CVE-2017-17556

A debug tool in Synaptics TouchPad drivers allows local users with administrative access to obtain sensitive information about keyboard scan codes by modifying registry keys...

CVE-2017-17556

CVE-2017-17556 affects Synaptics TouchPad drivers (notably the SynTP.sys driver) where a debug tool can be abused by a user with administrative privileges to modify registry keys and capture keyboard scan code information. The root cause is an unprotected debug mode in the Synaptics keyboard driv...

Massive Breach Exposes Keyboard App that Collects Personal Data On Its 31 Million Users

In the digital age, one of the most popular sayings is—if you're not paying, then you're not the customer, you're the product. While downloading apps on their smartphones, most users may not realize how much data they collect on you. Believe me; it’s way more than you can imagine. Nowadays, many...

CVE-2017-2721

Some Huawei smart phones with software...

Security feature bypass

Some Huawei smart phones with software...

CVE-2017-2721

CVE-2017-2721 describes a factory reset protection (FRP) bypass vulnerability affecting Huawei smartphones (devices listed in the NVD/CVE entry). The root cause is an FRP bypass during FRP configuration via the Swype Keyboard, allowing an attacker to bypass FRP and perform operations to update th...

Threat Round Up for Nov 10 - Nov 17

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between November 10 and November 17. As with previous round-ups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavior...

Privacy Clouds Form Over Mantistek Gaming Keyboard

Allegations a keylogger is embedded in the software of a popular gaming keyboard are dogging PC peripheral maker Mantistek. The Chinese manufacturer is facing a blizzard of accusations that its popular GK2 Mechanical Gaming Keyboard has spyware installed and is sending keystroke data back to the...

Chinese Keyboard Developer Spies on User Through Built-in Keylogger

By Waqas A Chinese mechanical keyboard manufacturer MantisTek has been caught in the This is a post from HackRead.com Read the original post: Chinese Keyboard Developer Spies on User Through Built-in Keylogger...

CVE-2017-1000137

Mahara 1.10 before 1.10.0 and 15.04 before 15.04.0 are vulnerable to possible cross site scripting when adding a text block to a page via the keyboard rather than drag and drop...

CVE-2017-1000137

Mahara 1.10 before 1.10.0 and 15.04 before 15.04.0 are vulnerable to possible cross site scripting when adding a text block to a page via the keyboard rather than drag and drop...

Cross site scripting

Mahara 1.10 before 1.10.0 and 15.04 before 15.04.0 are vulnerable to possible cross site scripting when adding a text block to a page via the keyboard rather than drag and drop...

CVE-2017-1000137

Mahara is affected: versions 1.10 before 1.10.0 and 15.04 before 15.04.0 are vulnerable to cross-site scripting when a text block is added to a page via the keyboard (not drag-and-drop). Root cause reported as an XSS issue in these build paths. Exploit details, mitigations, and fixes are not prov...

P4wnP1: A Open Source USB Attack Platform

PenTestIT RSS Feed As of now, hardware security projects seem to be attracting me more than software based projects. Evidently, I wrote a few posts covering them - List of Portable Hardware Devices for Penetration Testing, List of Raspberry Pi DIY Projects for Anonymity, etc. among other awesome...

CVE-2017-7140

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Keyboard Suggestions" component. It allows attackers to obtain sensitive information by reading keyboard autocorrect suggestions...

CVE-2017-7140

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Keyboard Suggestions" component. It allows attackers to obtain sensitive information by reading keyboard autocorrect suggestions...

Information disclosure

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Keyboard Suggestions" component. It allows attackers to obtain sensitive information by reading keyboard autocorrect suggestions...

CVE-2017-7140

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Keyboard Suggestions" component. It allows attackers to obtain sensitive information by reading keyboard autocorrect suggestions...

CVE-2017-7140

The CVE-2017-7140 entry describes an information disclosure in iOS prior to 11 related to the Keyboard Suggestions component. The issue arises from the iOS keyboard caching sensitive information in autocorrect suggestions, allowing an attacker to read sensitive data from suggestions. Apple’s secu...

Apple iOS Keyboard Suggestions Information Disclosure Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices.The Keyboard Suggestions component is one of the keyboard support components. A security vulnerability exists in the Keyboard Suggestions component in Apple iOS versions prior to 11, which stems from the iOS keyboard caching...