Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the command/user.cgi in Sony SNC CH140, SNC CH180, SNC CH240, SNC CH280, SNC DH140, SNC DH140T, SNC DH180, SNC DH240, SNC DH240T, SNC DH280, and possibly other camera models allows remote attackers to hijack the authentication of administrators for...

CVE-2013-3539

CVE-2013-3539 is a CSRF vulnerability in Sony camera web interfaces (command/user.cgi) affecting models such as SNC CH140/CH180/CH240/CH280 and SNC DH140/DH140T/DH180/DH240/DH240T/DH280. The flaw lets remote attackers hijack administrator authentication to issue requests that add users. Public re...

CVE-2013-3539

Cross-site request forgery CSRF vulnerability in the command/user.cgi in Sony SNC CH140, SNC CH180, SNC CH240, SNC CH280, SNC DH140, SNC DH140T, SNC DH180, SNC DH240, SNC DH240T, SNC DH280, and possibly other camera models allows remote attackers to hijack the authentication of administrators for...

CVE-2013-2890

drivers/hid/hid-sony.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11, when CONFIGHIDSONY is enabled, allows physically proximate attackers to cause a denial of service heap-based out-of-bounds write via a crafted device...

UBUNTU-CVE-2013-2890

drivers/hid/hid-sony.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11, when CONFIGHIDSONY is enabled, allows physically proximate attackers to cause a denial of service heap-based out-of-bounds write via a crafted device...

LulzSec hacker sentenced to 1 year jail & ordered to pay $605,663 in restitution

A second member of hacking group LulzSec - Raynaldo Rivera, 21, of Tempe, Arizona, has been sentenced to 1 year in prison, 13 months of house arrest, and 1,000 hours of community service for hacking into the computers of Sony Pictures Entertainment. Raynaldo who went by Internet names "neuron" wa...

LulzSec hacker sentenced to 1 year jail & ordered to pay $605,663 in restitution

A second member of hacking group LulzSec - Raynaldo Rivera, 21, of Tempe, Arizona, has been sentenced to 1 year in prison, 13 months of house arrest, and 1,000 hours of community service for hacking into the computers of Sony Pictures Entertainment. Raynaldo who went by Internet names ”neuron” wa...

Brute Force Attack on Club Nintendo Yields Info on 25K

Hackers executed a coordinated attack, hitting servers belonging to the popular gaming company Nintendo hard for nearly a month, resulting in the breach of information of nearly 25,000 gamers. The brute-force attack targeted Club Nintendo, a fan/membership site run by the Kyoto-based company. Fro...

Sony CH / DH Cross Site Request Forgery Vulnerability

Sony CH and DH series IP cameras suffer from a cross site request forgery vulnerability. 1.Advisory Information Title: Sony CH, DH Series Vulnerability Date Published: 12/06/2013 Date of last updated: 12/06/2013 2.Vulnerability Description We have been found the next vulnerability in this devices...

Sony CH / DH Cross Site Request Forgery

=========================================================================== SONY ==================================================================== =========================================================================== 1.Advisory Information Title: Sony CH, DH Series Vulnerability Date...

Sony CH DH Series IP Cameras - Multiple Cross-Site Request Forgery Vulnerabilities

Sony CH DH Series IP Cameras - Multiple Cross-Site Request Forgery Vulnerabilities source: https://www.securityfocus.com/bid/60529/info Sony CH and DH series IP cameras including SNCCH140, SNCCH180, SNCCH240, SNCCH280, SNCDH140, SNCDH140T, SNCDH180, SNCDH240, SNCDH240T, and SNCDH280 are prone to...

Sony CH / DH Series IP Cameras - Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/60529/info Sony CH and DH series IP cameras including SNCCH140, SNCCH180, SNCCH240, SNCCH280, SNCDH140, SNCDH140T, SNCDH180, SNCDH240, SNCDH240T, and SNCDH280 are prone to multiple cross-site request-forgery vulnerabilities. Exploiting these issues may...

Sony PS3 Firmware v4.31 - Code Execution Vulnerability

Title: ====== Sony PS3 Firmware v4.31 - Code Execution Vulnerability Date: ===== 2013-05-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=767 VL-ID: ===== 767 Common Vulnerability Scoring System: ==================================== 6.5 Introduction: ============= The...

Sony PlayStation 3 code execution

No description provided...

Sony Playstation 3 (PS3) 4.31 - Save Game Preview '.SFO' Handling Local Command Execution

Title: ====== Sony PS3 Firmware v4.31 - Code Execution Vulnerability Date: ===== 2013-05-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=767 VL-ID: ===== 767 Common Vulnerability Scoring System: ==================================== 6.5 Introduction: ============= The...

Sony Playstation 3 (PS3) 4.31 - Save Game Preview .SFO Handling Local Command Execution

Sony Playstation 3 PS3 4.31 - Save Game Preview .SFO Handling Local Command Execution Title: ====== Sony PS3 Firmware v4.31 - Code Execution Vulnerability Date: ===== 2013-05-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=767 VL-ID: ===== 767 Common Vulnerability...

Sony PS3 Firmware 4.31 Code Execution

Title: ====== Sony PS3 Firmware v4.31 - Code Execution Vulnerability Date: ===== 2013-05-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=767 VL-ID: ===== 767 Common Vulnerability Scoring System: ==================================== 6.5 Introduction: ============= The...

22 million Yahoo IDs stolen from their Japanese Server

22 million Yahoo! Japan's user IDs may have been stolen during an unauthorised attempt to access the administrative system of its Japan portal. "We don't know if the file of 22 million user IDs was leaked or not, but we can't deny the possibility given the volume of traffic between our server and...

22 million Yahoo IDs stolen from their Japanese Server

22 million Yahoo! Japan's user IDs may have been stolen during an unauthorised attempt to access the administrative system of its Japan portal. “We don’t know if the file of 22 million user IDs was leaked or not, but we can't deny the possibility given the volume of traffic between our server and...

Lulzsec hackers to be sentenced for cyber attacks on the CIA and Pentagon

Four men accused of launching online attacks under the banner of LulzSec appeared in a London courtroom Wednesday for sentencing. Ryan Ackroyd, Jake Davis, Mustafa al-Bassam and Ryan Cleary have all pleaded guilty to hacking offences. The name Lulzsec is a combination of 'lulz' or 'lols', "LAUGHI...