United States Sues Edward Snowden and You'd be Surprised to Know Why

The United States government today filed a lawsuit against Edward Snowden, a former contractor for the CIA and NSA government agencies who made headlines worldwide in 2013 when he fled the country and leaked top-secret information about NSA's global and domestic surveillance activities. And you...

United States Sues Edward Snowden and You'd be Surprised to Know Why

The United States government today filed a lawsuit against Edward Snowden, a former contractor for the CIA and NSA government agencies who made headlines worldwide in 2013 when he fled the country and leaked top-secret information about NSA's global and domestic surveillance activities. And you...

CVE-2014-10374

On Fitbit activity-tracker devices, certain addresses never change. According to the popets-2019-0036.pdf document, this leads to "permanent trackability" and "considerable privacy concerns" without a user-accessible anonymization feature. The devices, such as Charge 2, transmit Bluetooth Low...

Design/Logic Flaw

On Fitbit activity-tracker devices, certain addresses never change. According to the popets-2019-0036.pdf document, this leads to "permanent trackability" and "considerable privacy concerns" without a user-accessible anonymization feature. The devices, such as Charge 2, transmit Bluetooth Low...

US Journalist Detained When Returning to US

Pretty horrible story of a US journalist who had his computer and phone searched at the border when returning to the US from Mexico. After I gave him the password to my iPhone, Moncivias spent three hours reviewing hundreds of photos and videos and emails and calls and texts, including encrypted...

CVE-2019-12789

An issue was discovered on Actiontec T2200H T2200H-31.128L.08 devices, as distributed by Telus. By attaching a UART adapter to the UART pins on the system board, an attacker can use a special key sequence Ctrl-\ to obtain a shell with root privileges. After gaining root access, the attacker can...

CVE-2019-12789

An issue was discovered on Actiontec T2200H T2200H-31.128L.08 devices, as distributed by Telus. By attaching a UART adapter to the UART pins on the system board, an attacker can use a special key sequence Ctrl-\ to obtain a shell with root privileges. After gaining root access, the attacker can...

HackerOne: Race Condition leads to undeletable group member

Hi, Summary: There exists a Race Condition in which the user can add themselves twice to a group which will make them unremovable from group. They themselves cannot remove themselves from the group as well as the group leader cannot remove that user from the group. Ofcourse this is a low severity...

Toshiba VFAS3-4055PCE ASD Drive Detection

Binary data 757959.prm...

Toshiba VFAS3-4007PCE ASD Drive Detection

Binary data 757955.prm...

Toshiba VFAS3-4750PCE ASD Drive Detection

Binary data 757969.prm...

Toshiba VFS15S-2007PL-W1 ASD Drive Detection

Binary data 757972.prm...

Toshiba VFAS3-4450PCE ASD Drive Detection

Binary data 757967.prm...

Toshiba VFAS3-4004PCE AS3 UL Type 12/IP55 Adjustable Speed Drive Detection

Binary data 757954.prm...

Toshiba VFAS3-4370PCE ASD Drive Detection

Binary data 757966.prm...

Toshiba VFAS3-4015PC ASD DriveE Detection

Binary data 757956.prm...

Toshiba VFAS3-4150PCE ASD Drive Detection

Binary data 757962.prm...

Toshiba VFS15S-2004PL-W1 ASD Drive Detection

Binary data 757971.prm...

Toshiba VFS15S-2022PL-W1 ASD Drive Detection

Binary data 757974.prm...

MyBB Trash Bin Plugin 1.1.3 - Cross-Site Scripting / Cross-Site Request Forgery

Exploit for php platform in category web applications Exploit Title: MyBB Trash Bin Plugin 1.1.3 - Cross-Site Scripting / CSRF Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://community.mybb.com/mods.php?action=view&pid=957 Version: 1.1.3 Tested on: Ubuntu 18.04 CVE:...