CVE-2016-2813

Mozilla Firefox before 46.0 on Android does not properly restrict JavaScript access to orientation and motion data, which allows remote attackers to obtain sensitive information about a device's physical environment, and possibly discover PIN values, via a crafted web site, a similar issue to...

Information disclosure

Mozilla Firefox before 46.0 on Android does not properly restrict JavaScript access to orientation and motion data, which allows remote attackers to obtain sensitive information about a device's physical environment, and possibly discover PIN values, via a crafted web site, a similar issue to...

CVE-2016-2813

Mozilla Firefox before 46.0 on Android does not properly restrict JavaScript access to orientation and motion data, which allows remote attackers to obtain sensitive information about a device's physical environment, and possibly discover PIN values, via a crafted web site, a similar issue to...

Disclosure of user actions through JavaScript with motion and orientation sensors — Mozilla

Security researcher Maryam Mehrnezhad of Newcastle University, UK reported an issue discovered by their research team, which also includes Ehsan Toreini, Siamak F. Shahandashti, and Feng Hao. They found vulnerabilities in Firefox for Android using orientation data and motion sensors on a mobile...

CVE-2016-2354

The Bluetooth functionality in Lemur Vehicle Monitors BlueDriver before 2016-04-07 supports unrestricted pairing without a PIN, which allows remote attackers to send arbitrary CAN commands by leveraging access to a device inside or adjacent to the vehicle, as demonstrated by a CAN command to...

ILASIII图书管理系统 NTBookRetrSet.aspx 参数Pin SQL注入漏洞

0x01漏洞简介 ilasIII数字图书馆系统在NTBookRetrSet.aspx文件处对参数Pin过滤不严格，导致出现SQL注入漏洞。远程攻击者可以结合回显报错的方式，执行SQL指令。 0x02漏洞利用 .../NTBookRetrSet.aspx?Pin=N...

Viber adds End-to-End Encryption and PIN protected Hidden Chats features

In Brief Viber, the popular mobile messaging app announced Tuesday that it has added full end-to-end encryption for video, voice and text message services for its millions of users. Here, the end-to-end encryption means only you and the person you are communicating with can read the content, and...

Bypass of application specific PIN - ownCloud

The ownCloud Android application does support setting a PIN that has to be provided before the application can be opened. An attacker may remove the PIN by clearing the application data via the Android system settings. By doing that the application information would be removed while the...

Mobile App: Bypass of application specific PIN

The ownCloud Android application does support setting a PIN that has to be provided before the application can be opened. An attacker may remove the PIN by clearing the application data via the Android system settings. By doing that the application information would be removed while the...

Bypass of application specific PIN

The ownCloud Android application does support setting a PIN that has to be provided before the application can be opened. An attacker may remove the PIN by clearing the application data via the Android system settings. By doing that the application information would be removed while the...

Quanta LTE Router Code Execution / Backdoor Accounts

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: Multiple vulnerabilities found in Quanta LTE routers backdoor, backdoor accounts, RCE, weak WPS ... Advisory URL: https://pierrekim.github.io/advisories/2016-quanta-0x00.txt Blog URL:...

Strike! Ten Pin Bowling - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Strike! Ten Pin Bowling published at the 'play' market has multiple vulnerabilities...

Pin Lock Screen - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Pin Lock Screen published at the 'play' market has multiple vulnerabilities...

POS Malware Tool "Treasurehunt' Targets Small US-Based Banks, Retailers

As more US companies snuff out point of sale malware by deploying chip-and-PIN bankcard technology, attackers are rushing to exploit existing magnetic strip card systems still vulnerable to malware. A group of hackers that go by the name Bears Inc. are behind the latest barrage of attacks with a...

American Express Notifies of Data Breach

American Express has begun notifying cardholders that their data may have been compromised in a third-party breach. A notification letter filed on March 10 with California’s attorney general indicates that AmEx account numbers, user names and other information including expiration dates may have...

ILASIII图书检索系统 NTBookRetrAuth.aspx 参数Pin SQL注入漏洞

No description provided by source...

PayPal #123 - Security Key Pin Approval & Expire Bypass

Document Title: =============== PayPal 123 - Security Key Pin Approval & Expire Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1697 Video: https://www.youtube.com/watch?v=5O0b88KhJU Release Date: ============= 2016-02-01 Vulnerability Laboratory ID VL-ID:...

PayPal #123 - Security Key Pin Approval & Expire Bypass

Document Title: =============== PayPal 123 - Security Key Pin Approval & Expire Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1697 Video: https://www.youtube.com/watch?v=5O0b88KhJU Release Date: ============= 2016-02-01 Vulnerability Laboratory ID VL-ID:...

FingerTec Fingerprint Reader - Remote Access and Remote Enrolment

FingerTec Fingerprint Reader - Remote Access and Remote Enrolment Exploit Title: Default Root Password and Remote Enrollment on FingerTec Devices Date: 12-01-2016 Exploit Author: Daniel Lawson Contact: http://twitter.com/fang0654 Website: https://digital-panther.com Category: physical access...

FingerTec Default Root Password / Remote Enrollment

Exploit Title: Default Root Password and Remote Enrollment on FingerTec Devices Date: 12-01-2016 Exploit Author: Daniel Lawson Contact: http://twitter.com/fang0654 Website: https://digital-panther.com Category: physical access control 1. Description Almost all FingerTec Access Control devices are...