Sony IPELA ENGINE IP Cameras Backdoor Accounts

We have published an accompanying blog post to this technical advisory with further information: http://blog.sec-consult.com/2016/12/backdoor-in-sony-ipela-engine-ip-cameras.html SEC Consult Vulnerability Lab Security Advisory ======================================================================...

Multiple SONY network cameras vulnerable to sensitive information disclosure

Overview Multiple SONY network cameras contain a sensitive information disclosure vulnerability. SEC Consult reported this vulnerability to Sony, and Sony reported this vulnerability to JPCERT/CC to notify the solution to users through JVN. JPCERT/CC and Sony coordinated for the publication of th...

Sony Playstation 4 (PS4) 3.15 3.55 - WebKit Code Execution (PoC)

Sony Playstation 4 PS4 3.15 3.55 - WebKit Code Execution PoC PS4 3.55 Unsigned Code Execution ============== This GitHub Repository contains all the necessary tools for getting PoC Unsigned Code Execution on a Sony PS4 System with firmwares 3.15, 3.50 and 3.55. This Exploit, is based-off Henkaku'...

Sony Playstation 4 (PS4) 3.15 < 3.55 - WebKit Code Execution (PoC)

PS4 3.55 Unsigned Code Execution ============== This GitHub Repository contains all the necessary tools for getting PoC Unsigned Code Execution on a Sony PS4 System with firmwares 3.15, 3.50 and 3.55. This Exploit, is based-off Henkaku's WebKit Vulnerability for the Sony's PSVita. It includes bas...

Qualcomm Chip Flaw Leaves 900m Android Devices Open to Attack

Four vulnerabilities found in Qualcomm chips used in 900 million Android devices leave affected phones and tablets open to attacks that could give hackers complete system control. Researchers at Check Point who found the flaw are calling the vulnerability Quadrooter and say that a patch isn’t...

Warning! Over 900 Million Android Phones Vulnerable to New 'QuadRooter' Attack

Android has Fallen! Yet another set of Android security vulnerabilities has been discovered in Qualcomm chipsets that affect more than 900 Million Android smartphones and tablets worldwide. What's even worse: Most of those affected Android devices will probably never be patched. Dubbed...

blog.sony.com XSS vulnerability

Vulnerable URL: http://blog.sony.com//wp-includes/js/plupload/plupload.flash.swf?%target%g=alert%g=OPENBUGBOUNTY& Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

pro.sony.com XSS vulnerability

Vulnerable URL: https://pro.sony.com/bbsc/resellerSearchResults.do Details: Description| Value ---|--- Patched:| Yes, at 05.10.2017 Latest check for patch:| 05.10.2017 06:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

sonymusic.fr XSS vulnerability

Vulnerable URL: http://www.sonymusic.fr/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 02.08.2016 Latest check for patch:| 02.08.2016 16:14 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

blogs.sonymobile.com XSS vulnerability

Vulnerable URL: http://blogs.sonymobile.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 02.08.2016 Latest check for patch:| 02.08.2016 16:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

sonymobile.com XSS vulnerability

Vulnerable URL: http://www.sonymobile.com/gb/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 01.06.2016 Latest check for patch:| 01.06.2016 00:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...

sonymusic.com XSS vulnerability

Vulnerable URL: http://www.sonymusic.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 02.08.2016 Latest check for patch:| 02.08.2016 16:14 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

TV Remote for Sony - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application TV Remote for Sony published at the 'play' market has multiple vulnerabilities...

Keyboard for Sony Xperia GO - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Keyboard for Sony Xperia GO published at the 'play' market has multiple vulnerabilities...

Sony TV Media Player - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Sony TV Media Player published at the 'play' market has multiple vulnerabilities...

Remote for Sony TV - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Remote for Sony TV published at the 'play' market has multiple vulnerabilities...

Theme for Sony Xperia Z5 - External URLs, Possible privilege escalation, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Theme for Sony Xperia Z5 published at the 'play' market has multiple vulnerabilities...

Informer for Sony SmartWatch - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Informer for Sony SmartWatch published at the 'play' market has multiple vulnerabilities...

Sony Pictures Vue - Certificates or keys found, Customized SSL, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Sony Pictures Vue published at the 'play' market has multiple vulnerabilities...

Watch Face for Sony Smartwatch - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Watch Face for Sony Smartwatch published at the 'play' market has multiple vulnerabilities...