CVE-2022-23747

CVE-2022-23747 affects Sony Xperia series 1, 5, and Pro. Connected PT-2022-4245 details a buffer/overrun in the ALAC decoder (libMtkOmxAlacDec.so) caused by missing validation of the number of frames during music playback, leading to out-of-bounds memory access and potential remote arbitrary code...

Sony Xperia 系列安全漏洞

The Sony Xperia series is a line of smartphones from the Japanese company Sony Sony. A security vulnerability exists in the Sony Xperia 1, 5, and Pro series versions, which stems from a lack of validation of the number of frames passed during music playback, which may result in memory access...

CVE-2022-27094

Sony PlayMemories Home v6.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...

Code injection

Sony PlayMemories Home v6.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...

CVE-2022-27094

Sony PlayMemories Home v6.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...

CVE-2022-27094

CVE-2022-27094 affects Sony PlayMemories Home v6.0. The vulnerability is an unquoted service path used by a Windows service, enabling local privilege escalation to SYSTEM. Documented impact is high for confidentiality, integrity, and availability, with CVSS v3.1 metrics (LOCAL access, LOW attack ...

Sony PlayMemories Home 代码问题漏洞

Sony PlayMemories Home is an image management software from Sony Japan. It is capable of managing and editing photos and videos on a PC. A security vulnerability exists in Sony PlayMemories Home version v6.0, which stems from the inclusion of an unreferenced service path that allows an attacker t...

Sony Neural Network Libraries reliance on untrusted inputs prior to v1.0.10

nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries aka nnabla prior to v1.0.10 relies on the HOME environment variable, which might be untrusted...

GHSA-4Q2W-RW7M-XQW6 Sony Neural Network Libraries reliance on untrusted inputs prior to v1.0.10

nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries aka nnabla prior to v1.0.10 relies on the HOME environment variable, which might be untrusted...

sony-co.com Cross Site Scripting vulnerability OBB-2484022

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sony-centr-24.ru Cross Site Scripting vulnerability OBB-2466556

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Sony: Response Manipulation leads to Admin Panel Login Bypass at https://██████/

The researcher reported that the authentication of a Sony endpoint could be bypassed by manipulating the response to a login request. By changing the value of a response parameter, the researcher bypassed the authentication and was able to gain access to an admin portal...

Sony Playmemories Home Unquoted Service Path

Exploit Title: Sony playmemories home - 'PMBDeviceInfoProvider' Unquoted Service Path Date: 09/03/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://www.sony.com/ Software Link: https://support.d-imaging.sony.co.jp/www/disoft/int/download/playmemories-home/win/en/index.html Version: 6.0...

Sony playmemories home - (PMBDeviceInfoProvider) Unquoted Service Path Vulnerability

Exploit Title: Sony playmemories home - 'PMBDeviceInfoProvider' Unquoted Service Path Exploit Author: Saud Alenazi Vendor Homepage: https://www.sony.com/ Software Link: https://support.d-imaging.sony.co.jp/www/disoft/int/download/playmemories-home/win/en/index.html Version: 6.0 Tested: Windows 10...

Sony playmemories home - 'PMBDeviceInfoProvider' Unquoted Service Path

Exploit Title: Sony playmemories home - 'PMBDeviceInfoProvider' Unquoted Service Path Date: 09/03/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://www.sony.com/ Software Link: https://support.d-imaging.sony.co.jp/www/disoft/int/download/playmemories-home/win/en/index.html Version: 6.0...

FBI traces and grabs back $150 million theft that was turned into bitcoins

On December 1, 2021, the Tokyo police arrested an employee of Sony Life Insurance on suspicion of fraudulently obtaining 17 billion yen through an illegal money transfer from an overseas unit. On the same day 3,879 bitcoins, worth about $150 million, were seized by law enforcement, and on the...

Stolen Bitcoins Returned

The US has returned $154 million in bitcoins stolen by a Sony employee. However, on December 1, following an investigation in collaboration with Japanese law enforcement authorities, the FBI seized the 3879.16242937 BTC in Ishiis wallet after obtaining the private key, which made it possible to...

Hacking the Sony Playstation 5

I just dont think its possible to create a hack-proof computer system, especially when the system is physically in the hands of the hackers. The Sony Playstation 5 is the latest example: Hackers may have just made some big strides towards possibly jailbreaking the PlayStation 5 over the weekend,...

Sony: Blind User-Agent SQL Injection to Blind Remote OS Command Execution at █████████

The researcher reported that a login form of a Sony website was vulnerable to a blind SQL injection. The researcher was able to use the blind SQL injection to enable xpcmdshell functionality on the database and then run system commands. The output from the system commands was then obtained via...

Sony: Path Traversal issue at https://████/blaze/

The researcher reported that a Sony endpoint was vulnerable to a path traversal vulnerability due to CVE-2018–1271. The researcher used the path traversal vulnerability to access a win.ini file on the vulnerable endpoint...