CVE-2016-10863

The CVE-2016-10863 entry concerns Edimax Wi‑Fi Extender devices affected by a CSRF vulnerability via the web endpoint goform/formwlencryptvxd, which can disclose the PSK key. The issue is rooted in a cross-site request forgery vulnerability in the device’s WEB application, enabling an attacker to...

CVE-2016-10863

Edimax Wi-Fi Extender devices allow goform/formwlencryptvxd CSRF with resultant PSK key disclosure...

Wi-Fi security the future: assessment WPA3 vulnerability in-vulnerability warning-the black bar safety net

Recently, a security research expert Matty Vanhoef and Eyal Ronen on the WPA3 Wi-Fi standards, conducted a safety analysis, and success from which to discover the five security vulnerabilities. Wherein, there are four security vulnerabilities will seriously affect Internet Security, then the next...

Black Hat: LeapFrog Tablet Flaws Let Attackers Track, Message Kids

LAS VEGAS – Serious vulnerabilities have been disclosed in LeapFrog’s tablet for kids, the LeapPad Ultimate, once again throwing child data privacy into the spotlight. The LeapPad Ultimate is a rugged tablet made by LeapFrog that targets children with an array of education, game and eBook apps...

CVE-2019-6969

The web interface of the D-Link DVA-5592 20180823 is vulnerable to an authentication bypass that allows an unauthenticated user to have access to sensitive information such as the Wi-Fi password and the phone number if VoIP is in use...

Authentication flaw

The web interface of the D-Link DVA-5592 20180823 is vulnerable to an authentication bypass that allows an unauthenticated user to have access to sensitive information such as the Wi-Fi password and the phone number if VoIP is in use...

CVE-2019-6969

The Red Hat CVE-2019-6969 entry confirms a vulnerability in the D-Link DVA-5592 20180823 web interface, caused by an authentication bypass that allows an unauthenticated user to access sensitive information (e.g., Wi-Fi password and VoIP-related phone numbers). Impact details from the original en...

CVE-2019-6969

The web interface of the D-Link DVA-5592 20180823 is vulnerable to an authentication bypass that allows an unauthenticated user to have access to sensitive information such as the Wi-Fi password and the phone number if VoIP is in use...

Apple Security Update: iOS 10.3.4

Apple recommends to install security update iOS 10.3.4 on devices iPhone 5, iPad 4th generation Wi-Fi + Cellular...

68% of Overwhelmed IT Managers Say They Can't Keep Up with Cyberattacks

IT managers feel overwhelmed by the volume of cyberattack attempts, with most of them admitting that successful hacks of their company networks are becoming the norm. That’s according to a research report The Impossible Puzzle of Cybersecurity, released Friday. In a survey of 3,100 IT managers...

Hackers' Operating System Kali Linux Released for Raspberry Pi 4

We've got some really exciting news for you... Offensive Security has released an official version of Kali Linux for Raspberry Pi 4—the most powerful version of the compact computer board yet that was released just two weeks ago with the full 4GB of RAM at low cost and easy accessibility. Based o...

CVE-2019-11890

Sony Bravia Smart TV devices allow remote attackers to cause a denial of service device hang or reboot via a SYN flood attack over a wired or Wi-Fi LAN...

Sony BRAVIA Smart TV Denial Of Service Vulnerability

Sony BRAVIA Smart TV Denial Of Service ADVISORY INFORMATION TITLE: Two vulnerabilities found in Sony BRAVIA Smart TVs ADVISORY URL: CVE-2019-11889 https://www.darkmatter.ae/xen1thlabs/sony-remote-denial-of-service-triggered-over-vulnerability-hbbtv-xl-19-014/ CVE-2019-11890...

CVE-2017-11580

Blipcare Wifi blood pressure monitor BP700 10.1 devices allow memory corruption that results in Denial of Service. When connected to the "Blip" open wireless connection provided by the device, if a large string is sent as a part of the HTTP request in any part of the HTTP headers, the device coul...

CVE-2017-11579

In the most recent firmware for Blipcare, the device provides an open Wireless network called "Blip" for communicating with the device. The user connects to this open Wireless network and uses the web management interface of the device to provide the user's Wi-Fi credentials so that the device ca...

CVE-2017-11578

It was discovered as a part of the research on IoT devices in the most recent firmware for Blipcare device that the device allows to connect to web management interface on a non-SSL connection using plain text HTTP protocol. The user uses the web management interface of the device to provide the...

Memory corruption

Blipcare Wifi blood pressure monitor BP700 10.1 devices allow memory corruption that results in Denial of Service. When connected to the "Blip" open wireless connection provided by the device, if a large string is sent as a part of the HTTP request in any part of the HTTP headers, the device coul...

Design/Logic Flaw

It was discovered as a part of the research on IoT devices in the most recent firmware for Blipcare device that the device allows to connect to web management interface on a non-SSL connection using plain text HTTP protocol. The user uses the web management interface of the device to provide the...

CVE-2017-11580

Blipcare Wifi blood pressure monitor BP700 10.1 devices allow memory corruption that results in Denial of Service. When connected to the "Blip" open wireless connection provided by the device, if a large string is sent as a part of the HTTP request in any part of the HTTP headers, the device coul...

CVE-2017-11579

The CVE-2017-11579 entry concerns Blipcare devices offering an open Wireless network named “Blip” for management. The firmware allows users to connect to this network to submit Wi‑Fi credentials, enabling the device to access the Internet. A nearby attacker can sniff credentials and may connect t...