Sony PlayMemories Home 代码问题漏洞

Sony PlayMemories Home is an image management software from Sony Japan. It is capable of managing and editing photos and videos on a PC. A security vulnerability exists in Sony PlayMemories Home version v6.0, which stems from the inclusion of an unreferenced service path that allows an attacker t...

GHSA-4Q2W-RW7M-XQW6 Sony Neural Network Libraries reliance on untrusted inputs prior to v1.0.10

nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries aka nnabla prior to v1.0.10 relies on the HOME environment variable, which might be untrusted...

Sony Neural Network Libraries reliance on untrusted inputs prior to v1.0.10

nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries aka nnabla prior to v1.0.10 relies on the HOME environment variable, which might be untrusted...

sony-co.com Cross Site Scripting vulnerability OBB-2484022

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sony-centr-24.ru Cross Site Scripting vulnerability OBB-2466556

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Sony: Response Manipulation leads to Admin Panel Login Bypass at https://██████/

The researcher reported that the authentication of a Sony endpoint could be bypassed by manipulating the response to a login request. By changing the value of a response parameter, the researcher bypassed the authentication and was able to gain access to an admin portal...

Sony playmemories home - (PMBDeviceInfoProvider) Unquoted Service Path Vulnerability

Exploit Title: Sony playmemories home - 'PMBDeviceInfoProvider' Unquoted Service Path Exploit Author: Saud Alenazi Vendor Homepage: https://www.sony.com/ Software Link: https://support.d-imaging.sony.co.jp/www/disoft/int/download/playmemories-home/win/en/index.html Version: 6.0 Tested: Windows 10...

Sony Playmemories Home Unquoted Service Path

Exploit Title: Sony playmemories home - 'PMBDeviceInfoProvider' Unquoted Service Path Date: 09/03/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://www.sony.com/ Software Link: https://support.d-imaging.sony.co.jp/www/disoft/int/download/playmemories-home/win/en/index.html Version: 6.0...

Sony playmemories home - 'PMBDeviceInfoProvider' Unquoted Service Path

Exploit Title: Sony playmemories home - 'PMBDeviceInfoProvider' Unquoted Service Path Date: 09/03/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://www.sony.com/ Software Link: https://support.d-imaging.sony.co.jp/www/disoft/int/download/playmemories-home/win/en/index.html Version: 6.0...

FBI traces and grabs back $150 million theft that was turned into bitcoins

On December 1, 2021, the Tokyo police arrested an employee of Sony Life Insurance on suspicion of fraudulently obtaining 17 billion yen through an illegal money transfer from an overseas unit. On the same day 3,879 bitcoins, worth about $150 million, were seized by law enforcement, and on the...

Stolen Bitcoins Returned

The US has returned $154 million in bitcoins stolen by a Sony employee. However, on December 1, following an investigation in collaboration with Japanese law enforcement authorities, the FBI seized the 3879.16242937 BTC in Ishiis wallet after obtaining the private key, which made it possible to...

Hacking the Sony Playstation 5

I just dont think its possible to create a hack-proof computer system, especially when the system is physically in the hands of the hackers. The Sony Playstation 5 is the latest example: Hackers may have just made some big strides towards possibly jailbreaking the PlayStation 5 over the weekend,...

Sony: Blind User-Agent SQL Injection to Blind Remote OS Command Execution at █████████

The researcher reported that a login form of a Sony website was vulnerable to a blind SQL injection. The researcher was able to use the blind SQL injection to enable xpcmdshell functionality on the database and then run system commands. The output from the system commands was then obtained via...

Sony: Path Traversal issue at https://████/blaze/

The researcher reported that a Sony endpoint was vulnerable to a path traversal vulnerability due to CVE-2018–1271. The researcher used the path traversal vulnerability to access a win.ini file on the vulnerable endpoint...

CVE-2021-20793

Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP Music Transfer Ver.1.3.0 and prior allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory...

CVE-2021-20793

Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP Music Transfer Ver.1.3.0 and prior allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP Music Transfer Ver.1.3.0 and prior allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory...

CVE-2021-20793

CVE-2021-20793 affects the installers for Sony Audio USB Driver (V1.10 and earlier) and HAP Music Transfer (V1.3.0 and earlier), due to a DLL search path issue that can cause loading of Trojan DLLs. This untrusted-search-path flaw may allow arbitrary code execution with the privileges of the user...

CVE-2021-20793

Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP Music Transfer Ver.1.3.0 and prior allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory...

The installers of multiple Sony products may insecurely load Dynamic Link Libraries

Overview The installers of multiple Sony products contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Shogo Kumamaru of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...