Lenovo Watch X Riddled with Security Vulnerabilities

Researchers are raking the Lenovo Watch X over the security coals in a report that blasts the device for shipping with a half dozen “disturbing” privacy and security vulnerabilities. The budget $50 smartwatch was introduced in June 2018 and was initially praised for its design, features and...

Amazon Alexa Has Got Some Serious Skills—Spying On Users!

"Alexa, are you spying on me?" — aaaa.....mmmm.....hmmm.....maybe!!! Security researchers have developed a new malicious 'skill' for Amazon's popular voice assistant Alexa that can turn your Amazon Echo into a full-fledged spying device. Amazon Echo is an always-listening voice-activated smart ho...

A few words about Gartner’s “Magic Quadrant for Application Security Testing” 2018

February and March are the hot months for marketing reports. I already wrote about IDC and Forrester reports about Vulnerability Management-related markets. And this Monday, March 19, Gartner released new "Magic Quadrant for Application Security Testing". You can buy it on the official website fo...

Shenzhen, China, a manufacturer of smart cameras exposed vulnerability: at least 17.5 million devices can be remote attack-vulnerability warning-the black bar safety net

Security firms Bitdefender and Checkmarx are released report, security researcher at a plurality of conventional smart cameras found in a remote intrusion vulnerability, relates to the VStarcam, the Loftek, as well as Neo IP camera. One of Neo IP camera is Shenzhen, China manufacturer beautiful...

Checkmarx CxQL Sandbox bypass (CVE-2014-8778)

Checkmarx CxQL Sandbox bypass CVE-2014-8778 Vendor: Checkmarx - www.checkmarx.com Product: CxSuite Version affected: 7.1.5 and prior Credit: Huy-Ngoc DAU @ngocdh of Deloitte Conseil, France ================================ Introduction ================================ Checkmarx is a static source...

Checkmarx CxSAST Sandbox Bypass Vulnerability

Checkmarx CxSAST formerly CxSuite is a source code analysis SCA solution developed by Checkmarx, Inc. in the United States. The solution provides features such as identifying and tracking application layer security vulnerabilities and showing where and how to fix them. A security vulnerability...

CVE-2014-8778

Checkmarx CxSAST formerly CxSuite before 7.1.8 allows remote authenticated users to bypass the CxQL sandbox protection mechanism and execute arbitrary C code by asserting the 1 System.Security.Permissions.PermissionState.Unrestricted or 2 System.Security.Permissions.SecurityPermissionFlag.AllFlag...

Design/Logic Flaw

Checkmarx CxSAST formerly CxSuite before 7.1.8 allows remote authenticated users to bypass the CxQL sandbox protection mechanism and execute arbitrary C code by asserting the 1 System.Security.Permissions.PermissionState.Unrestricted or 2 System.Security.Permissions.SecurityPermissionFlag.AllFlag...

CVE-2014-8778

Checkmarx CxSAST formerly CxSuite before 7.1.8 allows remote authenticated users to bypass the CxQL sandbox protection mechanism and execute arbitrary C code by asserting the 1 System.Security.Permissions.PermissionState.Unrestricted or 2 System.Security.Permissions.SecurityPermissionFlag.AllFlag...

CVE-2014-8778

CVE-2014-8778 affects Checkmarx CxSAST/CxQL Sandbox prior to 7.1.8. A remote authenticated attacker can bypass the CxQL sandbox protection by asserting either System.Security.Permissions.PermissionState.Unrestricted or System.Security.Permissions.SecurityPermissionFlag.AllFlags, enabling executio...

Checkmarx CxQL 7.1.5 Sandbox Bypass Vulnerability

Exploit for php platform in category web applications Checkmarx CxQL Sandbox bypass CVE-2014-8778 Vendor: Checkmarx - www.checkmarx.com Product: CxSuite Version affected: 7.1.5 and prior Credit: Huy-Ngoc DAU @ngocdh of Deloitte Conseil, France ================================ Introduction...

Checkmarx CxQL 7.1.5 Sandbox Bypass

...

WordPress Update 3.5.2 Patches Seven Vulnerabilities

WordPress, which has been a jumping off point for a number of targeted attacks and other high-profile hacks, has been updated and the latest version includes a number of security patches. Version 3.5.2, released late last week, includes seven security fixes and some additional hardening, accordin...

Popular WordPress Themes, Plug-Ins Vulnerable to Attack

Since late March, no fewer than a half-dozen high profile attacks have involved a compromised website built on the WordPress platform. Attackers abuse vulnerabilities in the content management system’s customizable plug-ins and themes to pull off anything from drive-by downloads to watering hole...

Yet Another Forum.net XSS vulnerabilities

OVERVIEW ========= "Yet Another Forum.net http://www.yetanotherforum.net/ is a opensource discussion forum or bulletin board system for web sites running ASP.NET. It is ASP.NET based with a MS SQL backend database. The full C source code is available licensed as GPL. " Several Cross Site Scriptin...