framework that could have allowed unauthorized remote control of HomeKit devices such as smart locks and connected garage door openers. The flaw was first reported by the publication 9to5Mac on Thursday. According to the...
The vulnerability in the web interface of the Cisco Prime Home system allows a perpetrator to bypass the authentication process and perform arbitrary actions with administrator privileges.
The vulnerability in the Cisco Prime Home system’s web interface exists due to deficiencies in the authentication process related to role-based access control RBAC errors. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and perform arbitrary actions wit...
youngfamilyfuneralhome.com XSS vulnerability
Open Bug Bounty ID: OBB-446643 Description| Value ---|--- Affected Website:| youngfamilyfuneralhome.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...
Code injection
On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or loginUsername field to goform/login causes the router to reboot...
A week in security (November 13 – November 19)
Last week, we gave you some tips for the inevitable online chaos that is Cyber Monday, explained how "trusted" root certificates can sometimes be anything but, and explored the strange world of catphishing. We also pulled apart some malware found on Google Play and laid out the specifics of the...
dixonhomes.com.au XSS vulnerability
Open Bug Bounty ID: OBB-418483 Description| Value ---|--- Affected Website:| dixonhomes.com.au Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
CVE-2017-16867
The CVE-2017-16867 entry describes Amazon Key’s Cloud Cam mishandling 802.11 deauthentication frames during delivery, allowing a camera to be frozen and an interior entry under two scenarios. Affected: Cloud Cam devices used with Amazon Key up to 2017-11-16. Root cause: mishandling of deauth fram...
Bluetooth Hack Affects 20 Million Amazon Echo and Google Home Devices
Remember BlueBorne? A series of recently disclosed critical Bluetooth flaws that affect billions of Android, iOS, Windows and Linux devices have now been discovered in millions of AI-based voice-activated personal assistants, including Google Home and Amazon Echo. As estimated during the discover...
Amazon Echo and Google Home Devices Vulnerable to BlueBorne Attack
By Waqas In September 2017, the IT security researchers at Armis found eight This is a post from HackRead.com Read the original post: Amazon Echo and Google Home Devices Vulnerable to BlueBorne Attack...
The vulnerability of the `glob` function in the `glob.c` library, which handles system calls and core system functions of `glibc`, allows attackers to cause an unexpected termination of the application.
The vulnerability of the glob function in the glob.c library, which handles system calls and core system functions, arises due to buffer overflows in dynamic memory during the processing of home directories. Exploiting this vulnerability can allow a remote attacker to cause an application to...
Home Assistant Cross-Site Scripting Vulnerability
Home Assistant is an open source platform for automated management of home network devices. A cross-site scripting vulnerability exists in versions of Home Assistant prior to 0.57. A remote attacker can exploit this vulnerability to inject JavaScript code via specially crafted Markdown text...
CVE-2017-16782
In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markdown text, aka XSS...
CVE-2017-16782
In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markdown text, aka XSS...
CVE-2017-16782
CVE-2017-16782 affects Home Assistant prior to 0.57. It is a cross-site scripting (XSS) vulnerability in the persistent notification rendering, where crafted Markdown text can inject JavaScript. The root cause is improper sanitization in Markdown rendering for notifications, enabling arbitrary sc...
