117 matches found
toy-blog Security Breach
toy-blog is a CMS system by the individual developer Kisaragi. A security vulnerability exists in toy-blog versions prior to 0.5.4 through 0.6.1, which stems from the ability to read articles with private visibility if the reader does not set the requested credentials...
PT-2024-28438 · Toy-Blog · Toy-Blog
Name of the Vulnerable Software and Affected Versions: toy-blog versions 0.4.3 through 0.4.14 toy-blog versions prior to 0.4.14 Description: The administrative password is leaked through the command line parameter. This issue was patched in version 0.5.0. Recommendations: For versions 0.4.14 and...
toy-blog Security Breach
toy-blog is a CMS system by the individual developer Kisaragi. A security vulnerability exists in toy-blog versions prior to 0.4.3 to 0.5.0, which stems from the disclosure of the administrative password via a command line parameter...
SUSE CVE-2024-26829
In the Linux kernel, the following vulnerability has been resolved: media: irtoy: fix a memleak in irtoytx When irtoycommand fails, buf should be freed since it is allocated by irtoytx, or there is a memleak...
UBUNTU-CVE-2024-26829
In the Linux kernel, the following vulnerability has been resolved: media: irtoy: fix a memleak in irtoytx When irtoycommand fails, buf should be freed since it is allocated by irtoytx, or there is a memleak...
toy-eraser.com Cross Site Scripting vulnerability OBB-3241166
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
How Good Smile, a Major Toy Company, Kept 4chan Online
Documents obtained by WIRED confirm that Good Smile, which licenses toy production for Disney, was an investor in the controversial image board...
greylynntoylibrary.co.nz Cross Site Scripting vulnerability OBB-2881073
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
MAL-2022-5143 Malicious code in ot-toy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2616bb98348c6be68c984816e4f9ae80390f91783d51fbb3fe5042fc8170b64f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ot-toy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2616bb98348c6be68c984816e4f9ae80390f91783d51fbb3fe5042fc8170b64f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GSD-2022-1001462 media: ir_toy: free before error exiting
media: irtoy: free before error exiting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...
ootytoytrain.com Cross Site Scripting vulnerability OBB-2308729
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
New Sex Toy Standards Let Some Sensitive Details Slide
The industry now has official guidance on design, materials, and more, but not security and privacy best practices...
Friday Squid Blogging: Squid Dog Toy
Its sold out, but the pictures are cute. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...
Shantou Net Ant Network Co., Ltd. website building system suffers from SQL injection vulnerability (CNVD-2021-30905)
Ltd. is an internet company specializing in serving the toy industry in Chenghai. Shantou NetAnt Network Co., Ltd. has a SQL injection vulnerability in its website building system, which can be exploited by attackers to obtain sensitive information from the database...
A week in security (December 14 – December 20)
Last week on Malwarebytes Labs we kept you updated on the SolarWinds attack, we warned about the special dangers that come with the Christmas season, published a threat profile for the Egregor ransomware, warned how a lead generation scam was targeting potential Malwarebytes MSP partners, and...
Smart toy security: How to keep your kids safe this Christmas
Christmas is coming, and so are the smart toys. The ever-present pandemic has meant a lot more staying at home this year. Videogame playing has increased considerably, because why not? Screentime for kids has gone up, because again, it’s bound to. It hasn’t brought about the end of civilisation a...
sleep-toy.com Cross Site Scripting vulnerability OBB-1344339
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
toy-wave.com Cross Site Scripting vulnerability
Security Researcher haxmov Helped patch 543 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting toy-wave.com website and its users. Following coordinated and...
Serious Security Flaws Found in Children's Connected Toys
Various connected toys for children – hot off the shelves from this holiday shopping season – have been found with deep-rooted security issues, including missing authentication for device pairing and a lack of encryption for connected online accounts. The research, formed by a partnership between...