Universal Robots Robot Controllers Remote Code Execution Vulnerability

Universal Robots Robot Controllers is a collaborative robot controller product from Universal Robots, Denmark. A security vulnerability exists in Universal Robots Robot Controllers CB version 3.1 and SW version 3.4.5-100, which originates from the use of TCP ports 3001 through 3003 for listening...

A week in security (May 28 – June 3)

Last week on Labs, we talked about the significance of SEO poisoning in the world of search marketing, blackmail attempts against financial institutions in Canada, voice command flaws in smart assistants, survey and potential phishing scams on Instagram, and the latest changes in Office 365. We...

CVE-2018-9118

exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename parameter...

Directory traversal

exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename parameter...

CVE-2018-9118

exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename parameter...

CVE-2018-9118

The 99 Robots WP Background Takeover Advertisements plugin for WordPress (versions

CVE-2018-9118: Improper Limitation of a Pathname to a Restricted Directory

exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename parameter...

Robots can be hacked with ransomware & curse at customers

By Waqas Exploitable Vulnerability in Softbank’s NAO and Pepper Robots Leads to This is a post from HackRead.com Read the original post: Robots can be hacked with ransomware & curse at customers...

Vulnerability in Robots Can Lead To Costly Ransomware Attacks

CANCUN, Mexico – A vulnerability in Softbank Robotics’ NAO and Pepper robots can lead to costly ransomware attacks that could cause robots deployed in businesses to stop working, curse at customers, or even perform violent movements. The vulnerability was disclosed at Kaspersky Lab’s Security...

How to harden AdwCleaner’s web backend using PHP

More and more applications are moving from desktop to the web, where they are particularly exposed to security risks. They are often tied to a database backend, and thus need to be properly secured, even though most of the time they are designed to restrict access to authenticated users only. PHP...

IRCCloud: Missing robots exclusion header for user uploads

User uploaded text files can be linked from external websites and end up appearing in search engine result pages if you perform a search such as: site:.irccloud-cdn.com ext:txt It's not possible to completely prevent such listings on all search engines, but some search crawlers support the...

Hacking Robots

Researchers have demonstrated hacks against robots, taking over and controlling their camera, speakers, and movements. News article...

Sex Robots Can Be Hacked To Kill You

By Uzair Amir Imagine a scenario where you want to play with a sex This is a post from HackRead.com Read the original post: Sex Robots Can Be Hacked To Kill You...

Grading our Predictions: See how we fared in 1H 2017

In December of last year, we released eight predictions as to what we thought the 2017 cybersecurity landscape would hold. Although we’ve definitely observed new trends and attacks that we didn’t foresee, we’ve also seen several of our predictions play out as anticipated. With only three and a ha...

Experts Show How Easy It Is To Hack Home & Industrial Robots Remotely

By Waqas From IoT to IIoT everything seems vulnerable. A Seattle based This is a post from HackRead.com Read the original post: Experts Show How Easy It Is To Hack Home Industrial Robots Remotely...

Industrial Cobots Might Be The Next Big IoT Security Mess

Researchers at IOActive have found nearly 50 vulnerabilities in industrial collaborative robots, machines that work side-by-side with people in manufacturing and other settings, that can be abused to possibly cause physical harm to workers, or even configured to spy on their surroundings. The...

Join us at Black Hat 2017

Hide your phones, hide your laptops ‘cause they’re hackin’ everyone out here! For the 20th year, on July 26 and 27, thousands of cybersecurity executives, researchers and enthusiasts will descend upon Las Vegas for Black Hat 2017, including some of Trend Micro’s finest. Throughout the week, Trend...

EtherNet/IP Detection (TCP)

A EtherNet/IP Service is running at this host. EtherNet/IP is an industrial network protocol that adapts the Common Industrial Protocol to standard Ethernet. It is widely used in a range industries including factory, hybrid and process to manage the connection between various automation devices...

CVE-2017-6651

A vulnerability in Cisco WebEx Meetings Server could allow unauthenticated, remote attackers to gain information that could allow them to access scheduled customer meetings. The vulnerability is due to an incomplete configuration of the robots.txt file on customer-hosted WebEx solutions and occur...

This Week in Security News

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...