FLIR FX / Lorex video stream hijack: Disclosure train wreck

We found that anyone could access any video stream for certain Swann wireless home security cameras. The technical detail is here. It was a consequence of weak authorisation by the cloud service provider, Ozvision. They claim to provide the back end to 3 million cameras, so we started looking at...

Bento4 Buffer Overflow Vulnerability (CNVD-2019-07062)

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer overflow vulnerability exists in the 'AP4Mpeg2TsAudioSampleStream::WriteSample' function in the Core/Ap4Mpeg2Ts.cpp file in Bento4 version 1.5.1-624, which can be exploited by an attacker to can be exploited to cause...

UBUNTU-CVE-2018-14587

An issue has been discovered in Bento4 1.5.1-624. AP4MemoryByteStream::WritePartial in Core/Ap4ByteStream.cpp has a buffer over-read...

Directory Traversal in list-n-stream

Affected versions of list-n-stream resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system...

GHSA-23VF-5G53-HM9Q Directory Traversal in list-n-stream

Affected versions of list-n-stream resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system...

DEBIAN-CVE-2018-14568

Suricata before 4.0.5 stops TCP stream inspection upon a TCP RST from a server. This allows detection bypass because Windows TCP clients proceed with normal processing of TCP data that arrives shortly after an RST i.e., they act as if the RST had not yet been received...

Design/Logic Flaw

Suricata before 4.0.5 stops TCP stream inspection upon a TCP RST from a server. This allows detection bypass because Windows TCP clients proceed with normal processing of TCP data that arrives shortly after an RST i.e., they act as if the RST had not yet been received...

CVE-2018-14568

Suricata before 4.0.5 stops TCP stream inspection upon a TCP RST from a server. This allows detection bypass because Windows TCP clients proceed with normal processing of TCP data that arrives shortly after an RST i.e., they act as if the RST had not yet been received...

CVE-2018-14568

CVE-2018-14568 affects Suricata up to version 4.0.4. The issue occurs when Suricata stops TCP stream inspection after receiving a TCP RST from a server, causing a detection bypass because Windows TCP clients may continue processing data arriving after the RST as if it were not received. The pract...

CVE-2018-14568

Suricata before 4.0.5 stops TCP stream inspection upon a TCP RST from a server. This allows detection bypass because Windows TCP clients proceed with normal processing of TCP data that arrives shortly after an RST i.e., they act as if the RST had not yet been received...

CVE-2018-14568

Suricata before 4.0.5 stops TCP stream inspection upon a TCP RST from a server. This allows detection bypass because Windows TCP clients proceed with normal processing of TCP data that arrives shortly after an RST i.e., they act as if the RST had not yet been received...

Uber driver recorded passengers & live-streamed videos on Twitch

By Carolina What is shocking about this incident is that what the Uber driver did was legal under Missouri law. Jason Gargac, an Uber and Lyft driver from St Louis Missouri, USA recorded and live-streamed his passengers' activities on the video-sharing website Twitch, without their consent and...

The vulnerability in the display of the Activity Stream page on Mozilla Firefox browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Activity Stream page display on Mozilla Firefox is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information using the “file:“ URL...

Security Bulletin: Vulnerability in RC4 stream cipher affects IBM Rational ClearCase (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” Attack for SSL/TLS affects IBM Rational ClearCase. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information. An attacker could exploit this...

openSUSE Security Update : php7 (openSUSE-2018-708)

This update for php7 fixes the following issues : - CVE-2018-12882: exifreadfromimpl allowed attackers to trigger a use-after-free in exifreadfromfile because it closed a stream that it is not responsible for closing bsc1099098 This update was imported from the SUSE:SLE-12:Update update project...

VulnCheck KEV: CVE-2017-1000353

Jenkins contains a remote code execution vulnerability. This vulnerability that could allowed attackers to transfer a serialized Java SignedObject object to the remoting-based Jenkins CLI, that would be deserialized using a new ObjectInputStream, bypassing the existing blocklist-based...

CVE-2018-5907

Possible buffer overflow in msmadspstreamcallbackput due to lack of input validation of user-provided data that leads to integer overflow in all Android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel...

CVE-2018-11304

Possible buffer overflow in msmadspstreamcallbackput due to lack of input validation of user-provided data that leads to integer overflow in all Android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel...

Open redirect

In Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05, kernel panic may happen due to out-of-bound read, caused by not checking source buffer length against length of packet stream to be copied...

[SECURITY] Fedora 28 Update: cantata-2.3.1-1.fc28

Cantata is a graphical client for the music player daemon MPD. Features: Multiple MPD collections. Highly customisable layout. Songs grouped by album in play queue. Context view to show artist, album, and song information of current track. Simple tag editor. File organizer - use tags to organize...