CVE-2017-6168

On BIG-IP versions 11.6.0-11.6.2 fixed in 11.6.2 HF1, 12.0.0-12.1.2 HF1 fixed in 12.1.2 HF2, or 13.0.0-13.0.0 HF2 fixed in 13.0.0 HF3 a virtual server configured with a Client SSL profile may be vulnerable to an Adaptive Chosen Ciphertext attack AKA Bleichenbacher attack against RSA, which when...

CVE-2017-6168

Summary of CVE-2017-6168 (F5 BIG-IP ROBOT Bleichenbacher issue) A vulnerability in BIG-IP virtual servers configured with a Client SSL profile can leak plaintext from RSA-based TLS handshakes and enable a MiTM attack, without compromising the server’s private RSA key. Affected versions and fixes ...

CVE-2017-6168

On BIG-IP versions 11.6.0-11.6.2 fixed in 11.6.2 HF1, 12.0.0-12.1.2 HF1 fixed in 12.1.2 HF2, or 13.0.0-13.0.0 HF2 fixed in 13.0.0 HF3 a virtual server configured with a Client SSL profile may be vulnerable to an Adaptive Chosen Ciphertext attack AKA Bleichenbacher attack against RSA, which when...

Robotic appliance COCOROBO vulnerable to session management

Overview Robotic appliance COCOROBO provided by Sharp Corporation is a robot with cleaning function. Robotic appliance COCOROBO contains a vulnerability in session management CWE-639. Kiyotaka ATSUMI of IoT Technology Laboratory, Cyber Grid Japan, LAC Co., Ltd. reported this vulnerability to IPA...

Debugging Tool Left on OnePlus Phones, Enables Root Access

UPDATE Chinese phone maker OnePlus is accused of leaving a debugging app on its phones capable of giving adversaries root access to the devices. The application in question is called EngineerMode and is made by Qualcomm. An anonymous researcher who goes by the handle Elliot Alderson, a character ...

Legal Robot: Exposes a series of other private credentials

Hi, I found a Javascript file where have many private credentials. JS File https://app.legalrobot.com/meteorruntimeconfig.js Code meteorruntimeconfig = "meteorRelease":"[email protected]","meteorEnv":"NODEENV":"production","TESTMETADATA":"","PUBLICSETTINGS":"analyticsSettings":"Google...

Malicious Module

pandora-doomsday and test-module-a are modules which can infect other modules. During installation, the module runs a postinstall script that adds the package's author mr-robot as an owner to every other package owned by the user that ran the npm install method...

Legal Robot: Non-HTTPS link on blog

Hi, @legalrobot I found another venturebeat.com URL without HTTPS in https://www.legalrobot-uat.com/press/ I hope you fix this Screenshot attached bellow Cheers, Ph0b0s...

Legal Robot: XSS on app.legalrobot.com

Go to app.legalrobot.com 2. Open the browser's javascript console 3. Type alert/xss!/ and press enter 4. Profit!...

Legal Robot: Two accounts can be made with same password

A really nice bug to look into i found this while i was making my own account as i was testing for some serious bug i decided to just look into that how Legal Robot behaves when two account are made with the same password. Hacker Scenario: Person1 makes a account with a password called password n...

Legal Robot: cross site web socket hijacking

In the below web-socket request successful 101 protocol handshake is working with the origin:https://app.legalrobot.com, but if you place the malicious origin in the place of https://thisdata.com which is http://evil.com or any page containing the malware, the web socket server is still giving 10...

Legal Robot: Allowance of Meta/Null characters

Dear sir, I am very happy to report a vulnerability to legalrobot. Recently, the report 260468 is disclosed publicly and that report describes about the restriction lengths of profile fields "first name and last name". Now, i am reporting an another vulnerability regarding those profile fields...

robot-ch.org XSS vulnerability

Vulnerable URL: http://www.robot-ch.org/index.php?pid=1902〈=fr"fr Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12062596 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...

Legal Robot: Clickjacking in Legalrobot app

Dear Team, POC Please find attached screenshots Steps to reproduce: create index.html file with following content: Open index.html in browser Actual result: Legalrobot email verification page is viewed in iframe. Remediation: Frame busting technique is the better framing protection technique...

Legal Robot: Failed OutLink on Terms of Service

Hi team .. i found Failed OutLink on Terms of Service on https://www.legalrobot-uat.com/faq/ when i open it i read some your service it show me page 404: Page Not Found with this Link .. https://www.legalrobot-uat.com/faq/"/terms" please check really Link On your website...

Legal Robot: Venturebeat.com URL should be HTTPS

This is just for the awareness to use HTTPS everywhere, even for outgoing links - where it's possible. Navigate to: https://www.legalrobot-uat.com/ Example page In the lower part where you find the observer.com Link: observer redirect to HTTPS after click, but cookie is sent on the network before...

Legal Robot: Add arbitrary value in reset password cookie

I recently discovered that we can add arbitery value in reset pass token and compromise the life time unlimitedly .. After opening a reset password link I got these cookies ....for token expires timeout . "domain": ".app.legalrobot.com", "expirationDate": 1504618468.82726, "hostOnly": false,...

Legal Robot: Logic issue in email change process

A security researcher discovered that during the email change process, the new account was not properly validated before making it available for login. As a result of this report, Legal Robot checks that both the current address confirms the change and the new address is verified before proceedin...

Legal Robot: Logic issue in email change process

Same issue as 266017, however due to a clerical error, report 266017 was processed first, awarded a bounty, and closed as Resolved. It is therefore only fair to award the same bounty to @gujjuboy10x00 and close this report as Resolved. @gujjuboy10x00, we apologize for the error and have awarded a...

Legal Robot: No alert in verify email address with wrong input

Hello team @legalrobot, In your verify email address sector, I got something different. in that sector if I click on "Resend verification email" option and see the request. There is a parameter named email. So when I input something in that parameter it's show me done on output. I have show all i...