Tencent's Blue Whale Intelligent Cloud suffers from unauthorized access vulnerability

Blue Whale Smart Cloud, or Blue Whale for short, is a sub-brand of Tencent Smart Camp, a division of Tencent's Game Operations Department. It is a set of PaaS-based technology solutions that provides a comprehensive front- and back-office development framework, scheduling engine, public component...

Simon Wisselink Smarty 代码注入漏洞

The Smart template engine is one of the most famous PHP engines in the industry today. It provides an easy-to-manage way to separate business logic from presentation logic. A vulnerability has been reported in the Smart Template Engine, which allows an attacker to write to a cache file via the...

Simon Wisselink Smarty 安全漏洞

The Smart1 template engine is one of the most famous PHP engines in the industry today. It provides an easy-to-manage way to separate business logic from presentation logic. A vulnerability has been reported in the Smart template engine, which allows an attacker to write to a cache file via the...

Mexican Politician Removed Over Alleged Ties to Romanian ATM Skimmer Gang

The leader of Mexicos Green Party has been removed from office following allegations that he received money from a Romanian ATM skimmer gang that stole hundreds of millions of dollars from tourists visiting Mexicos top tourist destinations over the past five years. The scandal is the latest fallo...

SQL Injection Vulnerability in Great Intelligence Fire Protection Digital Monitoring Center Platform

Great Wisdom Fire Digital Monitoring Center Platform is a fire IOT remote monitoring system, which is applicable to the smart fire platform under the new smart city, suitable for city networking, industry networking, large enterprise networking and remote unattended places. There is a SQL injecti...

The Most Commonly Hacked Smart Home Tech

By Waqas There are over 7 billion IoT devices and a big number is vulnerable to cyber-attacks. Here are the most commonly hacked smart home tech. This is a post from HackRead.com Read the original post: The Most Commonly Hacked Smart Home Tech...

Shining a Light on SolarCity: Practical Exploitation of the X2e IoT Device (Part One)

In 2019, Mandiant’s Red Team discovered a series of vulnerabilities present within Digi International’s ConnectPort X2e device, which allows for remote code execution as a privileged user. Specifically, Mandiant’s research focused on SolarCity’s now owned by Tesla rebranded ConnectPort X2e device...

Unpatched ShareIT Android App Flaw Could Let Hackers Inject Malware

Multiple unpatched vulnerabilities have been discovered in SHAREit, a popular app with over one billion downloads, that could be abused to leak a user's sensitive data, execute arbitrary code, and possibly lead to remote code execution. The findings come from cybersecurity firm Trend Micro's...

The vulnerability in the web interface of the Cisco Smart Software Manager On-Prem administration tool allows a perpetrator to execute arbitrary commands.

The vulnerability of the web interface of the Cisco Smart Software Manager On-Prem administration tool is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges remotely...

The vulnerability in the web interface of the Cisco Smart Software Manager On-Prem administration tool allows a perpetrator to execute arbitrary commands.

The vulnerability of the web interface of the Cisco Smart Software Manager On-Prem administration tool is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with elevated privileges remotely...

The vulnerability in the web interface of the Cisco Smart Software Manager On-Prem software management tool allows a perpetrator to redirect users to any desired website.

The vulnerability in the web interface of the Cisco Smart Software Manager On-Prem software management tool relates to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to remotely redirect users to any desired website...

The vulnerability in the web interface of the Cisco Smart Software Manager On-Prem administration tool allows a perpetrator to execute arbitrary commands.

The vulnerability of the web interface of the Cisco Smart Software Manager On-Prem administration tool is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with elevated privileges remotely...

A week in security (February 1 – February 7)

Last week on Malwarebytes Labs, we dug into a load of security events. We first peered into how Fonix ransomware was giving up the ghost, swearing off a life of crime and even apologizing for past actions. We looked at a credit card skimmer that found opportunity in the latest Magento 1 hacking...

Unauthorized Access Vulnerability in 360 Smart Camera PTZ AI Edition Standard Model AP2C

360 Smart Camera PTZ AI Edition Standard Model AP2C is a device under the 360 Smart Home platform, which can help the owner to realize real-time monitoring of the home situation. 360 Smart Camera PTZ AI Edition Standard Model AP2C suffers from an unauthorized access vulnerability, which can be...

The vulnerability in the web interface of the Cisco Smart Software Manager On-Prem administration tool allows a perpetrator to execute arbitrary commands.

The vulnerability of the web interface of the Cisco Smart Software Manager On-Prem administration tool is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with elevated privileges remotely...

The vulnerability in the web interface of the Cisco Smart Software Manager On-Prem administration tool allows a perpetrator to execute arbitrary commands.

The vulnerability of the web interface of the Cisco Smart Software Manager On-Prem administration tool is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges remotely...

GNU Binutils 后置链接漏洞

GNU Binutils GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU community. The programs are primarily designed to work with target files in a variety of formats, and provide linkers, assemblers, and other tools for target files and archives. An...

Unauthorized Access Vulnerability in Xiao Xing Look Smart Camera

Xiao Xing Look Smart Camera is an important device under the ZTE Smart Home platform, which can help the owner to realize real-time monitoring of the home situation. Unauthorized access vulnerability exists in Xiao Xing Look Smart Camera, which can be exploited by attackers to obtain sensitive...

Huawei AIS-BW80H-00 输入验证错误漏洞

Huawei AIS-BW80H-00 is a smart speaker device from Huawei China. Huawei AIS-BW80H-00 is vulnerable to an input validation error, which could be exploited by an attacker to load a crafted software package onto the device...

Denial of Service Vulnerability in Meijer's Meijer App

Midea Home App is the official app of Midea Group for consumers, and it is also the smart home appliance management app based on M-Smart system. A denial of service vulnerability exists in Midea Home App, which can be exploited by attackers to cause the app to stop running...