File Upload Vulnerability in Golden Flavor Smart Order Payment Management System

Golden Taste Intelligent Ordering System is an electronic ordering system that integrates traditional menu and wireless ordering informationization. A file upload vulnerability exists in the Golden Taste Intelligent Ordering and Payment Management System, which can be exploited by attackers to...

CVE-2019-19248

Electronic Arts Origin through 10.5.x allows Elevation of Privilege issue 2 of 2...

CVE-2019-19247

Electronic Arts Origin through 10.5.x allows Elevation of Privilege issue 1 of 2...

CVE-2019-19248

Electronic Arts Origin through 10.5.x allows Elevation of Privilege issue 2 of 2...

CVE-2019-19247

Electronic Arts Origin through 10.5.x allows Elevation of Privilege issue 1 of 2...

Privilege escalation

Electronic Arts Origin through 10.5.x allows Elevation of Privilege issue 1 of 2...

Privilege escalation

Electronic Arts Origin through 10.5.x allows Elevation of Privilege issue 2 of 2...

CVE-2019-19248

Electronic Arts Origin through 10.5.x allows Elevation of Privilege issue 2 of 2...

CVE-2019-19248

Technical details for CVE-2019-19248 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories to obtain affected products, impact, and fixes.

CVE-2019-19247

Electronic Arts Origin through 10.5.x allows Elevation of Privilege issue 1 of 2...

CVE-2019-19247

Concisely, CVE-2019-19247 affects Electronic Arts Origin 10.5.x and enables local privilege escalation via arbitrary directory DACL manipulation when OriginClientService is involved; the vulnerability relies on comparing the client executable vs. in-memory process, enabling manipulation of DACLs ...

electronic-greetings.com Cross Site Scripting vulnerability

Security Researcher g0bl1nsec Helped patch 3608 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting electronic-greetings.com website and its users. Following...

EFF Talks the Corporate Surveillance of Consumers

You can’t protect your privacy if you don’t know how it’s being violated. That’s the essence of a report by the Electronic Frontier Foundation that shines a bright disinfecting light on how corporations are collecting data on consumers. Think Facebook-like data collection on steroids and you begi...

Securing Portable Electronic Devices During Travel

Holiday travelers often use portable electronic devices PEDs because they offer a range of conveniences, for example, enabling the traveler to order gifts on-the-go, access to online banking, or download boarding passes. However, these devices are vulnerable to cyberattack or theft, resulting in...

FTC Provides Tips on Safeguarding Data Before Upgrading Mobile Phones

The Federal Trade Commission FTC has released an article with tips on how to protect personal information before trading in a mobile phone for a newer model. FTC recommends the following four steps to safeguard these devices: Back up data. Remove SIM and SD cards. Erase personal information. Veri...

Federal Court: Suspicionless Search of Traveler Devices by Border Agents Is Unconstitutional

In a win for the privacy of international travelers, a federal court in Boston has ruled that searchers of traveler electronic devices by border agents without suspicion is unconstitutional. The ruling from the U.S. District Court, District of Massachusetts came in a 2017 case, Alasaad v. Nielsen...

Electronic Arts Origin Client URI Handler Remote Code Execution (CVE-2019-12828)

A remote code execution vulnerability exists in the Electronic Arts Origin Client. The vulnerability is due to improper sanitization of user-supplied data which may be passed to the application as an option regarding the DLL loading path. A remote attacker could exploit the vulnerability by...

Homemade TEMPEST Receiver

Tom's Guide writes about home brew TEMPEST receivers: Today, dirt-cheap technology and free software make it possible for ordinary citizens to run their own Tempest programs and listen to what their own -- and their neighbors' -- electronic devices are doing. Elliott, a researcher at Boston-based...

V-SOL GPON/EPON OLT Platform 2.03 - Remote Privilege Escalation Vulnerability

Exploit for hardware platform in category web applications Exploit Title: V-SOL GPON/EPON OLT Platform 2.03 - Remote Privilege Escalation Author: LiquidWorm Vendor: Guangzhou V-SOLUTION Electronic Technology Co., Ltd. Product web page: https://www.vsolcn.com Tested on: GoAhead-Webs Advisory ID:...

V-SOL GPON/EPON OLT Platform 2.03 - Cross-Site Request Forgery

Exploit Title: V-SOL GPON/EPON OLT Platform 2.03 - Cross-Site Request Forgery Author: LiquidWorm Discovery Date: 2019-09-26 Vendor: Guangzhou V-SOLUTION Electronic Technology Co., Ltd. Product web page: https://www.vsolcn.com Tested on: GoAhead-Webs Advisory ID: ZSL-2019-5536 Advisory URL:...