PT-2018-10248

Name of the Vulnerable Software and Affected Versions Fire OS version 4.5.5.3 Description The issue allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3222560159 and cause a kernel crash. Recommendations For Fire OS version 4.5.5.3, ...

PT-2018-10245

Name of the Vulnerable Software and Affected Versions Fire OS version 4.5.5.3 Description The issue allows attackers to inject a crafted argument via the argument of an ioctl on device file "/dev/rpmsg-omx1" with the command 3221772291, and cause a kernel crash. This is due to a flaw in the kerne...

PT-2018-10247

Name of the Vulnerable Software and Affected Versions Fire OS version 4.5.5.3 Description The issue allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3224132973 and cause a kernel crash. Recommendations For Fire OS version 4.5.5.3, ...

PT-2018-10243

Name of the Vulnerable Software and Affected Versions Fire OS version 4.5.5.3 Description The issue allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3221773726 and cause a kernel crash. Recommendations For Fire OS version 4.5.5.3, ...

PT-2018-10246

Name of the Vulnerable Software and Affected Versions Fire OS version 4.5.5.3 Description The issue allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/dsscomp with the command 1118064517 and cause a kernel crash. Recommendations For Fire OS version 4.5.5.3, ...

XSS Vulnerability in the Fire Safety Cadastralized Management System for Social Units of the Fire Protection Bureau of the Ministry of Public Security

The Fire Safety Cadastre Management System for Social Units is a special software for fire management developed by the Public Security Fire Bureau and promoted by the provincial fire brigades, which facilitates the fire agencies to keep abreast of the fire safety status of social units. Public...

Amazon Fire TV & Fire TV Stick hit by crypto mining Android malware

By Waqas A traditional malware aims at stealing user data or keep This is a post from HackRead.com Read the original post: Amazon Fire TV & Fire TV Stick hit by crypto mining Android malware...

kingwoodserviceassociation.org XSS vulnerability

Open Bug Bounty ID: OBB-618156 Description| Value ---|--- Affected Website:| kingwoodserviceassociation.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Ransomware Attack Wipes Out Police and Fire Department Data

By Waqas The city of Riverside’s Police and Fire department has been This is a post from HackRead.com Read the original post: Ransomware Attack Wipes Out Police and Fire Department Data...

Arbitrary Code Execution Vulnerability in the HTML5 Responsive Website Building System of Huizhou Fire Phoenix Network Technology Co.

Huizhou Fire Phoenix Network Technology Co., Ltd. provides one-stop website production, website promotion, APP development, WeChat development, data analysis, software development, dynamic creative, cell phone website, Taobao store permanent code decoration, FLASH animation, to program developmen...

50states.com XSS vulnerability

Open Bug Bounty ID: OBB-577985 Description| Value ---|--- Affected Website:| 50states.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Amazon Fire OS 'havok_write' function stack buffer overflow vulnerability

Amazon Fire OS is a set of mobile operating systems based on the Android platform from Amazon USA. A stack buffer overflow vulnerability exists in the 'havokwrite' function in the drivers/staging/havok/havok.c file in Amazon Fire OS. An attacker can exploit this vulnerability by sending a long...

Pirated Version of Fire and Fury Book Loaded with Malware

By Uzair Amir Another day, another malware scam This time, the pirated This is a post from HackRead.com Read the original post: Pirated Version of Fire and Fury Book Loaded with Malware...

The vulnerability of the havok_write function (drivers/staging/havok/havok.c) in the Amazon Fire operating system allows a hacker to cause a service failure or exert other effects.

The vulnerability of the havokwrite function drivers/staging/havok/havok.c in the Amazon Fire operating system is related to buffer overflows in the stack. Exploiting this vulnerability can allow a remote attacker to cause service interruptions or other effects by sending a long string of data to...

SQL Injection Vulnerability in Fire Safety Cadastralized Management System for Social Units

The fire safety household management system of social units is a special software for fire management developed by the Public Security Fire Bureau and promoted by the provincial fire brigades to help the public security fire departments and units to better organize and carry out fire safety work,...

seattle-theatre.com XSS vulnerability

Open Bug Bounty ID: OBB-360963 Description| Value ---|--- Affected Website:| seattle-theatre.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

DumpsterFire Toolset: Security Incidents In A Box

The DumpsterFire Toolset is a modular, menu-driven, cross-platform tool for building repeatable, time-delayed, distributed security events. Easily create custom event chains for Blue Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support a...

Locky Gets Updated to ‘Ykcol’, Part of Rapid-Fire Spam Campaigns

Cybercriminals behind the Locky ransomware have revamped the malware’s code three times in 30-day period and blasted out massive spam campaigns. According to researchers at Trustwave, the latest variant of Locky ransomware is called Ykcol that’s Locky spelled backwards and was part of a Sept. 19...

fire-rescue.gov.bn XSS vulnerability

Open Bug Bounty ID: OBB-303281 Description| Value ---|--- Affected Website:| fire-rescue.gov.bn Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CouchPotato: CIA Hacking Tool to Remotely Spy On Video Streams in Real-Time

After disclosing CIA's strategies to hijack and manipulate webcams and microphones to corrupt or delete recordings, WikiLeaks has now published another Vault 7 leak, revealing CIA's ability to spy on video streams remotely in real-time. Dubbed 'CouchPotato,' document leaked from the CIA details h...