Hackers Can Use Ultrasonic Waves to Secretly Control Voice Assistant Devices

Researchers have discovered a new means to target voice-controlled devices by propagating ultrasonic waves through solid materials in order to interact with and compromise them using inaudible voice commands without the victims' knowledge. Called "SurfingAttack," the attack leverages the unique...

SQL Injection Vulnerability in Jinwei Smart Restaurant System (CNVD-2020-22746)

Jinwei Intelligent Restaurant System is an internal management system for all major and small restaurants. Jinwei Intelligent Restaurant System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Jinwei Smart Restaurant System (CNVD-2020-22266)

Jinwei Intelligent Restaurant System is an internal management system for all major and small restaurants. Jinwei Intelligent Restaurant System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Arbitrary File Download Vulnerability in Visualized Smart Campus

Visualized smart campus is based on the physical environment of the campus, taking the real campus as a whole as a blueprint, using network technology, completing the construction of the visualization of the campus geographic information system, realizing the campus multi-dimensional virtual...

IoT Insecurity: When Your Vacuum Turns on You

SAN FRANCISCO – Hackable Internet of Things IoT devices are on full display this week at the RSA Conference 2020. They include everything from baby monitors to Wi-Fi chips. One such device is a connected vacuum cleaner, the Trifo Ironpie M6. According to researchers with Checkmarx, the vacuum has...

Unauthorized Access Vulnerability in Ali Smart IoT Platform

Alibaba is a global business-to-business B2B e-commerce company and is currently the world's largest online marketplace and business exchange community. An unauthorized access vulnerability exists in the Alibaba Smart IoT platform, which can be exploited by an attacker to gain access to sensitive...

Biotech health care innovations meet security challenges

The level and speed of innovations taking place in the biotech industry are baffling. On the one hand, it makes us hopeful we can quickly reduce the number of illnesses and their consequences through technological advancement—saving thousands of lives. On the other, concerns about the application...

HP Smart Update Manager Remote Unauthorized Access.

The HPE Smart Update manager running on the remote host is affected by an authentication bypass vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to bypass authentication and execute arbitrary actions defined by the application. C Tenable Networ...

OWASP D4N155 - Intelligent And Dynamic Wordlist Using OSINT

It's an information security audit tool that creates intelligent wordlists based on the content of the target page. Help us See some calculations used Install Need to: Python3.6, Bash GNU Bourne-Again SHell Optional: Git, Groff git clone https://github.com/owasp/D4N155.git cd D4N155 pip3 install ...

Cisco Smart Software Manager On-Prem Trust Management Vulnerability

Cisco Smart Software Manager On-Prem is a Cisco product license management component. A trust management issue vulnerability exists in the High Availability HA service in Cisco Smart Software Manager On-Prem versions prior to 7-202001, which arises from a system administrator being unable to...

Critical Cisco Bug Opens Software Licencing Manager to Remote Attack

A critical flaw in the High Availability HA service of Cisco Smart Software Manager On-Prem Base has been uncovered, which would open the door to remote attackers thanks to its use of a static, default password, even if the platform isn’t directly connected to the internet. Cisco Smart Software...

smart-tower.kr Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1098143 Security Researcher geeknik Helped patch 8710 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting smart-tower.kr website and...

Bluetooth-Related Flaws Threaten Dozens of Medical Devices

Hundreds of smart devices—including pacemakers—are exposed thanks to a series of vulnerabilities in the Bluetooth Low Energy protocol...

Input validation error vulnerability in multiple Huawei products (CNVD-2020-22010)

The Huawei HEGE-570, among others, is a smart screen device from the Chinese company Huawei Huawei. An input validation error vulnerability exists in multiple Huawei products. The vulnerability stems from the failure of the program to perform sufficient validation, and can be exploited by an...

CVE-2020-3158

A vulnerability in the High Availability HA service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. The vulnerability is due to a system account that has a default and static password...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page. The...

CVE-2020-3158

A vulnerability in the High Availability HA service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. The vulnerability is due to a system account that has a default and static password...

CVE-2020-3158

A vulnerability in the High Availability HA service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. The vulnerability is due to a system account that has a default and static password...

CVE-2020-3158 Cisco Smart Software Manager On-Prem Static Default Credential Vulnerability

A vulnerability in the High Availability HA service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. The vulnerability is due to a system account that has a default and static password...

CVE-2020-3158

Cisco Smart Software Manager On-Prem HA service contains a default, static password for a system account not controlled by the admin, enabling unauthenticated remote access to a sensitive part of the system with high privileges. Successful exploits could grant read/write access to system data, in...