Hardware reverse engineering. A tale from the workbench

In line with our previous work on the Tapplock, I decided to have some fun with some electronic locks and ordered a few from a large retail company. Half of these are currently en route to me, on the slowboat from China, but one arrived early. Before I state, let me just say here that I’m not...

CVE-2017-16754

Bolt before 3.3.6 does not properly restrict access to profiler routes, related to EventListener/ProfilerListener.php and Provider/EventListenerServiceProvider.php...

CVE-2017-16754

Bolt before 3.3.6 does not properly restrict access to profiler routes, related to EventListener/ProfilerListener.php and Provider/EventListenerServiceProvider.php...

Code injection

Bolt before 3.3.6 does not properly restrict access to profiler routes, related to EventListener/ProfilerListener.php and Provider/EventListenerServiceProvider.php...

Bolt _profiler access bypass vulnerability

Bolt is a set of open source content management tools developed by the Bolt community. A security vulnerability exists in versions of Bolt prior to 3.3.6 that stems from a failure to properly authenticate access. An attacker could use this vulnerability to bypass security restrictions and gain...

CVE-2017-16754

Bolt CMS before version 3.3.6 does not properly restrict access to the _profiler routes, related to EventListener/ProfilerListener.php and Provider/EventListenerServiceProvider.php. The issue is described as an improper access control vulnerability in Bolt prior to 3.3.6. The available connected ...

CVE-2017-16754

Bolt before 3.3.6 does not properly restrict access to profiler routes, related to EventListener/ProfilerListener.php and Provider/EventListenerServiceProvider.php...

SQL Injection

bolt/bolt is vulnerable to SQL injection attacks. A malicious user can inject arbitrary SQL statements because it fails to use a prepared statement for groupconcatmaxlen query...

Clickjacking Through Frames

bolt/bolt is vulnerable to clickjacking attacks. The vulnerability exists as bolt did not have sameorigin set in the X-Frame-Options header...

Cross-site Scripting (XSS)

bolt/bolt is vulnerable to cross-site scripting XSS attacks. The library does not properly encode translation parameters, allowing a malicious user to inject and execute arbitrary web script...

Cross-site Scripting (XSS)

bolt/bolt is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary web script when editing the title parameter for content...

Reflected Cross-site Scripting (XSS)

bolt/bolt is vulnerable to reflected cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary web script when generating canonical links...

Cross-site Scripting (XSS)

bolt/bolt is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary JavaScript through the URI field...

Cross-site Scripting (XSS)

Bolt CMS is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary javascript by uploading a SVG file with Content-Type: image/svg+xml in it's header to the application when editing a page...

Cross-site Scripting (XSS)

Bolt CMS is vulnerable to cross-site scripting XSS attacks. The library does not properly sanitize the user input, allowing a malicious user to inject and execute arbitrary javascript through the Title Field of a new entry...

Arbitrary Code Execution

Bolt is vulnerable to arbitrary code execution. The library does not properly check for file type during file uploads and the theme editor allows the renaming of file extentions. This allows a malicious user to inject and execute arbitrary PHP code by passing a php file saved with a different fil...

Bolt CMS Stored Cross-Site Scripting Vulnerability

Bolt CM is an open source content management system developed by the Bolt community. A security vulnerability exists in Bolt CMS version 3.2.14. A remote attacker can inject arbitrary web script or HTML by uploading an SVG document with 'Content-Type: image/svg+xml' header...

Bolt CMS Cross-Site Scripting Vulnerability

Bolt CM is an open source content management system developed by the Bolt community. A cross-site scripting vulnerability exists in Bolt CMS version 3.2.14. A remote attacker can use text input to inject arbitrary web script or HTML...

Cross site scripting

Bolt CMS 3.2.14 allows stored XSS by uploading an SVG document with a "Content-Type: image/svg+xml" header...

CVE-2017-11127

Bolt CMS 3.2.14 allows stored XSS by uploading an SVG document with a "Content-Type: image/svg+xml" header...