The vulnerability of the nvtboot component in NVIDIA Tegra software for NVIDIA Shield TV Experience allows a hacker to trigger a service failure, execute arbitrary code, or escalate their privileges.

The vulnerability of the nvtboot component in NVIDIA Tegra software for NVIDIA Shield TV Experience relates to privilege management errors. Exploiting this vulnerability could allow an attacker to cause service failures, execute arbitrary code, or escalate their privileges...

The vulnerability of the NVIDIA Games App software component of the NVIDIA Shield TV Experience device allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the NVIDIA Games App software on the NVIDIA Shield TV Experience device is related to lack of access control. Exploiting this vulnerability could allow a hacker to cause service failures or execute arbitrary codes...

IT Security in The New Pope

Lol, IT Security is everywhere. Even in the first episode of "The New Pope" TV series the sequel of "The Young Pope", 2016 some monks change credentials in the Vatican's IT systems under cover of night. This happened after, well, some unexpected changes in the corporate culture and organizational...

CVE-2011-5020

An SQL Injection vulnerability exists in the ID parameter in Online TV Database 2011...

Sql injection

An SQL Injection vulnerability exists in the ID parameter in Online TV Database 2011...

CVE-2011-5020

An SQL Injection vulnerability exists in the ID parameter in Online TV Database 2011...

CVE-2011-5020

The CVE-2011-5020 issue is an SQL injection in the Online TV Database (2011) where the ID parameter is not properly validated. Connected CNVD-2020-02284 confirms a SQL injection vulnerability in the Online TV Database 2011, caused by a lack of validation of externally entered SQL statements. This...

A week in security (December 30 – January 5)

Last week on Malwarebytes Labs, we took a dive into edge computing, looked at new web skimmer techniques, and rolled our eyes at silly people doing silly things. Other cybersecurity news: Stills and chills: A Reddit user notices their security camera is grabbing stills from other people’s devices...

CCTV Video for PC suffers from dll hijacking vulnerability

CCTV for PC is a live network TV broadcasting software. CCTV Video for PC suffers from a dll hijacking vulnerability, which can be exploited by attackers to load dll files and execute arbitrary code...

Apple iOS, tvOS, and watchOS Wi-Fi Component Information Disclosure Vulnerability

Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs.Apple watchOS is an operating system for smartwatches.Wi-Fi is one of the wireless Internet components. An information disclosure...

rp3.tv Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1048262 Security Researcher VighneshGupta Helped patch 132 vulnerabilities Received 3 Coordinated Disclosure badges Received 2 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting rp3.tv website and its...

DEBIAN-CVE-2019-8819

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary...

DEBIAN-CVE-2019-8735

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution...

DEBIAN-CVE-2019-8726

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution...

UBUNTU-CVE-2019-8735

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution...

Apple TV < 13.3 Multiple Vulnerabilities

According to its banner, the version of Apple TV on the remote device is prior to 13.3. It is therefore affected by multiple vulnerabilities as described in the HT210790 C Tenable Network Security, Inc. include'compat.inc'; if description scriptid132045; scriptversion"1.4";...

Apple iOS/tvOS/iPadOS/watchOS/macOS CVE-2019-8848 Privilege Escalation Vulnerability

Description Apple iOS/tvOS/iPadOS/watchOS/macOS are prone to a privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges on an affected system. Technologies Affected Apple Ipad Mini- Apple TV Apple Watch Apple iOS 10 Apple iOS 10.0.1 Apple iOS 10.1 Apple i...

Apple iOS/iPadOS/tvOS/watchOS/macOS CVE-2019-8830 Arbitrary Code Execution Vulnerability

Description Apple iOS, iPadOS, tvOS, watchOS and macOS are prone to an arbitrary code execution vulnerability. A remote attacker can leverage this issue to execute arbitrary code in the context of the user running the application. Failed exploit attempts may result in a denial-of-service conditio...

Apple iOS/tvOS/iPadOS/watchOS/macOS Multiple Memory Corruption Vulnerabilities

Description Apple iOS/tvOS/iPadOS/watchOS/macOS are prone to multiple memory-corruption vulnerabilities. Successfully exploiting these issues allows attackers to execute arbitrary code in the context of current user running the affected application. Failed exploits will result in denial-of-servic...

mtv24.tv Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1034348 Security Researcher devl00p Helped patch 3000 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting mtv24.tv website and its...