CVE-2020-10180

The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro macOS, Cyber Security macOS, Mobile Security for Android, Smart TV Security,...

NCSC Releases Advisory on Securing Internet-Connected Cameras

The United Kingdom UK National Cyber Security Centre NCSC has released an advisory on securing internet-connected cameras such as smart security cameras and baby monitors. An attacker could gain access to unsecured, or poorly secured, internet-connected cameras to obtain live feeds or images. The...

CVE-2020-9550

Rubetek SmartHome 2020 devices use unencrypted 433 MHz communication between controllers and beacons, allowing an attacker to sniff and spoof beacon requests remotely...

SQL Injection Vulnerability in Jinwei Smart Restaurant

Jinwei Intelligent Restaurant is a free restaurant management software, easy and convenient to operate, suitable for all kinds of large and small restaurants, as well as fast food, Chinese food, western food, hot pot restaurant and other kinds of catering business. Jinwei Smart Restaurant suffers...

WooCommerce Smart Coupons < 4.6.5 - Unauthenticated Coupon Creation

By crafting a request with all of the necessary parameters, attackers could generate and send themselves valid gift certificates for a victim’s WooCommerce store. This vulnerability has been patched as of WooCommerce Smart Coupons 4.6.5...

WordPress WooCommerce Smart Coupons premium plugin <= 4.6.0 - Unauthenticated Coupon Creation vulnerability

Unauthenticated Coupon Creation vulnerability discovered by WordFence in WordPress WooCommerce Smart Coupons premium plugin versions = 4.6.0. Solution Update the WordPress WooCommerce Smart Coupons premium plugin to the latest available version at least 4.6.5...

SQL Injection Vulnerability in Jinwei Smart Restaurant System (CNVD-2020-21995)

Jinwei Smart Restaurant is truly free restaurant management software. Suitable for all kinds of large and small restaurants, as well as fast food, Chinese food, Western food, hot pot restaurant and other kinds of catering business. Jinwei intelligent restaurant system SQL injection vulnerability,...

Forrester: Keeping Smart Cities Safe From Hacks

SAN FRANCISCO – Municipalities today are dealing with an unanticipated number of cyberthreats, Merritt Maxim, an analyst at Forrester, said last week at the RSA Conference 2020. Local and state governments are increasingly being targeted by ransomware attacks, phishing emails and business email...

Hackers Can Use Ultrasonic Waves to Secretly Control Voice Assistant Devices

Researchers have discovered a new means to target voice-controlled devices by propagating ultrasonic waves through solid materials in order to interact with and compromise them using inaudible voice commands without the victims' knowledge. Called "SurfingAttack," the attack leverages the unique...

SQL Injection Vulnerability in Jinwei Smart Restaurant System (CNVD-2020-22746)

Jinwei Intelligent Restaurant System is an internal management system for all major and small restaurants. Jinwei Intelligent Restaurant System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Jinwei Smart Restaurant System (CNVD-2020-22266)

Jinwei Intelligent Restaurant System is an internal management system for all major and small restaurants. Jinwei Intelligent Restaurant System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Arbitrary File Download Vulnerability in Visualized Smart Campus

Visualized smart campus is based on the physical environment of the campus, taking the real campus as a whole as a blueprint, using network technology, completing the construction of the visualization of the campus geographic information system, realizing the campus multi-dimensional virtual...

IoT Insecurity: When Your Vacuum Turns on You

SAN FRANCISCO – Hackable Internet of Things IoT devices are on full display this week at the RSA Conference 2020. They include everything from baby monitors to Wi-Fi chips. One such device is a connected vacuum cleaner, the Trifo Ironpie M6. According to researchers with Checkmarx, the vacuum has...

Unauthorized Access Vulnerability in Ali Smart IoT Platform

Alibaba is a global business-to-business B2B e-commerce company and is currently the world's largest online marketplace and business exchange community. An unauthorized access vulnerability exists in the Alibaba Smart IoT platform, which can be exploited by an attacker to gain access to sensitive...

Biotech health care innovations meet security challenges

The level and speed of innovations taking place in the biotech industry are baffling. On the one hand, it makes us hopeful we can quickly reduce the number of illnesses and their consequences through technological advancement—saving thousands of lives. On the other, concerns about the application...

HP Smart Update Manager Remote Unauthorized Access.

The HPE Smart Update manager running on the remote host is affected by an authentication bypass vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to bypass authentication and execute arbitrary actions defined by the application. C Tenable Networ...

OWASP D4N155 - Intelligent And Dynamic Wordlist Using OSINT

It's an information security audit tool that creates intelligent wordlists based on the content of the target page. Help us See some calculations used Install Need to: Python3.6, Bash GNU Bourne-Again SHell Optional: Git, Groff git clone https://github.com/owasp/D4N155.git cd D4N155 pip3 install ...

Cisco Smart Software Manager On-Prem Trust Management Vulnerability

Cisco Smart Software Manager On-Prem is a Cisco product license management component. A trust management issue vulnerability exists in the High Availability HA service in Cisco Smart Software Manager On-Prem versions prior to 7-202001, which arises from a system administrator being unable to...

Critical Cisco Bug Opens Software Licencing Manager to Remote Attack

A critical flaw in the High Availability HA service of Cisco Smart Software Manager On-Prem Base has been uncovered, which would open the door to remote attackers thanks to its use of a static, default password, even if the platform isn’t directly connected to the internet. Cisco Smart Software...

smart-tower.kr Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1098143 Security Researcher geeknik Helped patch 8710 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting smart-tower.kr website and...