Light Manager - LED Settings - Dynamic Code Loading, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Light Manager - LED Settings published at the 'play' market has multiple vulnerabilities...

LED Keyboard - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application LED Keyboard published at the 'play' market has multiple vulnerabilities...

Wifi RGB LED Controller - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Wifi RGB LED Controller published at the 'play' market has multiple vulnerabilities...

TF: LED Light Classic - External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application TF: LED Light Classic published at the 'play' market has multiple vulnerabilities...

LED Dot Matrix HD Watch Face - Base64 encoded String, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application LED Dot Matrix HD Watch Face published at the 'play' market has multiple vulnerabilities...

yoohun-led.com XSS vulnerability

Vulnerable URL: http://www.yoohun-led.com/Admin/Error.aspx?Tip= Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 22:00 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 20409714 Google Pagerank| 2 VIP website...

IOT security: LED lights there are multiple security vulnerabilities-vulnerability warning-the black bar safety net

Recently, there are foreign security experts found Zengge company WIFI LED lamp in the presence of a plurality of security vulnerabilities. Shenzhen levy Aurora Mega science and technologyZENGGE is a set of LED Controller product development, manufacturing, sales and engineering design,...

[CVE-2015-4624] Predictable CSRF tokens in WiFi Pineapple firmware <= 2.3.0

Overview =============== WiFi Pineapples are a penetration testing tool used in offensive wireless activities. These devices run on a modified OpenWRT based on netBSD operating system. They include a web-based management interface. It has been discovered they have predictable anti-CSRF tokens bas...

DEBIAN-CVE-2014-3183

Heap-based buffer overflow in the logidjllrawrequest function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows physically proximate attackers to cause a denial of service system crash or possibly execute arbitrary code via a crafted device that specifies a large report si...

CVE-2014-3183

Heap-based buffer overflow in the logidjllrawrequest function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows physically proximate attackers to cause a denial of service system crash or possibly execute arbitrary code via a crafted device that specifies a large report si...

Heap overflow

Heap-based buffer overflow in the logidjllrawrequest function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows physically proximate attackers to cause a denial of service system crash or possibly execute arbitrary code via a crafted device that specifies a large report si...

CVE-2014-3183

Heap-based buffer overflow in the logidjllrawrequest function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows physically proximate attackers to cause a denial of service system crash or possibly execute arbitrary code via a crafted device that specifies a large report si...

CVE-2014-3183

Heap-based buffer overflow in the logidjllrawrequest function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows physically proximate attackers to cause a denial of service system crash or possibly execute arbitrary code via a crafted device that specifies a large report si...

CVE-2014-3183

Heap-based buffer overflow in the logidjllrawrequest function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows physically proximate attackers to cause a denial of service system crash or possibly execute arbitrary code via a crafted device that specifies a large report si...

CVE-2014-5644

The Brightest LED Flashlight aka com.intellectualflame.ledflashlight.washer application 1.2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5644

The CVE-2014-5644 entry concerns The Brightest LED Flashlight (com.intellectualflame.ledflashlight.washer) Android app v1.2.4. The connected NVD/NVD-derived records state that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle scenario where an attacker coul...

PT-2014-6629

Name of the Vulnerable Software and Affected Versions The Brightest LED Flashlight aka com.intellectualflame.ledflashlight.washer version 1.2.4 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the...

CVE-2014-5644: Undefined Security Weakness

The Brightest LED Flashlight aka com.intellectualflame.ledflashlight.washer application 1.2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-5123 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.16.2 Description: The issue is related to a heap-based buffer overflow in the logi dj ll raw request function. This function is located in the drivers/hid/hid-logitech-dj.c file of the Linux kernel. The overfl...

Comtrend CT 5361T Password Disclosure

Author: TUNISIAN CYBER + Exploit Title: Comtrend CT 5361T Password Disclosure Vulnerability + Date: 07-04-2014 + Category: WebApp + Tested on: Windows 7 Pro + Vendor: http://www.comtrend.com/ + Product:...