lg.com XSS vulnerability

Vulnerable URL: http://www.lg.com/cz/search.lg?search=%26lt%3Bscrscriptipt%26gt%3BalertOPENBUGBOUNTY%26lt%3B%2Fscrscriptipt%26gt%3B Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Multiple Security Bypass Vulnerabilities in Multiple LG Android Mobile Devices

lg mobile is an android smartphone from LG. Multiple security bypass vulnerabilities exist in multiple LG Android Mobile Devices. An attacker can exploit the vulnerabilities to bypass certain security restrictions and perform unauthorized operations...

lg.com XSS vulnerability

Vulnerable URL: http://www.lg.com/it/search.lg?search=%26lt%3Bscrscriptipt%26gt%3BalertOPENBUGBOUNTY%26lt%3B%2Fscrscriptipt%26gt%3B Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

lg.com XSS vulnerability

Vulnerable URL: http://www.lg.com/fr/search.lg?search=%26lt%3Bscrscriptipt%26gt%3BalertOPENBUGBOUNTY%26lt%3B%2Fscrscriptipt%26gt%3B Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Cross site scripting

Cross-site scripting XSS vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter...

CVE-2014-3926

Cross-site scripting XSS vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter...

CVE-2014-3926

Cross-site scripting XSS vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter...

CVE-2014-3926

CVE-2014-3926 is an XSS vulnerability in lg.cgi used by Cougar LG 1.9 (LG Looking Glass web apps). The issue arises from accepting the addr parameter without proper sanitization, enabling remote attackers to inject arbitrary web script or HTML. Connected documents (e.g., CNVD-2017-03337) describe...

CVE-2014-3926: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter...

Beware! Pre-Installed Android Malware Found On 36 High-end Smartphones

Bought a brand new Android Smartphone? Do not expect it to be a clean slate. At least 36 high-end smartphone models belonging to popular manufacturing companies such as Samsung, LG, Xiaomi, Asus, Nexus, Oppo, and Lenovo, which are being distributed by two unidentified companies have been found...

LG G4 - Touchscreen Driver write_log Kernel ReadWrite

LG G4 - Touchscreen Driver writelog Kernel ReadWrite Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=990 The following function and variations on the same code is used to write to files from kernel code in various touchscreen drivers. This copy is from...

LG G4 - lgdrmserver Binder Service Multiple Race Conditions

LG G4 - lgdrmserver Binder Service Multiple Race Conditions Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=986 The lgdrmserver binder service /system/bin/lgdrmserver implements a handle system to store pointers to objects allocated by the drm implementation...

LG G4 - Touchscreen Driver write_log Kernel Read/Write Exploit

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=990 The following function and variations on the same code is used to write to files from kernel code in various touchscreen drivers. This copy is from...

LG G4 - lgdrmserver Binder Service Multiple Race Conditions Vulnerability

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=986 The lgdrmserver binder service /system/bin/lgdrmserver implements a handle system to store pointers to objects allocated by the drm implementation /system/lib/liblgdrm.so. In...

LG G4 - lgdrmserver Binder Service Multiple Race Conditions

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=986 The lgdrmserver binder service /system/bin/lgdrmserver implements a handle system to store pointers to objects allocated by the drm implementation /system/lib/liblgdrm.so. In several places, these handles are retrieved from a...

LG G4 - Touchscreen Driver write_log Kernel Read/Write

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=990 The following function and variations on the same code is used to write to files from kernel code in various touchscreen drivers. This copy is from RefCodeCustomerImplementation.c - I'm unsure which copy is actually being used ...

LG G4 - lghashstorageserver Directory Traversal

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=987 The lghashstorageserver binder service /system/bin/lghashstorageserver implementation on the LG G4 is vulnerable to path traversal, allowing an app to read and write 0x20 bytes from any file in the context of the...

LG G4 - lghashstorageserver Directory Traversal Vulnerability

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=987 The lghashstorageserver binder service /system/bin/lghashstorageserver implementation on the LG G4 is vulnerable to path traversal, allowing an app to read and write 0x20 bytes...

LG G4 - lghashstorageserver Directory Traversal

LG G4 - lghashstorageserver Directory Traversal Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=987 The lghashstorageserver binder service /system/bin/lghashstorageserver implementation on the LG G4 is vulnerable to path traversal, allowing an app to read and write 0x20 bytes fr...

lgcorp.com XSS vulnerability

Vulnerable URL: http://www.lgcorp.com/utility/searchEng.dev?kwd= Details: Description| Value ---|--- Patched:| Yes, at 17.02.2017 Latest check for patch:| 17.02.2017 08:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 764295 VIP website status:| No Check...