425 matches found
Pixar OpenUSD Binary File Format Compressed Value Reps Code Execution Vulnerabilities
Summary A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 while parsing compressed value rep arrays in binary USD files. A specially crafted malformed file can trigger a heap overflow, which can result in remote code execution. To trigger this vulnerability, the victim needs to acce...
Augmented Reality <= 1.2.0 - Unauthenticated PHP File Upload leading to RCE
The elFinder connector used allows upload of PHP files as the 'uploadAllow' options contains 'text/x-php'. This allows an unauthenticated user to upload PHP files, leading to a RCE vulnerability. The issue is similar to https://wpscan.com/vulnerability/10389 PoC POST...
WordPress Augmented Reality plugin <= 1.2.0 - Unauthenticated PHP File Upload leading to Remote Code Execution (RCE) vulnerability
Unauthenticated PHP File Upload leading to Remote Code Execution RCE vulnerability found by Robert Wiggins in WordPress Augmented Reality plugin versions = 1.2.0. Solution Note from wordpress.org plugin repository: This plugin has been closed as of September 3, 2020 and is not available for...
Augmented Reality <= 1.2.0 - Unauthenticated PHP File Upload leading to RCE
The elFinder connector used allows upload of PHP files as the 'uploadAllow' options contains 'text/x-php'. This allows an unauthenticated user to upload PHP files, leading to a RCE vulnerability. The issue is similar to https://wpscan.com/vulnerability/10389 POST...
October 1, 2020—KB4577063 (OS Build 19041.546) Preview
None None...
reality.gaming.free.fr Cross Site Scripting vulnerability OBB-1334845
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
reality-xp.com Cross Site Scripting vulnerability OBB-1319292
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Reality < 2.5.6 - Multiple Reflected Cross-Site Scripting (XSS)
An Unauthenticated & Authenticated Reflected XSS vulnerabilities was discovered in the Reality theme through 2.5.3 and 2.5.5 for WordPress. PoC Unauthenticated Reflected XSS: http://reality.inwavethemes.com/properties/?status==1%22--%3E=1%22--%3E%3Cimg%20src=x%20onerror=alertXSS%3E v 2.5.5...
WordPress Reality premium theme <= 2.5.5 - Multiple Reflected Cross-Site Scripting (XSS) vulnerabilities
Multiple Reflected Cross-Site Scripting XSS vulnerabilities found by Vlad Vector in WordPress Reality premium theme versions = 2.5.5. Solution Update the WordPress Reality premium theme to the latest available version at least 2.5.6...
June 9, 2020—KB4557957 (OS Build 19041.329)
None None...
Windows Feedback Hub Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Feedback Hub improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit this vulnerability, an attacker would first have to log on to the...
Facebook Oculus Desktop Elevation of Privilege Vulnerability
Facebook Oculus Desktop is a virtual desktop application from the American company Facebook that supports the operation of computers in VR. A security vulnerability exists in previous versions of Facebook Oculus Desktop 1.44.0.32849 for Windows-based platforms. The vulnerability can be exploited ...
February 27, 2020—KB4535996 (OS Builds 18362.693 and 18363.693)
None None...
Misleading cybersecurity lessons from pop culture: how Hollywood teaches to hack
In pop culture, cybercrimes are often portrayed as mysterious and unrealistic. Hackers are enigmatic and have extraordinary tech abilities. They can discover top secrets in a short time and type at breakneck speed to hack into a database. In real life, though, hacking is not that straightforward...
Watch as virtual reality helps mom meet her deceased daughter
By Waqas The team used photogrammetry, virtual reality, and motion capture to create the daughter who passed away in 2016. This is a post from HackRead.com Read the original post: Watch as virtual reality helps mom meet her deceased daughter...
WordPress Reality theme <= 2.5.1 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability
Unauthenticated Reflected Cross-Site Scripting XSS vulnerability found by m0ze in WordPress Reality premium theme versions = 2.5.1. Solution 2020 February 7 - the theme is no more available on Theme forest, we were unable to find information about the patched version...
January 23, 2020—KB4534321 (OS Build 17763.1012)
None None...
These smart contact lenses equip your eyes with augmented reality
By Waqas So far we have seen smart contact lenses in thriller and sci-fi movies but now... This is a post from HackRead.com Read the original post: These smart contact lenses equip your eyes with augmented reality...
Reality < 2.5.3 - Unauthenticated Reflected XSS
Reflected XSS was discovered in the «Reality | Estate Multipurpose WordPress Theme», tested version — v2.5.1 Edit WPScanTeam: January 16th, 2020 - Report Received & Envato Contacted January 17th, 2020 - Envato Investigating February 6th, 2020 - Envato Contacted Again for Updates February 7th, 202...
Reality < 2.5.3 - Unauthenticated Reflected XSS
Reflected XSS was discovered in the «Reality | Estate Multipurpose WordPress Theme», tested version — v2.5.1 Edit WPScanTeam: January 16th, 2020 - Report Received & Envato Contacted January 17th, 2020 - Envato Investigating February 6th, 2020 - Envato Contacted Again for Updates February 7th, 202...