CVE-2019-1010147

Summary: CVE-2019-1010147 affects Yellowfin Smart Reporting all versions prior to 7.3, with the vulnerable component identified as MIAdminStyles.i4. The issue is Incorrect Access Control – Privileges Escalation that, via an XSS vulnerability exploited on a site under the attacker’s control, can a...

CVE-2019-1010147

Yellowfin Smart Reporting All Versions Prior to 7.3 is affected by: Incorrect Access Control - Privileges Escalation. The impact is: Victim attacked and access admin functionality through their browser and control browser. The component is: MIAdminStyles.i4. The attack vector is: Victims are...

CVE-2019-2770

Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion subcomponent: Smart View. The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Planning. Successful...

On the IoT road: perks, benefits and security of moving smartly

Kaspersky has repeatedly investigated security issues related to IoT technologies for instance, here, or here. Earlier this year our experts have even gained foothold in the security of biomechanical prosthetic devices. The same implies to smart car security: our own research has indicated that...

mail2.smartchoiceschools.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-898687 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

alabama.smartchoiceschools.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-898559 Security Researcher Gh05tPT Helped patch 6893 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

Oracle Hyperion Hyperion Planning Component Access Control Error Vulnerability

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications. The software provides financial closure, report production and other functions. Hyperion Planning is one of the planning task component. A security vulnerability exists in the Smart View...

Burning down the house with IoT

For years we’ve been trying to set fire to ‘smart’ things by hacking them. We got some charring on the iKettle, but nothing more. Then we found some smart hair straighteners. The Glamoriser straighteners were promoted heavily on TV at Christmas; they piqued my interest because of the BLE...

Resetting Your GE Smart Light Bulb

If you need to reset the software in your GE smart light bulb -- firmware version 2.8 or later -- just follow these easy instructions: Start with your bulb off for at least 5 seconds. 1. Turn on for 8 seconds 2. Turn off for 2 seconds 3. Turn on for 8 seconds 4. Turn off for 2 seconds 5. Turn on...

Unspecified Vulnerability in Sony BRAVIA Smart TVs

Sony BRAVIA Smart TVs is a smart TV from Sony Japan. A security vulnerability exists in Sony BRAVIA Smart TVs. The vulnerability can be exploited by an attacker to cause the TV to jam with the help of a specially crafted web page...

Where Will Ransomware Go In The Second Half Of 2019?

Ransomware has been an evolutionary malware family that continues to shift and change over the years. From the first fakeAV, to police ransomware, to the now oft-used crypto-ransomware, this threat just will not go away. Based on the latest trends, we predict this threat will grow in the second...

CVE-2019-11889

Sony BRAVIA Smart TV devices allow remote attackers to cause a denial of service device hang via a crafted web page over HbbTV...

CVE-2019-11890

Sony Bravia Smart TV devices allow remote attackers to cause a denial of service device hang or reboot via a SYN flood attack over a wired or Wi-Fi LAN...

Design/Logic Flaw

Sony BRAVIA Smart TV devices allow remote attackers to cause a denial of service device hang via a crafted web page over HbbTV...

Design/Logic Flaw

Sony Bravia Smart TV devices allow remote attackers to cause a denial of service device hang or reboot via a SYN flood attack over a wired or Wi-Fi LAN...

CVE-2019-11890

CVE-2019-11890 affects Sony BRAVIA Smart TV devices. Connected sources confirm a remotely triggerable Denial of Service via a SYN flood over wired or Wi‑Fi LAN that can cause the TV to hang or reboot. The vulnerability targets the TV’s network handling; specific root cause, vulnerable components,...

CVE-2019-11890

Sony Bravia Smart TV devices allow remote attackers to cause a denial of service device hang or reboot via a SYN flood attack over a wired or Wi-Fi LAN...

CVE-2019-11889

CVE-2019-11889 affects Sony BRAVIA Smart TVs; multiple sources confirm a remote denial-of-service condition triggered by a crafted web page via HbbTV. The NVD entry lists CVSS v3.0 score 7.5 (Network, High impact on Availability, no confidentiality/ integrity impact) and CVSS v2.0 similar impact....

CVE-2019-11889

Sony BRAVIA Smart TV devices allow remote attackers to cause a denial of service device hang via a crafted web page over HbbTV...

Emerson DeltaV Distributed Control System

1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Low skill level to exploit Vendor: Emerson Equipment: DeltaV Distributed Control System DCS Vulnerability: Use of Hard-coded Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to gain administrative...