Security Bulletin: Flex System V7000 systems are affected by vulnerabilities in OpenSSL (CVE-2014-0160 and CVE-2014-0076)

Summary Security vulnerabilities have been discovered in OpenSSL. Vulnerability Details CVE-ID: CVE-2014-0160 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the TLS/DTLS heartbeat functionality. An attacker could exploit this vulnerabilit...

Security Bulletin: libuser vulnerabilities affect IBM Storwize V7000 Unified (CVE-2015-3245 and CVE-2015-3246)

Summary Fixes for security vulnerabilities in libuser are available with IBM Storwize V7000 Unified version 1.5.2.2 Vulnerability Details CVEID: CVE-2015-3245 DESCRIPTION: libuser is vulnerable to a denial of service, caused by the failure to properly filter out newline characters by the chfn...

Security Bulletin: OpenSSL vulnerability in IBM Storwize V7000 Unified (CVE-2014-0224)

Summary Security vulnerability in OpenSSL. Vulnerability Details CVEID: CVE-2014-0224 DESCRIPTION: SSL/TLS MITM vulnerability An attacker using a carefully crafted handshake can force the use of weak keying material in OpenSSL SSL/TLS clients and servers. This can be exploited by a...

SimpliSafe Original Security Bypass Vulnerability

SimpliSafe Original is a home security management system. The system includes video surveillance and intrusion alarms, among other things. A security vulnerability exists in SimpliSafe Original. An attacker in close physical proximity could exploit the vulnerability to bypass security protections...

XKCD's Smartphone Security System

Funny...

Edward Snowden’s Haven app turns your laptop into a security system

By Asad Gilani Most sensitive users of technology, especially those in journalism and This is a post from HackRead.com Read the original post: Edward Snowdens Haven app turns your laptop into a security system...

Vulnerability in Amazon Key

Amazon Key is an IoT door lock that can enable one-time access codes for delivery people. To further secure that system, Amazon sells Cloud Cam, a camera that watches the door to ensure that delivery people don't abuse their one-time access privilege. Cloud Cam has been hacked: But now security...

unob.cz XSS vulnerability

Open Bug Bounty ID: OBB-391113 Description| Value ---|--- Affected Website:| unob.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Ruby: Provide a security sistem most fit to our team

Now we want to proof that our security sistem is most fit in this year...

Bank Robbery Tactic

This video purports to be a bank robbery in Kiev. He first threatens a teller, who basically ignores him because she's behind bullet-proof glass. But then the robber threatens one of her co-workers, who is on his side of the glass. Interesting example of a security system failing for an unexpecte...

Hacking A $1500 'Smart Gun' With $15 Magnets

I think we should stop going crazy over the smart things unless it's secure enough to be called SMART—from a toaster, security cameras, and routers to the computers and cars—everything is hackable. But the worst part comes in when these techs just require some cheap and easily available kinds of...

Eltek SmartPack - Backdoor Account Vulnerability

Exploit for hardware platform in category web applications Eltek SmartPack - Backdoor Account Author: Saeed reza Zamanian penetrationtest @ Linkedin Product: Eltek SmartPack Vendor: http://www.eltek.com/ Product Link : http://www.eltek.com/detailproducts.epl?k1=25507&id=1123846 About Product: The...

Generalized s2-045 Remote Code Execution Vulnerability in Frontier Windray Electronic Document Security Management System

Frontier Fenglei electronic document security management system is the use of encryption algorithms for important electronic documents for a variety of different levels of encryption protection, and according to the document protection policy for specific user groups to give access to a variety o...

USN-3247-1: AppArmor vulnerability

Stéphane Graber discovered that AppArmor incorrectly unloaded some profiles when restarted or upgraded, contrary to expected behavior...

ZKTeco ZKAccess Security System 5.3.1 Persistent Cross Site Scripting

i?!-- ZKTeco ZKAccess Security System 5.3.1 Stored XSS Vulnerability Vendor: ZKTeco Inc. | Xiamen ZKTeco Biometric Identification Technology Co.,ltd Product web page: http://www.zkteco.com Affected version: 5.3.12252 Summary: ZKAccess Systems are built on flexible, open technology to provide...

ZKTeco ZKAccess Security System 5.3.1 - Persistent Cross-Site Scripting

Exploit for jsp platform in category web applications !-- ZKTeco ZKAccess Security System 5.3.1 Stored XSS Vulnerability Vendor: ZKTeco Inc. | Xiamen ZKTeco Biometric Identification Technology Co.,ltd Product web page: http://www.zkteco.com Affected version: 5.3.12252 Summary: ZKAccess Systems ar...

KJ65N coal mine remote monitoring and security early warning systems /configs. aspx from unauthorized access vulnerability

No description provided by source...

IBM QRadar SIEM Incorrect Privilege Assignment Local Elevation of Privilege Vulnerability

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. IBM QRadar SIEM...

Database Weak Password Vulnerability in City Security Monitoring DSS System of Zhejiang Dahua Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a supplier of surveillance products and solution service provider. Zhejiang Dahua Technology Co., Ltd. city security monitoring DSS system has a weak password vulnerability in the database, which can be exploited by attackers to obtain database data...

The vulnerability of the Security SiteProtector System’s security protection mechanism allows a hacker to input their own arguments.

The vulnerability of the Security SiteProtector System security system exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a malicious actor, operating remotely, to insert their own commands...