Toy Defender - Runtime privilege escalation, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Toy Defender published at the 'play' market has multiple vulnerabilities...

Toy Defense - TD Strategy - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Toy Defense - TD Strategy published at the 'play' market has multiple vulnerabilities...

Toy Defense 2 — TD Battles - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Toy Defense 2 — TD Battles published at the 'play' market has multiple vulnerabilities...

Toy Guns - Gun Simulator - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Toy Guns - Gun Simulator published at the 'play' market has multiple vulnerabilities...

Toy Blast - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Toy Blast published at the 'play' market has multiple vulnerabilities...

Memorize Toy for Playmobil Fan - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Memorize Toy for Playmobil Fan published at the 'play' market has multiple vulnerabilities...

CAT ALONE - Cat Toy - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application CAT ALONE - Cat Toy published at the 'play' market has multiple vulnerabilities...

CVE-2015-8269

The API on Fisher-Price Smart Toy Bear devices allows remote attackers to obtain sensitive information or modify data by leveraging presence in an 802.11 network's coverage area and entering an account number...

Design/Logic Flaw

The API on Fisher-Price Smart Toy Bear devices allows remote attackers to obtain sensitive information or modify data by leveraging presence in an 802.11 network's coverage area and entering an account number...

CVE-2015-8269

CVE-2015-8269 affects the Fisher-Price Smart Toy Bear API. Multiple sources confirm an improper authentication/authorization flaw in the device’s web service API that can be exploited by a nearby attacker in a Wi‑Fi network to obtain sensitive information or modify data, including names, birthdat...

CVE-2015-8269

The API on Fisher-Price Smart Toy Bear devices allows remote attackers to obtain sensitive information or modify data by leveraging presence in an 802.11 network's coverage area and entering an account number...

R7-2015-27 and R7-2015-24: Fisher-Price Smart Toy® & hereO GPS Platform Vulnerabilities (FIXED)

Through our recent publication of numerous security issues of Internet-connected baby monitors, we were able to comprehensively raise awareness of the real-world risks facing those devices. Further, we were able to work with a number of vendors to get key security problems resolved, resulting in...

Fisher-Price Smart Toy platform allows some unauthenticated web API commands

Overview The Fisher-Price Smart Toy does not perform proper authentication of some API commands, and it may also use a vulnerable version of Android. Description The Fisher-Price Smart Toy bear is a new WiFi-connected Internet of Things IoT toy. The device utilizes network connectivity to provide...

VTech Tablet: a plurality of data breach risks hidden-vulnerability warning-the black bar safety net

! In a recent VTech data leak after the event, everyone might think that VTech electronic toy safety won't be better than now worse. However, in this case, we found two vulnerabilities, a hacker can be from the children of their innotab tablet in grabbing data. Brush mode to steal data For lost,...

Using Toys to Open a Fixed-Code Garage Door in 10 Seconds

It may be time to upgrade your garage door opener. Security researcher Samy Kamkar has developed a new technique that enables him to open almost any garage door that uses a fixed code–and he implemented it on a $12 child’s toy. The attack Kamkar devised, known as OpenSesame, reduces the amount of...

$30 Child Toy is enough to hack FBI Radios

$30 Child Toy is enough to hack FBI Radios The portable radios used by many federal law enforcement agents have major security flaws that allowed researchers to intercept hundreds of hours of sensitive traffic sent without encryption over the past two years, according to a new study being release...

Hobbit helmsman Jackson trap in $190K credit card scam !

Lord of the Rings Director Peter Jackson was the ambition of a US$190,000 £120,000 acclaim agenda artifice that approved to bond out a disturbing business. The recently-knighted Hobbit helmsman acclimated his American Express agenda to shop for items from the Michigan Toy Soldier Company, which...