CVE-2020-3933

CVE-2020-3933 concerns a Taiwan SECOM door access/attendance system where attackers can enumerate user accounts. The provided data from NVD (CVSS: v3.1) indicates a network-based, low-complexity issue with no authentication required, resulting in partial confidentiality impact (C:L) and no impact...

CVE-2020-3934 TAIWAN SECOM CO., LTD. - Pre-auth SQL Injection

TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, contains a vulnerability of Pre-auth SQL Injection, allowing attackers to inject a specific SQL command...

2×4 Security

I had someone at the house recently, talking about physical security. We have all the usual stuff like alarms and CCTV, locks on the windows and doors but the aim of the exercise was to have someone who is familiar with attacks vectors physical security in this case, but the principal applies to...

Hackers exploiting vulnerability in smart doors to launch DDoS attacks

By Waqas Smart door and building access control systems are currently the top targets of hackers to launch DDoS attacks distributed denial-of-service attacks. This is a post from HackRead.com Read the original post: Hackers exploiting vulnerability in smart doors to launch DDoS attacks...

Unspecified vulnerability in Anviz access control devices (CNVD-2019-44976)

Anviz access control devices is an access control device from Anviz China. A security vulnerability exists in the Anviz access control devices. An attacker can exploit the vulnerability to intercept and re-open door requests...

garage-door-services.focus.tv Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1031193 Security Researcher devl00p Helped patch 2581 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

CVE-2019-12391

The Anviz Management System for access control has insufficient logging for device events such as door open requests...

Design/Logic Flaw

Anviz access control devices are vulnerable to replay attacks which could allow attackers to intercept and replay open door requests...

Design/Logic Flaw

The Anviz Management System for access control has insufficient logging for device events such as door open requests...

CVE-2019-12391

CVE-2019-12391 affects the Anviz Management System for access control. The public description notes insufficient logging for device events (e.g., door open requests). The Connected documents corroborate this issue across multiple sources (Red Hat, NVD, CNVD, PRION, CVE lists) but do not provide c...

CVE-2019-12391

The Anviz Management System for access control has insufficient logging for device events such as door open requests...

CVE-2019-12393

Anviz access control devices are vulnerable to replay attacks which could allow attackers to intercept and replay open door requests...

Help prevent disaster donation scams from causing more misery

It’s a sad day when we have to warn people about medical charity scams, or tax fakeouts, or even have a week dedicated to foiling charity fraud—but here we are. With so many natural disasters occurring, from wildfires in California to tornadoes in Dallas, disaster donation scams remain a top...

Drilling open a smart door lock in 4 seconds

The BBC asked us to have a look at some smart locks for a TV show recently. We didn’t have much prep time, but were genuinely shocked by just how easy this one was to compromise. Usually, we spend time looking at Bluetooth/RF, the mobile app, the API and then move on to hardware. This time we...

Smart Lock Turns Out to be Not So Smart, or Secure

Researchers are warning a keyless smart door lock made by U-tec, called Ultraloq, could allow attackers to track down where the device is being used and easily pick the lock – either virtually or physically. Ultraloq is a Bluetooth fingerprint and touchscreen door lock sold for about $200. It...

Smart Bluetooth door locks are vulnerable to logic flaws

Beijing Xiyou Information Technology Co., Ltd. is a company that provides online operation and management platform and offline intelligent service solutions for spaces, parks and commercial buildings. A logic flaw vulnerability exists in smart Bluetooth door locks, which can be exploited by...

Smart door lock security who come to tube? Yale and the cover Terman smart locks 0 day vulnerability exposure! - Vulnerability warning-the black bar safety net

With the continuous development of technology, smart home has been popular to people's Lives, Where smart locks product the majority of consumers like. From now on never go out forget to bring the key to the troubles, however the convenience of the smart lock products really safe? Today, the Smar...

Bugs in Grandstream Gear Lay Open SMBs to Range of Attacks

A series of both unauthenticated and authenticated remote code-execution vulnerabilities have been uncovered in a variety of Grandstream products for small to medium-sized businesses, including audio and video conferencing units, IP video phones, routers and IP PBXs. Affected Products According t...

BSides SF 2019: Remote-Root Bug in Logitech Harmony Hub Patched and Explained

SAN FRANCISCO – Users of Logitech’s Harmony Hub have been wide open to an attack for years because of four unpatched vulnerabilities that left any IoT device connected at risk to remote takeover. The bugs were patched by Logitech in November, but for the first time the researchers that discovered...

BEWARD Intercom 2.3.1 - Credentials Disclosure Exploit

Exploit for windows platform in category local exploits !/usr/bin/env python -- coding: utf8 -- BEWARD Intercom 2.3.1 Credentials Disclosure Vendor: Beward R&D Co., Ltd Product web page: https://www.beward.net Affected version: 2.3.1.34471 2.3.0 2.2.11 2.2.10.5 2.2.9 2.2.8.9 2.2.7.4 Note: For...