September 26, 2019—KB4517211 (OS Build 18362.387)

None None...

virtualrealitygamesfree.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-970203 Security Researcher Hchabik Helped patch 2469 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting virtualrealitygamesfree.com...

Reality < 2.4.0 - Multiple Persistent XSS

----- Persistent XSS on any property page: ----- Vulnerable input fields: 1 - Description & Price - 'PRICE POSTFIX TEXT' and 'SECOND PRICE POSTFIX TEXT'; 2 - Additional Information - 'TITLE' and 'VALUE'; 3 - Location & Map - 'ADDRESS '. Payload Sample: ----- Persistent XSS on user profile page:...

August 30, 2019—KB4512941 (OS Build 18362.329)

None None...

July 9, 2019—KB4507453 (OS Build 18362.239)

None None...

Medical Virtual Simulation Teaching Experiment Platform Frontend in File Upload Vulnerability

Medical virtual simulation teaching experiment platform system is a virtual reality system with computer virtual reality and digital simulation technology as the core, biosimulation engine, processing factor database, virtual environment interface and other technologies as the support. Learning...

Information leakage vulnerability in the frontend of Morphology Digital Lab Teaching Platform

Morphology digital experimental teaching platform is a virtual reality system with the core of computer virtual reality and digital simulation technology, supported by biosimulation engine, processing factor database, virtual environment interface and other technologies. Morphology digital...

June 11, 2019—KB4503327 (OS Build 17763.557)

None None...

Hacking Virtual Reality – Researchers Exploit Popular Bigscreen VR App

A team of cybersecurity researchers from the University of New Haven yesterday released a video demonstrating how vulnerabilities that most programmers often underestimate could have allowed hackers to evade privacy and security of your virtual reality experience as well as the real world...

Hacking Virtual Reality – Researchers Exploit Popular Bigscreen VR App

A team of cybersecurity researchers from the University of New Haven yesterday released a video demonstrating how vulnerabilities that most programmers often underestimate could have allowed hackers to evade privacy and security of your virtual reality experience as well as the real world...

SQL Injection Vulnerability in Touch Screen Version of VR Visualization and Intelligent Interactive Teaching Cloud Platform of One100

ChuangOne 100VR visualization intelligent interactive teaching cloud platform is based on the Phoenix ChuangOne virtual reality three-dimensional interactive engine running network VR simulation experiments in three-dimensional interactive environment, can realize a large number of parallel users...

CyberVets U.S.A.: The mission after transition

Christopher Marshall, a veteran of the U.S. Navy, currently serves as Director of Cybersecurity Research for Cisco Talos Intelligence Group. As a veteran of the U.S. Navy, I’ve had the opportunity to use some of the greatest technology this country has to offer — from night vision goggles, to...

Palmer Luckey Is Just Getting Started

The Oculus founder on virtual reality, defense tech, biohacking an injured toe...

You bet your mobile app consumers are willing to pay with their smartphone

For almost 10 years, there has been a debate over mobile app versus mobile web. Which strategy is right for your business and will consumers really ever buy something with a mobile device? Some of these questions have been clearly answered with time, but some aspects of the debate continue. The...

NSA Leaker 'Reality Winner' Gets More Than 5 Years in Prison

A former NSA contractor, who pleaded guilty to leaking a classified report on Russian hacking of the 2016 U.S. presidential election to an online news outlet last year, has been sentenced to five years and three months in prison. Reality Winner, a 26-year-old Georgia woman who held a top-secret...

The vulnerability of the Qualcomm Virtual Reality operating system for Android allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Qualcomm Virtual Reality operating system’s Android component is due to insufficient checking of the SetParam command parameters. Exploiting this vulnerability can allow a remote attacker to cause buffer overflows and compromise the confidentiality, integrity, and...

Reality Winner, N.S.A. Contractor, Sentenced to 5+ Years in Leak Case

A former NSA contractor, Reality L. Winner, has plead guilty on charges of leaking classified information, regarding a report on election meddling by Russian operatives in the 2016 U.S. elections. She was charged with espionage and was sentenced to more than five years in prison and three years o...

reality-leuchten.de XSS vulnerability

Open Bug Bounty ID: OBB-607309 Description| Value ---|--- Affected Website:| reality-leuchten.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

March 13, 2018—KB4088776 (OS Build 16299.309)

None None...

March 5, 2018—KB4090913 (OS Build 16299.251)

None None...