Chaos in a cup: When ransomware creeps into your smart coffee maker

When the fledgling concept of the Internet of Things IoT was beginning to excite the world almost a decade ago, perhaps no coffee lover at that time wouldve imagined including the coffee machine in the roster of internet-connected devices—even in jest. True, the simple, utilitarian coffee machine...

Cisco Smart Install (SMI) Protocol Detection (TCP)

TCP based detection of services supporting the Cisco Smart Install SMI protocol. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2020-0377 Updated firefox packages fix security vulnerabilities

Mozilla developer Jason Kratzer reported memory safety bugs present in Firefox ESR 78.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code CVE-2020-15673. Firefox sometimes ran the onload...

Updated firefox packages fix security vulnerabilities

Mozilla developer Jason Kratzer reported memory safety bugs present in Firefox ESR 78.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code CVE-2020-15673. Firefox sometimes ran the onload...

Security Advisory - Out-of-Bounds Read Vulnerability in Some Huawei Smart Phone

There is an out-of-bounds read vulnerability in XFRM module of some Huawei smart phone. An authenticated, local attacker may perform a specific operation to exploit this vulnerability. Due to insufficient validation of the parameters, which may be exploited to cause information leak. Vulnerabilit...

Security Advisory - Use-after-free Vulnerability in Some Huawei Smart Phone

There is a use-after-free UAF vulnerability in some Huawei smart phone. An authenticated, local attacker may perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege and make information leak. Vulnerability ID:...

smart.campus.ciencias.ulisboa.pt Improper Access Control vulnerability OBB-1372131

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

White hat hacker infects smart coffee machine with ransowmare

By Waqas Avast security researcher reverse-engineered an IoT coffee machine to upload ransomware and mine Monero coin. Smart appliances have always remained a risky option for consumers, specifically when it comes to coffee machines. Back in 2015, Pen Test Partners researchers discovered security...

smart-lift.gr Cross Site Scripting vulnerability OBB-1367920

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

ismartgate PRO Cross-Site Request Forgery Vulnerability

iSmartGate is a smart garage door opener system. The ismartgate PRO suffers from a cross-site request forgery vulnerability that allows a remote attacker to exploit the vulnerability to construct a malicious URI, bait a request, and can perform a malicious operation in the context of the target...

smart-shirts.com.vn Cross Site Scripting vulnerability OBB-1364338

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

VITToken Number Error Vulnerability

VITToken is an Ether-based digital currency. An input validation error vulnerability exists in the 'mintToken' function in VITToken's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...

Ubiou Number Error Vulnerability

Ubiou is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in Ubiou's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

smart-trucking.com Improper Access Control vulnerability OBB-1362941

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

smart-lift.gr Cross Site Scripting vulnerability OBB-1360825

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SLCAdvancedToken Digital Error Vulnerability

SLCAdvancedToken is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of SLCAdvancedToken. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

South Park Token Token Digital Error Vulnerability

South Park Token Token SPTKN is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of SPTKN. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

ecogreenhouse Digital Error Vulnerability

ecogreenhouse is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in ecogreenhouse's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

SDR22 Digital Error Vulnerability

SDR22 is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of SDR22. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

HeliumNetwork Number Error Vulnerability

HeliumNetwork is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in HeliumNetwork's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...