Smart Doorbells on Amazon, eBay, Harbor Serious Security Issues

Researchers have found serious security and privacy issues in 11 different smart doorbells, distributed via online marketplaces like Amazon and eBay, which could be exploited by attackers to physically switch off the devices. Smart doorbells, which connect to a smartphone and alert users when...

Robot Vacuums Suck Up Sensitive Audio in ‘LidarPhone’ Hack

Researchers have uncovered a new attack that lets bad actors snoop in on homeowners’ private conversations – through their robot vacuums. The vacuums, which utilize smart sensors in order to autonomously operate, have gained traction over the past few years. The attack, called “LidarPhone” by...

Driver Disk for HP Smart Array RAID Controller hpsa v3.2.0-3 - For XenServer 6.0.2

BODY font-family: Arial , Helvetica , sans-serif; font-size: 80.0%;H2 font-size: 124.0%; font-weight: bold; margin-top: 12.0pt; margin-bottom: 6.0pt; padding-top: 5.0px;H3 font-size: 100.0%; font-weight: bold; margin-top: 12.0pt; margin-bottom: 6.0pt;H4 font-size: 80.0%; margin-top: 24.0pt;...

How to Configure User SID Enumeration in the XML Service

This article contains information about configuring the Citrix XML Service to perform enumeration of Security Identifiers SIDs for user accounts when using Single Sign-on SSO or smart card authentication to Web Interface 5.0. Background When using SSO or smart card authentication, access for user...

Information Disclosure Vulnerability in CMCC Tietong Yu Routing (CNVD-2020-67110)

Yu Route is an IoT router. An information disclosure vulnerability exists in CMCC Tietong Yu Router. An attacker can exploit the vulnerability to obtain sensitive information...

CVE-2020-28055

A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TCL Technology Group Corporation allows a local unprivileged attacker, such as a malicious App, to read & write to the /data/vendor/tcl, /data/vendor/upgrade, and...

CVE-2020-27403

A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TCL Technology Group Corporation allows an attacker on the adjacent network to arbitrarily browse and download sensitive files over an insecure web server running on port 7989 tha...

Information disclosure

A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TCL Technology Group Corporation allows an attacker on the adjacent network to arbitrarily browse and download sensitive files over an insecure web server running on port 7989 tha...

Design/Logic Flaw

A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TCL Technology Group Corporation allows a local unprivileged attacker, such as a malicious App, to read & write to the /data/vendor/tcl, /data/vendor/upgrade, and...

CVE-2020-28055

A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TCL Technology Group Corporation allows a local unprivileged attacker, such as a malicious App, to read & write to the /data/vendor/tcl, /data/vendor/upgrade, and...

CVE-2020-28055

CVE-2020-28055 affects TCL Android Smart TV series V8-R851T02-LF1 V295 and earlier, and V8-T658T01-LF1 V373 and earlier. A local, unprivileged attacker can read/write to /data/vendor/tcl, /data/vendor/upgrade, and /var/TerminalManager, enabling fake system upgrades by writing to /data/vendor/upgr...

CVE-2020-27403

A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TCL Technology Group Corporation allows an attacker on the adjacent network to arbitrarily browse and download sensitive files over an insecure web server running on port 7989 tha...

CVE-2020-27403

The provided data confirms CVE-2020-27403 (and related CVE-2020-28055) affects TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below. A web server running on port 7989 (and related ports) lists files/directories, enabling an unprivileged adjacent-network atta...

ElevateCoin Digital Error Vulnerability

ElevateCoin is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in ElevateCoin's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...

The vulnerability of the Smart View Provider component of the Hyperion Analytic Provider Services software allows a malicious individual to gain unauthorized access to protected information, modify, add, or delete data, or cause service failures.

The vulnerability of the Smart View Provider component of the Hyperion Analytic Provider Services software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information, modify, add,...

PT-2020-16684

Name of the Vulnerable Software and Affected Versions TCL Android Smart TV series V8-R851T02-LF1 versions V295 and below TCL Android Smart TV series V8-T658T01-LF1 versions V373 and below Description A vulnerability in the TCL Android Smart TV series allows an attacker on the adjacent network to...

Smart Scale to Autoscale Migration

Table of Contents Manual Migration --- Automated Migration Prerequisites Migrate Good to know Important: This article is applicable only if you have the Sites section in Smart Scale. Sites that use the Virtual Apps and Desktops service appear as “Cloudxdsite” by default. To view Sites, go to Citr...

smart-instruments.ch Cross Site Scripting vulnerability OBB-1494228

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Moderate: Red Hat Security Advisory: opensc security, bug fix, and enhancement update

An update for opensc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

RHEL 8 : opensc (RHSA-2020:4483)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4483 advisory. The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic...