1243 matches found
Voting Machines Are Still Absurdly At Risk
A new report details dozens of vulnerabilities across seven models of voting machines—all of which are currently in use...
SQL Injection Vulnerability in Yisoft's Voting Management System (CNVD-2018-21963)
Yisoftone Voting Management System is a free voting management system released by Yisoftone.com. A SQL injection vulnerability exists in Yisoft Polling Management System, which can be exploited by attackers to obtain sensitive information due to failure to properly filter input parameters...
Security Vulnerability in ESS ExpressVote Touchscreen Voting Computer
Of course the ESS ExpressVote voting computer will have lots of security vulnerabilities. It's a computer, and computers have lots of vulnerabilities. This particular vulnerability is particularly interesting because it's the result of a security mistake in the design process. Someone didn't thin...
ThreatList: Almost All Security Pros Believe Election Systems Are at Risk
As the U.S. midterm election season gets underway in earnest, concerns about the ability to hack the vote is more in the spotlight than ever. A fresh survey from Venafi has found that a full 93 percent of security pros are concerned about cyber-attacks targeting election infrastructure. The poll,...
Podcast: Black Hat USA and DEF CON 2018 Wrap
Las Vegas was filled with researchers, executives, and hackers last week for the Black Hat USA and DEF CON 2018 conferences. In our wrap-up podcast, Threatpost’s Lindsey O’Donnell and Tara Seals talk about their favorite parts of the show. Among the most interesting topics at the shows included I...
Defcon: 11-year-old modifies Florida Presidential voting results
By Waqas At the largest hacking conference in the world, Defcon 2018, there have been many surprising discoveries. However, the news that has shocked the United States is the hacking and modifications of election results by young kids. The 26th Defcon conference is being held in Las Vegas...
DEF CON 2018: Voting Hacks Prompt Push Back from Election Officials, Vendors
LAS VEGAS – DEF CON 26, building on its work in hacking ballot machines last year, saw three days of probing into various aspects of the end-to-end voting infrastructure in place in the U.S., including a voter registration database and election reporting websites. Several vulnerabilities and...
xkcd on Voting Computers
Funny and true...
Suing South Carolina Because Its Election Machines Are Insecure
A group called Protect Democracy is suing South Carolina because its insecure voting machines are effectively denying people the right to vote. Note: I am an advisor to Protect Democracy on its work related to election cybersecurity, and submitted a declaration in litigation it filed, challenging...
voting-station.net XSS vulnerability
Open Bug Bounty ID: OBB-607752 Description| Value ---|--- Affected Website:| voting-station.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Securing Elections
Elections serve two purposes. The first, and obvious, purpose is to accurately choose the winner. But the second is equally important: to convince the loser. To the extent that an election system is not transparently and auditably accurate, it fails in that second purpose. Our election systems ar...
DEBIAN-CVE-2018-0490
An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10. The directory-authority protocol-list subprotocol implementation allows remote attackers to cause a denial of service NULL pointer dereference and directory-authority crash via a misformatted rel...
UBUNTU-CVE-2018-0490
An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10. The directory-authority protocol-list subprotocol implementation allows remote attackers to cause a denial of service NULL pointer dereference and directory-authority crash via a misformatted rel...
CVE-2018-0490
An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10. The directory-authority protocol-list subprotocol implementation allows remote attackers to cause a denial of service NULL pointer dereference and directory-authority crash via a misformatted rel...
Election Security
I joined a letter supporting the Secure Elections Act S. 2261: The Secure Elections Act strikes a careful balance between state and federal action to secure American voting systems. The measure authorizes appropriation of grants to the states to take important and time-sensitive actions, includin...
Online Voting System Authentication Bypass Vulnerability
Online Voting System is an online voting system. A security vulnerability exists in the profile section of Online Voting System version 1.0. The vulnerability can be exploited by an attacker to set passwords for other accounts...
CVE-2018-6180
A flaw in the profile section of Online Voting System 1.0 allows an unauthenticated user to set an arbitrary password for other accounts...
CVE-2018-6180
A flaw in the profile section of Online Voting System 1.0 allows an unauthenticated user to set an arbitrary password for other accounts...
