Calibration Attack Drills Down on iPhone, Pixel Users

A proof-of-concept for a new type of privacy attack, dubbed “calibration fingerprinting,” uses data from Apple iPhone sensors to construct a globally unique fingerprint for any given mobile user. Researchers said that this provides an unusually effective means to track people as they browse acros...

Servicing stack update for Windows 10, Version 1703: May 14, 2019

None None...

Servicing stack update for Windows 10, Version 1709: May 14, 2019

None None...

Servicing stack update for Windows 10, version 1607 and Windows Server 2016: May 14, 2019

None None...

Servicing stack update for Windows 10, Version 1507: May 14, 2019

None None...

Servicing stack update for Windows 10, Version 1903: May 14, 2019

None None...

Rockwell Automation/Allen-Bradley Multiple Devices Denial of Service

Binary data 720096.prm...

Schneider Electric OPC Factory Server (OFS) HMI Detection

Binary data 761525.prm...

Schneider Electric OPC Factory Server (OFS) <= 3.5 Denial of Service

Binary data 720160.prm...

Schneider Electric OPC Factory Server (OFS) HMI Detection

Binary data 761523.prm...

Schneider Electric OPC Factory Server (OFS) HMI Detection

Binary data 761524.prm...

Schneider Electric OPC Factory Server (OFS) HMI Detection

Binary data 761521.prm...

Schneider Electric OPC Factory Server (OFS) 3.35 Buffer Overflow

Binary data 720159.prm...

Schneider Electric OPC Factory Server (OFS) HMI Detection

Binary data 761522.prm...

CVE-2019-7746

JioFi 4 jmr1140 AmtelJMR1140R12.07 devices allow remote attackers to obtain an admin token by making a /cgi-bin/qcmapauth type=getuser request and then reading the token field. This token value can then be used to change the Wi-Fi password or perform a factory reset...

Cross site request forgery (csrf)

JioFi 4 jmr1140 AmtelJMR1140R12.07 devices allow remote attackers to obtain an admin token by making a /cgi-bin/qcmapauth type=getuser request and then reading the token field. This token value can then be used to change the Wi-Fi password or perform a factory reset...

Plum Mobile Compass Input Validation Error Vulnerability

Plum Mobile Compass is an Android-based smartphone from Plum Mobile USA. The com.android.settings package in Plum Mobile Compass build fingerprint is PLUM/c179hwf221/c179hwf221:6.0/MRA58K/W16.51.5-22:user/release-keys versionCode=23, versionName=6.0-eng.root.20161223.224055 contains a security...

CVE-2018-14999

The Leagoo P1 device with a build fingerprint of sp7731c1h1032v4bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a pre-installed platform app with a package name of com.wtk.factory versionCode=1, versionName=1.0 that contains an exported broadcast receiver named...

CVE-2018-14994

The Essential Phone Android device with a build fingerprint of essential/mata/mata:8.1.0/OPM1.180104.166/297:user/release-keys contains a pre-installed platform app with a package name of com.ts.android.hiddenmenu versionName=1.0, platformBuildVersionName=8.1.0 that contains an exported activity...

CVE-2018-15003

The Coolpad Defiant Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys and the T-Mobile Revvl Plus Coolpad/alchemy/alchemy:7.1.1/143.14.171129.3701A-TMO/buildfnj02-206:user/release-keys Android devices contain a pre-installed platform app with a package name of...