Burning down the house with IoT

For years we’ve been trying to set fire to ‘smart’ things by hacking them. We got some charring on the iKettle, but nothing more. Then we found some smart hair straighteners. The Glamoriser straighteners were promoted heavily on TV at Christmas; they piqued my interest because of the BLE...

Amazon Alexa Secretly Records Children, Lawsuits Allege

A federal lawsuit is alleging that Amazon is recording children who use its Alexa devices, without their consent or knowledge. Alexa is the built-in voice assistant shipped with devices like Amazon Echo, Amazon Dot, Fire TV and some third-party gadgets. “Alexa routinely records and voiceprints...

SDCMS PHP Code Execution Vulnerability

Smoke and Fire Network Technology SDCMS is a PHP and MySQL based enterprise station building content management system CMS by China Smoke and Fire Network Technology. A code injection vulnerability exists in the appadmincontroller hemecontroller.php file in version 1.7 of Smoke and Fire Web...

Design/Logic Flaw

Amazon Fire OS before 5.3.6.4 allows a man-in-the-middle attack against HTTP requests for "Terms of Use" and Privacy pages...

CVE-2019-7399

Amazon Fire OS before 5.3.6.4 allows a man-in-the-middle attack against HTTP requests for "Terms of Use" and Privacy pages...

CVE-2019-7399

Amazon Fire OS before 5.3.6.4 allows a man-in-the-middle attack against HTTP requests for "Terms of Use" and Privacy pages...

CVE-2019-7399

Vulnerability summary (CVE-2019-7399) : FireOS up to version 5.3.6.3/4 contains a root-cause in the Settings/Terms of Use and Privacy pages where content is loaded without HTTPS. This allows a network-based attacker to perform a man-in-the-middle (MITM) attack to inject malicious content or exfil...

CVE-2019-7399

Amazon Fire OS before 5.3.6.4 allows a man-in-the-middle attack against HTTP requests for "Terms of Use" and Privacy pages...

FireOS Flaw Allowed Limited Content Injection in Amazon Tablets

A vulnerability in the operating system of Amazon’s Fire Tablets could allow a hacker to inject malicious content into Settings, Legal and Compliance, Terms of Use and Privacy sections of the device. The bug could also allow an adversary to capture the serial number of the tablet. The Fire Tablet...

fire-engine-photos.com XSS vulnerability

Open Bug Bounty ID: OBB-697205 Description| Value ---|--- Affected Website:| fire-engine-photos.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Amazon Kindle Fire HD(3rd) Fire OS Denial of Service Vulnerability (CNVD-2019-27570)

The Amazon Kindle Fire HD 3rd is the third generation of the Fire tablet product from Amazon.com USA, for which Fire OS is the operating system used. A denial of service vulnerability exists in kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component of the Amazon Kindle Fire HD3rd Fir...

Amazon Kindle Fire HD(3rd) Fire OS Denial of Service Vulnerability

The Amazon Kindle Fire HD 3rd is the third generation of the Fire tablet product from Amazon.com USA, for which Fire OS is the operating system used. A denial of service vulnerability exists in kernel/omap/drivers/mfd/twl6030-gpadc.c in the kernel component of the Amazon Kindle Fire HD3rd Fire OS...

Amazon Kindle Fire HD(3rd) Fire OS Denial of Service Vulnerability (CNVD-2019-27569)

The Amazon Kindle Fire HD 3rd is the third generation of the Fire tablet product from Amazon.com USA, for which Fire OS is the operating system used. A denial of service vulnerability exists in kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component of the Amazon Kindle Fire HD3rd Fir...

Amazon Kindle Fire HD(3rd) Fire OS Denial of Service Vulnerability (CNVD-2019-27572)

The Amazon Kindle Fire HD 3rd is the third generation of the Fire tablet product from Amazon USA, for which Fire OS is the operating system used. A denial of service vulnerability exists in kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component of the Amazon Kindle Fire HD3rd Fire OS...

Amazon Kindle Fire HD(3rd) Fire OS Denial of Service Vulnerability (CNVD-2019-27568)

The Amazon Kindle Fire HD 3rd is the third generation of the Fire tablet product from Amazon.com USA, for which Fire OS is the operating system used. A denial of service vulnerability exists in kernel/omap/drivers/rpmsg/rpmsgomx.c in the kernel component of the Amazon Kindle Fire HD3rd Fire OS. A...

Amazon Kindle Fire HD(3rd) Fire OS Denial of Service Vulnerability (CNVD-2019-27567)

The Amazon Kindle Fire HD 3rd is the third generation of the Fire tablet product from Amazon.com USA, for which Fire OS is the operating system used. A denial of service vulnerability exists in kernel/omap/drivers/video/omap2/dsscomp/device.c in the kernel component of the Amazon Kindle Fire HD3r...

Amazon Kindle Fire HD(3rd) Fire OS Denial of Service Vulnerability (CNVD-2019-27571)

The Amazon Kindle Fire HD 3rd is the third generation of the Fire tablet product from Amazon.com USA, for which Fire OS is the operating system used. A denial of service vulnerability exists in kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component of the Amazon Kindle Fire HD3rd Fir...

CVE-2018-11021

kernel/omap/drivers/video/omap2/dsscomp/device.c in the kernel component in Amazon Kindle Fire HD3rd Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/dsscomp with the command 1118064517 and cause a kernel crash...

CVE-2018-11025

kernel/omap/drivers/mfd/twl6030-gpadc.c in the kernel component in Amazon Kindle Fire HD3rd Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/twl6030-gpadc with the command 24832 and cause a kernel crash...

CVE-2018-11022

kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD3rd Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3224132973 and cause a kernel crash...