Amazon Alexa Secretly Records Children, Lawsuits Allege

A federal lawsuit is alleging that Amazon is recording children who use its Alexa devices, without their consent or knowledge. Alexa is the built-in voice assistant shipped with devices like Amazon Echo, Amazon Dot, Fire TV and some third-party gadgets. “Alexa routinely records and voiceprints...

SDCMS PHP Code Execution Vulnerability

Smoke and Fire Network Technology SDCMS is a PHP and MySQL based enterprise station building content management system CMS by China Smoke and Fire Network Technology. A code injection vulnerability exists in the appadmincontroller hemecontroller.php file in version 1.7 of Smoke and Fire Web...

CVE-2019-7399

Amazon Fire OS before 5.3.6.4 allows a man-in-the-middle attack against HTTP requests for "Terms of Use" and Privacy pages...

CVE-2019-7399

Amazon Fire OS before 5.3.6.4 allows a man-in-the-middle attack against HTTP requests for "Terms of Use" and Privacy pages...

Design/Logic Flaw

Amazon Fire OS before 5.3.6.4 allows a man-in-the-middle attack against HTTP requests for "Terms of Use" and Privacy pages...

CVE-2019-7399

Amazon Fire OS before 5.3.6.4 allows a man-in-the-middle attack against HTTP requests for "Terms of Use" and Privacy pages...

CVE-2019-7399

Vulnerability summary (CVE-2019-7399) : FireOS up to version 5.3.6.3/4 contains a root-cause in the Settings/Terms of Use and Privacy pages where content is loaded without HTTPS. This allows a network-based attacker to perform a man-in-the-middle (MITM) attack to inject malicious content or exfil...

CVE-2019-7399: Origin Validation Error

Amazon Fire OS before 5.3.6.4 allows a man-in-the-middle attack against HTTP requests for "Terms of Use" and Privacy pages...

PT-2019-18581

Name of the Vulnerable Software and Affected Versions Amazon Fire OS versions prior to 5.3.6.4 Description The issue allows a man-in-the-middle attack against HTTP requests for "Terms of Use" and Privacy pages. Recommendations For Amazon Fire OS versions prior to 5.3.6.4, update to version 5.3.6....

FireOS Flaw Allowed Limited Content Injection in Amazon Tablets

A vulnerability in the operating system of Amazon’s Fire Tablets could allow a hacker to inject malicious content into Settings, Legal and Compliance, Terms of Use and Privacy sections of the device. The bug could also allow an adversary to capture the serial number of the tablet. The Fire Tablet...

fire-engine-photos.com XSS vulnerability

Open Bug Bounty ID: OBB-697205 Description| Value ---|--- Affected Website:| fire-engine-photos.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Amazon Kindle Fire HD(3rd) Fire OS Denial of Service Vulnerability

The Amazon Kindle Fire HD 3rd is the third generation of the Fire tablet product from Amazon.com USA, for which Fire OS is the operating system used. A denial of service vulnerability exists in kernel/omap/drivers/mfd/twl6030-gpadc.c in the kernel component of the Amazon Kindle Fire HD3rd Fire OS...

Amazon Kindle Fire HD(3rd) Fire OS Denial of Service Vulnerability (CNVD-2019-27572)

The Amazon Kindle Fire HD 3rd is the third generation of the Fire tablet product from Amazon USA, for which Fire OS is the operating system used. A denial of service vulnerability exists in kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component of the Amazon Kindle Fire HD3rd Fire OS...

Amazon Kindle Fire HD(3rd) Fire OS Denial of Service Vulnerability (CNVD-2019-27571)

The Amazon Kindle Fire HD 3rd is the third generation of the Fire tablet product from Amazon.com USA, for which Fire OS is the operating system used. A denial of service vulnerability exists in kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component of the Amazon Kindle Fire HD3rd Fir...

Amazon Kindle Fire HD(3rd) Fire OS Denial of Service Vulnerability (CNVD-2019-27568)

The Amazon Kindle Fire HD 3rd is the third generation of the Fire tablet product from Amazon.com USA, for which Fire OS is the operating system used. A denial of service vulnerability exists in kernel/omap/drivers/rpmsg/rpmsgomx.c in the kernel component of the Amazon Kindle Fire HD3rd Fire OS. A...

Amazon Kindle Fire HD(3rd) Fire OS Denial of Service Vulnerability (CNVD-2019-27569)

The Amazon Kindle Fire HD 3rd is the third generation of the Fire tablet product from Amazon.com USA, for which Fire OS is the operating system used. A denial of service vulnerability exists in kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component of the Amazon Kindle Fire HD3rd Fir...

Amazon Kindle Fire HD(3rd) Fire OS Denial of Service Vulnerability (CNVD-2019-27567)

The Amazon Kindle Fire HD 3rd is the third generation of the Fire tablet product from Amazon.com USA, for which Fire OS is the operating system used. A denial of service vulnerability exists in kernel/omap/drivers/video/omap2/dsscomp/device.c in the kernel component of the Amazon Kindle Fire HD3r...

Amazon Kindle Fire HD(3rd) Fire OS Denial of Service Vulnerability (CNVD-2019-27570)

The Amazon Kindle Fire HD 3rd is the third generation of the Fire tablet product from Amazon.com USA, for which Fire OS is the operating system used. A denial of service vulnerability exists in kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component of the Amazon Kindle Fire HD3rd Fir...

CVE-2018-11023

kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD 3rd Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3222560159 and cause a kernel crash...

CVE-2018-11024

kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD 3rd Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 1077435789 and cause a kernel crash...