14045 matches found
Chasing doorbells: Finding IoT vulnerabilities in embedded devices
The goal of this research project was to see if we could find any vulnerabilities and obtain full persistence on an IoT device, while learning about embedded devices in general. This post will take you through our journey to find vulnerabilities in a common, reasonably priced IoT device. For our...
Cisco Small Business Switch Detection (SNMP)
SNMP based detection of Cisco Small Business Switch devices. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-19643
ise smart connect KNX Vaillant 1.2.839 contain a Denial of Service...
CVE-2019-19643
ise smart connect KNX Vaillant 1.2.839 contain a Denial of Service...
Denial of service
ise smart connect KNX Vaillant 1.2.839 contain a Denial of Service...
CVE-2019-19643
ise smart connect KNX Vaillant 1.2.839 contain a Denial of Service...
CVE-2019-19643
CVE-2019-19643 affects ise smart connect KNX Vaillant (version 1.2.839). The vulnerability is a Denial of Service. NVD data lists CVSSv3.1 base score 7.5 (NETWORK, LOW attack complexity, PR:N, UI:N, A:H) and CVSSv2 base score 5.0 (NETWORK, LOW, A:P). Exploitation status is not provided in the sou...
Smart Lock vulnerability can give hackers full access to Wi-Fi network
By Zara Khan The vulnerability exists in the August smart lock Pro + Connect model which hasn't been fixed. This is a post from HackRead.com Read the original post: Smart Lock vulnerability can give hackers full access to Wi-Fi network...
Top Tips For Home Cybersecurity And Privacy In A Coronavirus-Impacted World (Part 1)
Welcome to the new normal. We’re all now living in a post-COVID-19 world characterized by uncertainty, mass home working and remote learning. The lines demarcating normal life have shifted abruptly – perhaps never to return. That’s not the worst that can happen, as we all know, but it does mean w...
Top Tips For Home Cybersecurity And Privacy In A Coronavirus-Impacted World (Part 2)
The past few months have seen radical changes to our work and home life under the Coronavirus threat, upending norms and confining millions of American families within just four walls. In this context, it’s not surprising that more of us are spending an increasing portion of our lives online. But...
Google Fixes Mysterious Audio Recording Blip in Smart Speakers
After Google Home users started receiving mysterious alerts when their fire alarms went off or their plates smashed in their homes, Google acknowledged that it accidentally rolled out a feature causing the smart devices to record sounds without the voice prompt. Reports of the privacy faux pas...
Google ‘accidentally’ enabled smart speakers to listen passive sounds
By Zara Khan Google accidentally enabled home smart speakers to listen to more than just voice commands This is a post from HackRead.com Read the original post: Google accidentally enabled smart speakers to listen passive sounds...
smartenergy.com.br Cross Site Scripting vulnerability OBB-1251948
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Thread Number Error Vulnerability
Thread is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in Thread's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...
Hackers Could Use IoT Botnets to Manipulate Energy Markets
With access to just 50,000 high-wattage smart devices, attackers could make a bundle off of causing minor fluctuations...
HashHeroes Tiles Security Breach
HashHeroes Tiles is an ethereum-based guessing game. A security vulnerability exists in the 'determineWinner' function in the smart contract implementation of HashHeroes Tiles. An attacker could exploit this vulnerability to control the awarding of prizes by being the last user to make a purchase...
Primeo Security Feature Issue Vulnerability
Primeo PEO is an ethereum-based digital currency. A security vulnerability exists in the 'doAirdrop' function in the smart contract implementation of Primeo PEO. An attacker could exploit the vulnerability to issue any number of virtual currencies...
Low-power Bluetooth (BLE) connectivity vulnerability in LED smart bulbs at Foshan Electric Lighting Co.
LED smart light bulb is a new technology light source, which has the advantages of beauty, fashion, energy saving, environmental protection, safety and so on, and it can be controlled by intelligent devices. Foshan Electric Lighting Co., Ltd LED smart bulb there is a low-power Bluetooth BLE...
Cryptbond Network Authorization Issues Vulnerability
Cryptbond Network CBN is a cryptocurrency. A security vulnerability exists in the 'ToOwner' function in CBN's smart contract implementation, which stems from the fact that the function does not check the identity of the caller. An attacker could use the vulnerability to modify the owner of the...
Business Alliance Financial Circle Security Breach
Business Alliance Financial Circle BAFC is a cryptocurrency. A security vulnerability exists in the 'UBSexToken' function in BAFC's smart contract implementation, which stems from the fact that the function is publicly available and does not check the identity of the caller. An attacker could use...