New sextortion scam claims to record you with hacked Google Nest cam

By Waqas The difference between conventional sextortion campaigns and this one is that the victim has to go through... This is a post from HackRead.com Read the original post: New sextortion scam claims to record you with hacked Google Nest cam...

SaltStack Salt Command Injection Vulnerability

SaltStack Salt is a set of open source tools for managing infrastructure from SaltStack. The tool provides configuration management, remote execution, and more. A command injection vulnerability exists in the salt-api NEST API ssh client enabled in SaltStack Salt 2019.2.0 and earlier. The...

Google Boots Security Camera Maker From Nest Hub After Private Images Go Public

China-based electronics company Xiaomi said it has fixed a “cache update” issue for its Xiaomi Mijia smart camera after a Reddit user claims that attempts to view Xiaomi camera footage on his Google Nest Hub instead showed videos of strangers. The issue was first reported by a user on Reddit who...

Xiaomi Cameras Connected to Google Nest Expose Video Feeds From Others

Internet-connected devices have been one of the most remarkable developments that have happened to humankind in the last decade. Although this development is a good thing, it also stipulates a high security and privacy risk to personal information. In one such recent privacy mishap, smart IP...

Xiaomi Cameras Connected to Google Nest Expose Video Feeds From Others

Internet-connected devices have been one of the most remarkable developments that have happened to humankind in the last decade. Although this development is a good thing, it also stipulates a high security and privacy risk to personal information. In one such recent privacy mishap, smart IP...

CVE-2019-5043

An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ Indoor, version 4620002. A set of TCP connections can cause unrestricted resource allocation, resulting in a denial of service. An attacker can connect multiple times to trigger this vulnerability...

CVE-2019-5043

An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ Indoor, version 4620002. A set of TCP connections can cause unrestricted resource allocation, resulting in a denial of service. An attacker can connect multiple times to trigger this vulnerability...

Design/Logic Flaw

An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ Indoor, version 4620002. A set of TCP connections can cause unrestricted resource allocation, resulting in a denial of service. An attacker can connect multiple times to trigger this vulnerability...

CVE-2019-5043

An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ Indoor, version 4620002. A set of TCP connections can cause unrestricted resource allocation, resulting in a denial of service. An attacker can connect multiple times to trigger this vulnerability...

CVE-2019-5043

The Nest Cam IQ Indoor Weave TCP connection denial-of-service (CVE-2019-5043) affects version 4620002. A fixed pool of TCP endpoints with no idle timeout leads to resource exhaustion when multiple connections are opened, denying service to other clients. TALOS advisories describe the vulnerabilit...

UBUNTU-CVE-2019-16089

An issue was discovered in the Linux kernel through 5.2.13. nbdgenlstatus in drivers/block/nbd.c does not check the nlaneststartnoflag return value...

Google Nest Cam IQ Indoor Resource Management Error Vulnerability

Google Nest Cam IQ Indoor is an indoor camera from Google USA. A resource management error vulnerability in the Weave daemon in Google Nest Cam IQ Indoor version 4620002, which arises from a networked system or product mismanagement of system resources e.g., memory, disk space, files, etc., can b...

Threat Source newsletter (Aug. 22)

Newsletter compiled by Jon Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. A lot of people may think that cyber insurance is this new, unexplored field that carries a lot of questions. But did you know that thes...

Google Nest Cam IQ Indoor Authorization Issues Vulnerability

Google Nest Cam IQ Indoor is an indoor camera from Google USA. Google Nest Cam IQ Indoor is vulnerable to authorization issues. An attacker could use this vulnerability to gain elevated Weave access and potentially take full control of the device...

Openweave-core and Google Nest Cam IQ Indoor Input Validation Error Vulnerability

Openweave-core is a home LAN application stack for asynchronous, symmetric, device-to-device, and device-to-cloud communication for control path and data path messaging.Google Nest Cam IQ Indoor is an indoor camera from Google USA. An input validation error vulnerability exists in Openweave-core...

Google Nest Cam IQ Indoor Input Validation Error Vulnerability

Google Nest Cam IQ Indoor is an indoor camera from Google USA. Google Nest Cam IQ Indoor suffers from an input validation error vulnerability. An attacker could exploit this vulnerability by sending specially crafted packets to cause a denial of service...

Google Nest Cam IQ Indoor Access Control Error Vulnerability

Google Nest Cam IQ Indoor is an indoor camera from Google USA. An access control error vulnerability exists in Google Nest Cam IQ Indoor. An attacker can exploit this vulnerability to shut down an arbitrary Weave Exchange Session, resulting in a denial of service...

Google Nest Cam IQ Indoor Buffer Overflow Vulnerability

Google Nest Cam IQ Indoor is an indoor camera from Google USA. Google Nest Cam IQ Indoor suffers from a buffer overflow vulnerability. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among others...

CVE-2019-5034

An exploitable information disclosure vulnerability exists in the Weave Legacy Pairing functionality of Nest Cam IQ Indoor version 4620002. A set of specially crafted weave packets can cause an out of bounds read, resulting in information disclosure. An attacker can send packets to trigger this...

CVE-2019-5035

An exploitable information disclosure vulnerability exists in the Weave PASE pairing functionality of the Nest Cam IQ Indoor, version 4620002. A set of specially crafted weave packets can brute force a pairing code, resulting in greater Weave access and potentially full device control. An attacke...