Security Advisory - Out-of-Bounds Read Vulnerability in Some Huawei Smart Phone

There is an out-of-bounds read vulnerability in XFRM module of some Huawei smart phone. An authenticated, local attacker may perform a specific operation to exploit this vulnerability. Due to insufficient validation of the parameters, which may be exploited to cause information leak. Vulnerabilit...

Security Advisory - Use-after-free Vulnerability in Some Huawei Smart Phone

There is a use-after-free UAF vulnerability in some Huawei smart phone. An authenticated, local attacker may perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege and make information leak. Vulnerability ID:...

smart.campus.ciencias.ulisboa.pt Improper Access Control vulnerability OBB-1372131

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

White hat hacker infects smart coffee machine with ransowmare

By Waqas Avast security researcher reverse-engineered an IoT coffee machine to upload ransomware and mine Monero coin. Smart appliances have always remained a risky option for consumers, specifically when it comes to coffee machines. Back in 2015, Pen Test Partners researchers discovered security...

smart-lift.gr Cross Site Scripting vulnerability OBB-1367920

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

ismartgate PRO Cross-Site Request Forgery Vulnerability

iSmartGate is a smart garage door opener system. The ismartgate PRO suffers from a cross-site request forgery vulnerability that allows a remote attacker to exploit the vulnerability to construct a malicious URI, bait a request, and can perform a malicious operation in the context of the target...

smart-shirts.com.vn Cross Site Scripting vulnerability OBB-1364338

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

VITToken Number Error Vulnerability

VITToken is an Ether-based digital currency. An input validation error vulnerability exists in the 'mintToken' function in VITToken's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...

Ubiou Number Error Vulnerability

Ubiou is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in Ubiou's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

smart-trucking.com Improper Access Control vulnerability OBB-1362941

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

smart-lift.gr Cross Site Scripting vulnerability OBB-1360825

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SLCAdvancedToken Digital Error Vulnerability

SLCAdvancedToken is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of SLCAdvancedToken. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

South Park Token Token Digital Error Vulnerability

South Park Token Token SPTKN is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of SPTKN. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

ecogreenhouse Digital Error Vulnerability

ecogreenhouse is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in ecogreenhouse's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

SDR22 Digital Error Vulnerability

SDR22 is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of SDR22. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

HeliumNetwork Number Error Vulnerability

HeliumNetwork is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in HeliumNetwork's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...

Looking for sophisticated malware in IoT devices

One of the motivations for this post is to encourage other researchers who are interested in this topic to join in, to share ideas and knowledge and to help build more capabilities in order to better protect our smart devices. Research background Smart watches, smart home devices and even smart...

HRWtoken Number Error Vulnerability

HRWtoken is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of HRWtoken. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

smart-lift.gr Cross Site Scripting vulnerability OBB-1351389

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

The ABCs of Digital Distancing

No person is an island — despite the recent public health mandates on social distancing that might make us feel as though we are. Yet, sometimes these seemingly arbitrary constraints can catalyze innovations and approaches to common challenges – and everyone wins. In a recent tweet from entertain...