Code injection

The Samsung J7 Duo Android device with a build fingerprint of samsung/j7duolteub/j7duolte:8.0.0/R16NW/J720MUBS3ASB2:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000000, versionName=7.0.0.0 that allows other pre-installed ap...

CVE-2019-15462

The Samsung J7 Duo Android device with a build fingerprint of samsung/j7duolteub/j7duolte:8.0.0/R16NW/J720MUBS3ASB2:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000000, versionName=7.0.0.0 that allows other pre-installed ap...

CVE-2019-15462

CVE-2019-15462 affects the Samsung J7 Duo (Android 8.0) via a pre-installed theme center app (com.samsung.android.themecenter, v7.0.0.0) that exposes an accessible component. Other pre-installed apps can use this to install apps, provided they can obtain signatureOrSystem permissions, which are r...

CVE-2018-18472

The CVE-2018-18472 entry concerns Western Digital WD My Book Live and WD My Book Live Duo (all versions) that expose a root Remote Command Execution flaw via shell metacharacters in the /api/1.0/rest/language_configuration language parameter. The vulnerability can be triggered by any actor that k...

CVE-2018-18472

Western Digital WD My Book Live and WD My Book Live Duo all versions have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/languageconfiguration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the...

Unpatched Bug Let Attackers Bypass Windows Lock Screen On RDP Sessions

A security researcher today revealed details of a newly unpatched vulnerability in Microsoft Windows Remote Desktop Protocol RDP. Tracked as CVE-2019-9510, the reported vulnerability could allow client-side attackers to bypass the lock screen on remote desktop RD sessions. Discovered by Joe...

Authentication flaw

Duo Network Gateway 1.2.9 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authenticatio...

CVE-2018-7340

Duo Network Gateway (DNG) 1.2.9 and earlier is affected by CVE-2018-7340 due to incorrect handling of XML DOM traversal and canonicalization in the python-saml library, which can allow an attacker to modify SAML data without invalidating the signature and potentially bypass authentication to SAML...

devolo dLAN 550 duo+ Starter Kit Remote Code Execution

Summary Devolo dLAN® 550 duo+ Starter Kit is Powerlineadapter which is a cost-effective and helpful networking alternative for any location without structured network wiring. Especially in buildings or residences lacking network cables or where updating the wiring would be expensive and...

devolo dLAN 550 duo+ Starter Kit Cross-Site Request Forgery

Summary Devolo dLAN® 550 duo+ Starter Kit is Powerlineadapter which is a cost-effective and helpful networking alternative for any location without structured network wiring. Especially in buildings or residences lacking network cables or where updating the wiring would be expensive and...

duo-inc.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-705157 Description| Value ---|--- Affected Website:| duo-inc.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Microsoft Intelligent Security Association expands with new members and products

Last April, we introduced theMicrosoft Intelligent Security Associationa group of 19 security technology providers who have integrated their solutions with a select set of Microsoft products to provide customers better protection, detection, and response. Today, we are pleased to announce five ne...

Akamai and Duo have announced a technology partnership for Zero Trust

Akamai continues to build a zero trust ecosystem by integrating it's Enterprise Application Access EAA with Duo's Multi-Factor Authentication MFA solution. Duo now natively integrates into EAA and augments access with push-based MFA, phone call delivery of MFA tokens, and additional device level...

Duo Network Gateway Authentication Bypass Vulnerability

Duo Network Gateway DNG is an access control software for accessing internal Web applications from Duo Corporation in the United States. An authentication bypass vulnerability exists in DNG. A remote attacker could use this vulnerability to bypass the authentication mechanism and perform...

duo-inc.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-539523 Description| Value ---|--- Affected Website:| duo-inc.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

DuoDuoRebate V8.3_UTF8 official version admin_mod_goods_list.act.php has SQL injection vulnerability

DuoDuo rebate for e-commerce rebate, shopping guide to provide solutions, is the open source PHP rebate site system. DuoDuoRebate V8.3UTF8 official version adminmodgoodslist.act.php SQL injection vulnerability exists, the vulnerability is due to the system fails to effectively filter the content ...

Umbrella Duo App for Android has logical design flaws

Umbrella Duo app is a shared umbrella rental application. Umbrella Duo App for Android has a logical design vulnerability that allows attackers to successfully log in by catching packets and brute-force breaking the authentication code...

Memory Corruption Vulnerability in Domi Music PC Client

Duo Mi Music PC client is a music player under Beijing Caiyun Online Technology Development Co. A memory corruption vulnerability exists in the DuoMi Music PC client when opening specific aac files, which can be exploited by attackers to cause a denial of service...

duo-inc.co.jp XSS vulnerability

Vulnerable URL: http://www.duo-inc.co.jp/toppage.php/3/" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 412556 VIP website status:| No Coordinated Disclosure Timeline: Description|...

Ringtone Duo App Has Denial of Service Vulnerability

Ringtone Duo APP is a cell phone ringtone downloader. Ringtone Duo APP suffers from a denial-of-service vulnerability, where an attacker consumes server resources and causes a denial-of-service by sending unlimited CAPTCHAs to cell phones...