CVE-2019-13336

The dbell Wi-Fi Smart Video Doorbell DB01-S Gen 1 allows remote attackers to launch commands with no authentication verification via TCP port 81, because the loginuse and loginpass parameters to openlock.cgi can have arbitrary values. NOTE: the vendor's position is that this product reached end o...

Authentication flaw

The dbell Wi-Fi Smart Video Doorbell DB01-S Gen 1 allows remote attackers to launch commands with no authentication verification via TCP port 81, because the loginuse and loginpass parameters to openlock.cgi can have arbitrary values. NOTE: the vendor's position is that this product reached end o...

CVE-2019-13336

The dbell Wi-Fi Smart Video Doorbell DB01-S Gen 1 allows remote attackers to launch commands with no authentication verification via TCP port 81, because the loginuse and loginpass parameters to openlock.cgi can have arbitrary values. NOTE: the vendor's position is that this product reached end o...

CVE-2019-13336

The CVE-2019-13336 issue affects the dbell Wi‑Fi Smart Video Doorbell DB01‑S Gen 1. The vulnerability enables remote attackers to execute commands without authentication via TCP port 81 because the loginuse/loginpass values sent to openlock.cgi can be arbitrary. Impact is described in sources as ...

Smart Battery License Issue Vulnerability

Smart Battery A4 is a portable power supply device. An authorization issue vulnerability exists in the Smart Battery A4 using firmware version r1.7.9 and earlier. An attacker can exploit this vulnerability to obtain/reset the administrator password without authentication...

Smart Battery License Issue Vulnerability (CNVD-2019-39686)

Smart Battery A4 is a portable power supply device. An authorization issue vulnerability exists in the Smart Battery A4 using firmware version r1.7.9 and earlier. An attacker could use this vulnerability to bypass authentication and gain administrative privileges on a web page...

Intel Smart Connect Technology CVE-2019-11167 Local Privilege Escalation Vulnerability

Description Intel Smart Connect Technology is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. Intel Smart Connect Technology for Intel NUC products is vulnerable. Technologies Affected Intel Smart Connect Technology...

Fenrir - Simple Bash IOC Scanner

Fenrir is a simple IOC scanner bash script. It allows scanning Linux/Unix/OSX systems for the following Indicators of Compromise IOCs: Hashes MD5, SHA1 and SHA256 using md5sum, sha1sum, sha -a 256 File Names string - checked for substring of the full path, e.g. "temp/p.exe" in "/var/temp/p.exe"...

This Week in Security News: How a GIF Can Hack Your Android and Vulnerabilities That Could Put Hospital Networks at Risk

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about how smart home devices can be easily hacked and 11 vulnerabilities that could affect medical devices and hospital networks. Also...

Tracking by Smart TVs

Long Twitter thread about the tracking embedded in modern digital televisions. The thread references three academic papers...

CVE-2019-15809

Smart cards from the Athena SCS manufacturer, based on the Atmel Toolbox 00.03.11.05 and the AT90SC chip, contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private...

CVE-2019-15809

Smart cards from the Athena SCS manufacturer, based on the Atmel Toolbox 00.03.11.05 and the AT90SC chip, contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private...

CVE-2019-15809

CVE-2019-15809 describes a timing side-channel in ECDSA signature generation on Athena SCS smart cards (AT90SC) using Atmel Toolbox 00.03.11.05. The toolbox includes two ECDSA implementations, fast and secure; affected cards selected the fast variant, leaking the bit-length of the nonce via timin...

Siemens STEP 7-MicroWIN SMART suffers from a Denial of Service Vulnerability

Siemens is a leading global technology company providing solutions for customers in the areas of power generation and transmission and distribution, infrastructure, industrial automation, drives and software through innovations in electrification, automation and digitalization. A denial of servic...

Certification Bypass Vulnerability in SIEMENS SIMATIC S7-200 Smart PLCs

Siemens is a leading global technology company providing solutions for customers in the areas of power generation and transmission and distribution, infrastructure, industrial automation, drives and software through innovations in electrification, automation and digitalization. An authentication...

CVE-2019-15068

A broken access control vulnerability in Smart Battery A4, a multifunctional portable charger, firmware version ?= r1.7.9 allows an attacker to get/reset administrator’s password without any authentication...

CVE-2019-15068

A broken access control vulnerability in Smart Battery A4, a multifunctional portable charger, firmware version ?= r1.7.9 allows an attacker to get/reset administrator’s password without any authentication...

CVE-2019-15067

An authentication bypass vulnerability discovered in Smart Battery A2-25DE, a multifunctional portable charger, firmware version ?= SECFS-2013-10-16-13:42:58-629c30ee-60c68be6. An attacker can bypass authentication and gain privilege by modifying the login page...

CVE-2019-15067

An authentication bypass vulnerability discovered in Smart Battery A2-25DE, a multifunctional portable charger, firmware version ?= SECFS-2013-10-16-13:42:58-629c30ee-60c68be6. An attacker can bypass authentication and gain privilege by modifying the login page...

CVE-2019-15069

An unsafe authentication interface was discovered in Smart Battery A4, a multifunctional portable charger, firmware version ?= r1.7.9 . An attacker can bypass authentication without modifying device file and gain web page management privilege...