Fast Random Bit Generation

Science has a paper and commentary on generating 250 random terabits per second with a laser. I dont know how cryptographically secure they are, but that can be cleaned up with something like Fortuna. EDITED TO ADD 3/12: Here are free versions of the paper and the commentary...

i-SENSYS MF237w Information Disclosure Vulnerability

i-SENSYS MF237w is a 4-in-1 multifunction laser printer from Canon for small offices. i-SENSYS MF237w 06.07 is vulnerable to an information disclosure. The vulnerability stems from improper handling of inconsistent length parameters by the IPv4/ICMPv4 component. An attacker could exploit the...

Laser-Based Hacking from Afar Goes Beyond Amazon Alexa

Imagine someone hacking into an Amazon Alexa device using a laser beam and then doing some online shopping using that person account. This is a scenario presented by a group of researchers who are exploring why digital home assistants and other sensing systems that use sound commands to perform...

laser-physics.co.kr Cross Site Scripting vulnerability OBB-1391152

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

laser-star.co.kr Cross Site Scripting vulnerability OBB-1369765

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

laser-star.co.kr Cross Site Scripting vulnerability OBB-1363242

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

laser-star.co.kr Cross Site Scripting vulnerability OBB-1350853

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

canberraeyelaser.com.au Cross Site Scripting vulnerability OBB-1226128

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

canberraeyelaser.com.au Cross Site Scripting vulnerability OBB-1219484

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-10276

The password for the safety PLC is the default and thus easy to find in manuals, etc.. This allows a manipulated program to be uploaded to the safety PLC, effectively disabling the emergency stop in case an object is too close to the robot. Navigation and any other components dependent on the las...

Hardcoded credentials

The password for the safety PLC is the default and thus easy to find in manuals, etc.. This allows a manipulated program to be uploaded to the safety PLC, effectively disabling the emergency stop in case an object is too close to the robot. Navigation and any other components dependent on the las...

CVE-2020-10276

CVE-2020-10276 involves improper access control due to default passwords on the SICK safety PLC in MiR robots. The MiR 2.x line ships with insecure default credentials, which could allow an attacker on the internal network to manipulate the safety PLC and disable the emergency stop, potentially e...

CVE-2020-10276 RVD#2558: Default credentials on SICK PLC allows disabling safety features

The password for the safety PLC is the default and thus easy to find in manuals, etc.. This allows a manipulated program to be uploaded to the safety PLC, effectively disabling the emergency stop in case an object is too close to the robot. Navigation and any other components dependent on the las...

HP Printers Multiple Vulnerabilities - Ripple20 (HPSBPI03666)

Multiple HP printers are vulnerable to multiple vulnerabilities in the Treck IP stack Ripple20. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Aqua-Fi – New optical networks can deliver Internet underwater

By Deeba Ahmed Aqua-Fi is a technology based on lights and laser beams. This is a post from HackRead.com Read the original post: Aqua-Fi - New optical networks can deliver Internet underwater...

laser-site.pt Improper Access Control vulnerability

Security Researcher MiguelSantareno Helped patch 1012 vulnerabilities Received 12 Coordinated Disclosure badges Received 19 recommendations , a holder of 12 badges for responsible and coordinated disclosure, found a security vulnerability affecting laser-site.pt website and its users. Following...

ASUS ZenFone 3 Laser Access Control Error Vulnerability

The ASUS ZenFone 3 Laser is a smartphone from Asus ASUS of Taiwan, China. An access control error vulnerability exists in ASUS ZenFone 3 Laser. The vulnerability arises from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker could...

CVE-2019-15411

The Asus ZenFone 3 Laser Android device with a build fingerprint of asus/WWmsm8937/msm8937:7.1.1/NMF26F/WW32.40.106.11420180928:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app versionCode=1570000020, versionName=7.0.0.4170901 that allows other...

Command injection

The Asus ZenFone 3 Laser Android device with a build fingerprint of asus/WWmsm8937/msm8937:7.1.1/NMF26F/WW32.40.106.11420180928:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app versionCode=1570000020, versionName=7.0.0.4170901 that allows other...

CVE-2019-15411

CVE-2019-15411 affects the Asus ZenFone 3 Laser running Android 7.1.1 (build asus/WW_msm8937/msm8937:7.1.1…). A pre-installed app, com.asus.loguploaderproxy (v7.0.0.4_170901), exposes an accessible component that enables command execution by other pre-installed apps. These apps can obtain signatu...