CVE-2017-5176

A DLL Hijack issue was discovered in Rockwell Automation Connected Components Workbench CCW. The following versions are affected: Connected Components Workbench - Developer Edition, v9.01.00 and earlier: 9328-CCWDEVENE, 9328-CCWDEVZHE, 9328-CCWDEVFRE, 9328-CCWDEVITE, 9328-CCWDEVDEE, 9328-CCWDEVES...

CVE-2017-5176: Uncontrolled Search Path Element

A DLL Hijack issue was discovered in Rockwell Automation Connected Components Workbench CCW. The following versions are affected: Connected Components Workbench - Developer Edition, v9.01.00 and earlier: 9328-CCWDEVENE, 9328-CCWDEVZHE, 9328-CCWDEVFRE, 9328-CCWDEVITE, 9328-CCWDEVDEE, 9328-CCWDEVES...

Serviio PRO 1.8 DLNA Media Streaming Server REST API Arbitrary Code Execution Exploit

Serviio PRO DLNA Media Streaming Server version 1.8.0.0 PRO, 1.7.1, 1.7.0, and 1.6.1 suffers from a REST API arbitrary code execution vulnerability. !/usr/bin/env python Serviio PRO 1.8 DLNA Media Streaming Server REST API Arbitrary Code Execution Vendor: Petr Nejedly | Six Lines Ltd Product web...

Malware Hunter — Shodan's new tool to find Malware C&C Servers

Rapidly growing, insecure internet-connected devices are becoming albatross around the necks of individuals and organizations with malware authors routinely hacking them to form botnets that can be further used as weapons in DDoS and other cyber attacks. But now finding malicious servers, hosted ...

OSPF is not advertising SDWAN routes to connected Router

OSPF configured on SDWAN 1K. OSPF is up between the MCN and next hop router. All of the virtual paths are up, but the MCN not advertising SDWAN routes into OSPF...

Rockwell Automation Connected Components Workbench DLL Load Local Code Execution Vulnerability

Rockwell Automation Connected Components Workbench is an HMI editor and component-level industrial product for designing and configuring applications and performing microcontroller turns. A local arbitrary code execution vulnerability exists in Rockwell Automation Connected Components Workbench...

Arbitrary Code Execution Via Bypassing Permission Check

distfork is vulnerable to arbitrary code execution via bypassing permission check. The bypass is possible because it only performs basic permission overall/read checks and allows anyone with that permission to execute arbitrary shell commands on all connected nodes...

Somebody is watching you: IP camera, TV and Emma Watson’s smartphone

Today I want to talk today about privacy in a most natural sense. You probably have an internet-connected device with camera an microphone: smartphone, tablet, smart TV, ip camera, baby monitor, etc. - Can it be used to record video/audio and spy on you? - Of course, yes! - Only government and...

Citrix Director Displays "In Supplemental Grace Period Time until grace expires"

Citrix Director shows License server issues as follows: License server state: OK Grace state: In Supplemental Grace Period Time until grace expires: 6 days 4 hours License server status is "Not Connected". Studio is able to connect to the license server, there are enough licenses and license serv...

Children's Voice Messages Leaked in CloudPets Database Breach

More than two million voice messages, many of them from children, along with the personal information of more than 800,000 registered users was swiped from an exposed MongoDB instance storing data collected from a internet-connected toy called CloudPets. These IP-enabled teddy bears allow childre...

Internet-Connected Teddy Bear Leaks Millions Of Voice Messages and Password

Every parent should think twice before handing out Internet-connected toys or smart toys to their children, as these creepy toys pose a different sort of danger: privacy and data security risks for kids who play with them. This same incident was happened over a year ago when Hong Kong toymaker...

Windows Botnet Spreading Mirai Variant

A Chinese-speaking attacker is spreading a Mirai variant from a repurposed Windows-based botnet. Researchers at Kaspersky Lab published a report today, and said the code was written by an experienced developer who also built in the capability to spread the IoT malware to Linux machines under...

F5 Big-IP TLS Information Disclosure (Ticketbleed; CVE-2016-9244)

An information disclosure vulnerability has been reported in F5 Big-IP TLS products. An attacker can leverage this vulnerability to disclose memory contents of a connected server...

Rockwell Automation Connected Components Workbench

CVSS v3 7.0 Vendor: Rockwell Automation Equipment: Connected Components Workbench Vulnerability: DLL Hijack REPOSTED INFORMATION This advisory was originally posted to the NCCIC Portal on February 16, 2017, and is being released to the ICS-CERT web site. AFFECTED PRODUCTS The following Connected...

Consortium Publishes Manifesto on Autonomous Vehicle Security

Intel, Uber and IoT company Aeris have joined forces in an effort aimed at fostering industry cooperation when it comes to building safety features into autonomous vehicles and the systems that support them. Today the group, which goes by the name Future of Automotive Security Technology Research...

Mozilla's First Internet Health Report Tackles Security, Privacy

In its first-ever Internet Health Report, the non-profit Mozilla Foundation warned of the dangers of concentrated power among too few internet companies, cyber snooping by nosey governments and new threats posed by connected devices that can further erode privacy. Mozilla released the report this...

Court Documents Reveal How Feds Spied On Connected Cars For 15 Years

It's not always necessary to break into your computer or smartphone to spy on you. Today all are day-to-day devices are becoming more connected to networks than ever to add convenience and ease to daily activities. But here's what we forget: These connected devices can be turned against us becaus...

FTC Issues Public Challenge to Improve IoT Patching

Admittedly, patching existing connected devices in the wild is easier said than done. But that’s not deterring the Federal Trade Commission from soliciting help in finding a solution. The U.S. government agency today announced the kickoff of the FTC IoT Home Inspector Challenge, a prize contest...

How to Protect All Your Internet-Connected Home Devices From Hackers

How many Internet-connected devices do you have in your home? I am surrounded by around 25 such devices. It's not just your PC, smartphone, and tablet that are connected to the Internet. Today our homes are filled with tiny computers embedded in everything from security cameras, TVs and...

Renault Connected Car - Exported components, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Renault Connected Car published at the 'play' market has multiple vulnerabilities...