2378 matches found
CVE-2016-6257
The firmware in Lenovo Ultraslim dongles, as used with Lenovo Liteon SK-8861, Ultraslim Wireless, and Silver Silk keyboards and Liteon ZTM600 and Ultraslim Wireless mice, does not enforce incrementing AES counters, which allows remote attackers to inject encrypted keyboard input into the system b...
Sql injection
The firmware in Lenovo Ultraslim dongles, as used with Lenovo Liteon SK-8861, Ultraslim Wireless, and Silver Silk keyboards and Liteon ZTM600 and Ultraslim Wireless mice, does not enforce incrementing AES counters, which allows remote attackers to inject encrypted keyboard input into the system b...
CVE-2016-6257
The firmware in Lenovo Ultraslim dongles, as used with Lenovo Liteon SK-8861, Ultraslim Wireless, and Silver Silk keyboards and Liteon ZTM600 and Ultraslim Wireless mice, does not enforce incrementing AES counters, which allows remote attackers to inject encrypted keyboard input into the system b...
Use-after-free when using alt key and toplevel menus — Mozilla
Security researcher Abhishek Arya Inferno of the Google Chrome Security Team reported a use-after-free vulnerability when the alt key is used in conjunction with toplevel menu items in Firefox. This results in a potentially exploitable crash when triggered. This vulnerability is mitigated by not...
CHERRY B.UNLIMITED AES JD-0400EU-2/01 Crypto Issues / Replay Attacks
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2016-031 Product: CHERRY B.UNLIMITED AES Manufacturer: Cherry GmbH Affected Versions: JD-0400EU-2/01 Tested Versions: JD-0400EU-2/01 Vulnerability Type: Cryptographic Issues CWE-310 Missing Protection against Replay Attacks Risk...
On KeySniffer, Two Factor Authentication, LastPass, and Tor
Mike Mimoso and Chris Brook discuss the news of the week, including a wireless keyboard vulnerability – KeySniffer, NIST’s statement on 2FA, a LastPass remote compromise bug, and a new Tor paper. Download: ThreatpostNewsWrapJuly292016.mp3 Music by Chris Gonsalves...
CHERRY B.UNLIMITED AES JD-0400EU-2/01 Insufficient Protections
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2016-032 Product: CHERRY B.UNLIMITED AES Manufacturer: Cherry GmbH Affected Versions: JD-0400EU-2/01 Tested Versions: JD-0400EU-2/01 Vulnerability Type: Insufficient Protection of Code Firmware and Data Cryptographic Key Risk Level...
Lenovo Ultraslim Wireless Keyboard Keystroke Injection - Lenovo Support NL
No description provided...
Lenovo Ultraslim Wireless Keyboard Keystroke Injection - lu
Lenovo Security Advisory: LEN-7267 Potential Impact: Potential unwanted data input Severity: Medium Scope of Impact: Industry-Wide Summary Description: A vulnerability was identified where an attacker with specialized equipment who is within close physical proximity to a system with the dongle fo...
Google Keyboard - Exported components, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Google Keyboard published at the 'play' market has multiple vulnerabilities...
The vulnerability of the Windows operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability in the screen keyboard allows for locally increasing the level of privileges...
Wireless Keyloggers Hidden in USB Wall Chargers, FBI Warns
A private industry notification sent by the FBI in late April to its business partners warns of the risks associated with KeySweeper, a tool released in January 2015 by noted hardware hacker and researcher Samy Kamkar. Sixteen months ago, Kamkar released the source code and instructions on how to...
FreeBSD atkbd Module Buffer Overflow Vulnerability
FreeBSD is a set of Unix-like free operating systems in the FreeBSD project run by the Core Team team, and is an important branch of Unix-like development through BSD, 386BSD and 4.4BSD. atkbd is one of the driver modules provided for accessing to an AT84 keyboard or connecting to an AT Enhanced...
FreeBSD -- Buffer overflow in keyboard driver
Problem Description: Incorrect signedness comparison in the ioctl2 handler allows a malicious local user to overwrite a portion of the kernel memory. Impact: A local user may crash the kernel, read a portion of kernel memory and execute arbitrary code in kernel context. The result of executing an...
FreeBSD-SA-16:18.atkbd
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:18.atkbd Security Advisory The FreeBSD Project Topic: Buffer overflow in keyboard driver Category: core Module: atkbd Announced: 2016-05-17 Credits: CTurt an...
Fedora 22 : firefox-46.0.1-1.fc22 (2016-e2acbd739f)
new upstream version 46.0.1 - fixed focus on TWM rhbz1322626 ---- - Fixed wrong keyboard focus rhbz1322626 ---- - New upstream version 46.0 - Fixed aarch64/ppc64le build failures - Fixed missing addons/langpacks Note that Tenable Network Security has extracted the preceding description block...
OpenSSH < 7.0 Multiple Vulnerabilities
Binary data 9309.prm...
Kika Emoji Keyboard - GIF Free - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Kika Emoji Keyboard - GIF Free published at the 'play' market has multiple vulnerabilities...
Hologram 3D keyboard simulator - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Hologram 3D keyboard simulator published at the 'play' market has multiple vulnerabilities...