Canon LBP6030w Access Control Vulnerability

The Canon LBP6030w is a color laser printer device from Canon Japan. A security vulnerability exists in the web interface of the Canon LBP6030w. The vulnerability can be exploited by an attacker to bypass System Manager Mode and gain full access to the device without a PIN...

Canon LBP7110Cw Access Control Vulnerability

The Canon LBP7110Cw is a color laser printer device from Canon Japan. A security vulnerability exists in the web interface in the Canon LBP7110Cw. The vulnerability can be exploited by an attacker to bypass the administrative mode and gain full access to the device without a PIN...

Canon MF210/MF220 Series Printers Access Bypass Vulnerability (Apr 2018)

Canon MF210/MF220 Series Printers are prone to an access bypass vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program ...

CVE-2018-11711

A remote attacker can bypass the System Manager Mode on the Canon MF210 and MF220 web interface without knowing the PIN for /login.html via vectors involving /portaltop.html to get full access to the device. NOTE: the vendor reportedly responded that this issue occurs when a customer keeps the...

CVE-2018-11711

CVE-2018-11711 describes a remote bypass of System Manager Mode on Canon MF210/MF220 web interfaces. An unauthenticated attacker can access without a PIN by leveraging vectors involving /portal_top.html (and related /login.html) to obtain full device access. Exploitation is demonstrated in public...

foilChat Sign Up Email PIN Confirmation Bypass

foilChat sign up email PIN confirmation bypass ============================================== https://sintonen.fi/advisories/foilchat-signup-email-pin-confirmation-bypass.txt Overview -------- foilChat https://www.foilchat.com/ allows anyone to register with any email address due to a...

SimpliSafe Original Information Disclosure Vulnerability (CNVD-2018-10490)

SimpliSafe Original is a home security management system. The system includes video surveillance and intrusion alarms, among other things. A security vulnerability exists in SimpliSafe Original that stems from a failure to encrypt transmissions. An attacker in close physical proximity could explo...

Code injection

SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN...

CVE-2018-11402

SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN...

CVE-2018-11402

Summary : CVE-2018-11402 pertains to SimpliSafe Original, where keypad transmissions were unencrypted, enabling a physically proximate attacker to discover the PIN. The connected CNVD entry explicitly notes that the vulnerability stems from a lack of encryption, allowing local access to the PIN. ...

CVE-2018-11402

SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN...

CVE-2018-11402: Cleartext Transmission of Sensitive Information

SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN...

PT-2018-10547

Name of the Vulnerable Software and Affected Versions SimpliSafe Original affected versions not specified Description The issue allows physically proximate attackers to discover the PIN due to unencrypted keypad transmissions. Recommendations At the moment, there is no information about a newer...

The vulnerability of the qcril_uim_clear_encrypted_pin function in Qualcomm’s Android operating system allows a hacker to trigger a buffer overflow.

The vulnerability of the qcriluimclearencryptedpin function in Qualcomm’s Android operating system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to trigger a buffer overflow...

Detecting Cloned Cards at the ATM, Register

Much of the fraud involving counterfeit credit, ATM debit and retail gift cards relies on the ability of thieves to use cheap, widely available hardware to encode stolen data onto any card's magnetic stripe. But new research suggests retailers and ATM operators could reliably detect counterfeit...

Heatmiser WiFi thermostat vulnerabilities

Update – if your heating is misbehaving you need to disable port forwarding to port 80 and port 8068. This should be simply following the reverse of whatever you did to set port forwarding up. Alternatively, you could disable WiFi entirely by putting invalid SSID and password in – I believe the...

Soldering for Reverse Engineering. Swapping out eSIMs with “normal” SIMs

Sometimes, the mobile devices we work on only have cellular data connections. In those instances, we’re usually pretty interested in trying things like this to get credentials for the APN so we can start snooping around on that. We’re also really interested in monitoring what kind of traffic is...

PT-2018-1214

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 Description The issue is caused by missing array index checks on app index in the qcril uim clear encrypted pin function, resulting in accessing addresses outside the bounds of the buffer when the app index...

Nextcloud: Extremly simple way to bypass Nextcloud-Client PIN/Fingerprint lock

I'm sorry for my bad English, I'm German How to reproduce this security bug. Step 1: Take a normal Android smartphone maybe it also works on iOS, but I have not tested it yet. Step 2: Install the official nextcloud-client. Step 3: Set up nextcloud: Open the nextcloud app, tap on "Skip", enter the...

Prilex ATM Malware Modified to Clone Chip-and-Pin Payment Cards

By Uzair Amir It is just another day with just another ATM malware This is a post from HackRead.com Read the original post: Prilex ATM Malware Modified to Clone Chip-and-Pin Payment Cards...