Radio Hack Box - Tool to Demonstrate Vulnerabilities in Wireless Input Devices

The SySS Radio Hack Box is a proof-of-concept software tool to demonstrate the replay and keystroke injection vulnerabilities of the wireless keyboard Cherry B.Unlimited AES. Requirements Raspberry Pi Raspberry Pi Radio Hack Box shield a LCD, some LEDs, and some buttons nRF24LU1+ USB radio dongle...

squeezeboxradio.logitech.com XSS vulnerability

Vulnerable URL: http://squeezeboxradio.logitech.com/search/?keyword=--%3E%22%3E+%3C%22+%3E+%22+%3C++%22+.%2C+%22+%3C+%3E+%22+%3C%2Fscript%3E%3C%2Ftitle%3E%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...

12days.logitech.com XSS vulnerability

Vulnerable URL: http://12days.logitech.com/zeepunjabi/search/?keyword=--%3E%22%3E+%3C%22+%3E+%22+%3C++%22+.%2C+%22+%3C+%3E+%22+%3C%2Fscript%3E%3C%2Ftitle%3E%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...

unifyingconfigurator.logitech.com XSS vulnerability

Vulnerable URL: http://unifyingconfigurator.logitech.com/zeetv/search/?keyword=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

xgames.logitech.com XSS vulnerability

Vulnerable URL: http://xgames.logitech.com/zeecinema/search/?keyword=--%3E%22%3E+%3C%22+%3E+%22+%3C++%22+.%2C+%22+%3C+%3E+%22+%3C%2Fscript%3E%3C%2Ftitle%3E%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...

CVE-2016-7915

The hidinputfield function in drivers/hid/hid-core.c in the Linux kernel before 4.6 allows physically proximate attackers to obtain sensitive information from kernel memory or cause a denial of service out-of-bounds read by connecting a device, as demonstrated by a Logitech DJ receiver...

DEBIAN-CVE-2016-7915

The hidinputfield function in drivers/hid/hid-core.c in the Linux kernel before 4.6 allows physically proximate attackers to obtain sensitive information from kernel memory or cause a denial of service out-of-bounds read by connecting a device, as demonstrated by a Logitech DJ receiver...

Out-of-bounds

The hidinputfield function in drivers/hid/hid-core.c in the Linux kernel before 4.6 allows physically proximate attackers to obtain sensitive information from kernel memory or cause a denial of service out-of-bounds read by connecting a device, as demonstrated by a Logitech DJ receiver...

CVE-2016-7915

The hidinputfield function in drivers/hid/hid-core.c in the Linux kernel before 4.6 allows physically proximate attackers to obtain sensitive information from kernel memory or cause a denial of service out-of-bounds read by connecting a device, as demonstrated by a Logitech DJ receiver...

UBUNTU-CVE-2016-7915

The hidinputfield function in drivers/hid/hid-core.c in the Linux kernel before 4.6 allows physically proximate attackers to obtain sensitive information from kernel memory or cause a denial of service out-of-bounds read by connecting a device, as demonstrated by a Logitech DJ receiver...

CVE-2016-7915

The hidinputfield function in drivers/hid/hid-core.c in the Linux kernel before 4.6 allows physically proximate attackers to obtain sensitive information from kernel memory or cause a denial of service out-of-bounds read by connecting a device, as demonstrated by a Logitech DJ receiver...

Logitech Wireless Combo MK520 Security Bypass Vulnerability

The Logitech Wireless Combo MK520 is a wireless desktop kit that includes a mouse and keyboard from Logitech USA. A security bypass vulnerability exists in Logitech Wireless Combo MK520. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

Logitech K520 Crypto Issues / Replay Attacks

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2016-044 Product: K520 Keyboard of Wireless Combo MK520 Manufacturer: Logitech Affected Versions: Model Y-R0012 Tested Versions: Model Y-R0012 Vulnerability Type: Cryptographic Issues CWE-310 Insufficient Protection against Replay...

The vulnerability of the Linux operating system, which allows a malicious individual to trigger a local service failure

In the HID driver for various Logitech devices, there is no mechanism for cleaning the entered information in real-time. This leads to a local failure in service provision...

support.logitech.com XSS vulnerability

Open Bug Bounty ID: OBB-163660 Description| Value ---|--- Affected Website:| support.logitech.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Logitech Arx Control - Certificates or keys found, Customized SSL, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Logitech Arx Control published at the 'play' market has multiple vulnerabilities...

Multiple wireless keyboard/mouse devices use an unsafe proprietary wireless protocol

Overview Wireless keyboard and mouse devices from multiple vendors use proprietary wireless protocols that are not properly secured. Description CWE-311: Missing Encryption of Sensitive Data Multiple wireless input devices keyboard and mouse use a proprietary wireless protocol on the 2.4 GHz ISM...

Logitech Unifying Receiver Key Injection (MouseJack)

The remote Windows host has used a Logitech Unifying Receiver wireless USB device with firmware version 12.01 or 12.03. It is potentially affected by a wireless key injection vulnerability that allows a physically local attacker to send keystrokes to the host. Note that Nessus cannot determine wh...

12days.logitech.com XSS vulnerability

Vulnerable URL: http://12days.logitech.com/zeetv/search/?keyword= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 3 VIP website status:| No...

Logitech Webcam Software 1.1 - eReg.exe SEH/Unicode 缓存溢出漏洞

No description provided by source...