ThreatsDay Bulletin: DDR5 Bot Scalping, Samsung TV Tracking, Reddit Privacy Fine & More

Some weeks in cybersecurity feel routine. This one doesn’t. Several new developments surfaced over the past few days, showing how quickly the threat landscape keeps shifting. Researchers uncovered fresh activity, security teams shared new findings, and a few unexpected moves from major tech...

EUVD-2022-47572

Malicious code in bioql PyPI...

CVE-2022-44636

The Samsung TV 2021 and 2022 model smart remote control allows attackers to enable microphone access via Bluetooth spoofing when a user is activating remote control by pressing a button. This is fixed in xxx72510, E9172511 for 2021 models, xxxA1000, 4x2A0200 for 2022 models...

CVE-2022-44636

The Samsung TV 2021 and 2022 model smart remote control allows attackers to enable microphone access via Bluetooth spoofing when a user is activating remote control by pressing a button. This is fixed in xxx72510, E9172511 for 2021 models, xxxA1000, 4x2A0200 for 2022 models...

Design/Logic Flaw

The Samsung TV 2021 and 2022 model smart remote control allows attackers to enable microphone access via Bluetooth spoofing when a user is activating remote control by pressing a button. This is fixed in xxx72510, E9172511 for 2021 models, xxxA1000, 4x2A0200 for 2022 models...

CVE-2022-44636

The Samsung TV 2021 and 2022 model smart remote control allows attackers to enable microphone access via Bluetooth spoofing when a user is activating remote control by pressing a button. This is fixed in xxx72510, E9172511 for 2021 models, xxxA1000, 4x2A0200 for 2022 models...

CVE-2022-44636

The Samsung TV 2021 and 2022 model smart remote control allows attackers to enable microphone access via Bluetooth spoofing when a user is activating remote control by pressing a button. This is fixed in xxx72510, E9172511 for 2021 models, xxxA1000, 4x2A0200 for 2022 models...

Remote for Samsung TV/Blu-Ray - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Remote for Samsung TV/Blu-Ray published at the 'play' market has multiple vulnerabilities...

TV Remote for Samsung - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application TV Remote for Samsung published at the 'play' market has multiple vulnerabilities...

SAMSUNG TV & Remote (IR) - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application SAMSUNG TV & Remote IR published at the 'play' market has multiple vulnerabilities...

Samsung TV Media Player - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Samsung TV Media Player published at the 'play' market has multiple vulnerabilities...

Remote for Samsung TV - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Remote for Samsung TV published at the 'play' market has multiple vulnerabilities...

TV (Samsung) Remote Control - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application TV Samsung Remote Control published at the 'play' market has multiple vulnerabilities...

PlayTo Samsung TV - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application PlayTo Samsung TV published at the 'play' market has multiple vulnerabilities...

Samsung TV DoS

Crash on oversized GET request...

Samsung PS50C7700 TV - Denial of Service

Samsung PS50C7700 TV - Denial of Service !/usr/bin/python Exploit Title: Samsung TV Denial of Service DoS Attack Date: 07/21/2013 Exploit Author: Malik Mesellem - @MMEIT - http://www.itsecgames.com CVE Number: CVE-2013-4890 Vendor Homepage: http://www.samsung.com Description: Resets some Samsung...

Samsung PS50C7700 TV - Denial of Service

The DMCRUIS/0.1 web server on Samsung TVs suffers from a denial of service vulnerability. !/usr/bin/python Exploit Title: Samsung TV Denial of Service DoS Attack Date: 07/21/2013 Exploit Author: Malik Mesellem - @MMEIT - http://www.itsecgames.com CVE Number: CVE-2013-4890 Vendor Homepage:...

Samsung PS50C7700 TV - Denial of Service

!/usr/bin/python Exploit Title: Samsung TV Denial of Service DoS Attack Date: 07/21/2013 Exploit Author: Malik Mesellem - @MMEIT - http://www.itsecgames.com CVE Number: CVE-2013-4890 Vendor Homepage: http://www.samsung.com Description: Resets some Samsung TVs The web server DMCRUIS/0.1 on port...

CVE-2013-4890

The DMCRUIS/0.1 web server on the Samsung PS50C7700 TV allows remote attackers to cause a denial of service daemon crash via a long URI to TCP port 5600...

Samsung TV buffer overflow

Buffer overflow on TCP/7676 SOAPACTION request processing...