< Back to JetLib.com

jetlib.sec

« Expand/Collapse

Recent items

Skip to page: 1 2 3 ... 873

February 20, 2019
8:30
Love Inspires CD Player Hack
» ‎ Hack a Day

The heart is an impressive piece of hardware. It’s a rare pump that runs continuously for over 80 years in some cases. It’s also, for some reason or other, become a common human symbol of love and affection. In this vein, [Deepak Khatri] has built a beating electronic heart out …read more

Tags: classic hacks

7:17
Nuuo Central Management Server 2.4 Authenticated Arbitrary File Upload
» ‎ Packet Storm Security Exploits

The COMMITCONFIG verb is used by a CMS client to upload and modify the configuration of the CMS Server. The vulnerability is in the FileName parameter, which accepts directory traversal (..\\..\\) characters. Therefore, this function can be abused to overwrite any files in the installation drive of CMS Server. This vulnerability is exploitable in CMS versions up to and including 2.4.
Tags:

7:17
Nuuo Central Management Server 2.4 Authenticated Arbitrary File Upload
» ‎ Packet Storm Security Recent Files

The COMMITCONFIG verb is used by a CMS client to upload and modify the configuration of the CMS Server. The vulnerability is in the FileName parameter, which accepts directory traversal (..\\..\\) characters. Therefore, this function can be abused to overwrite any files in the installation drive of CMS Server. This vulnerability is exploitable in CMS versions up to and including 2.4.
Tags:

7:17
Nuuo Central Management Server 2.4 Authenticated Arbitrary File Upload
» ‎ Packet Storm Security Misc. Files

The COMMITCONFIG verb is used by a CMS client to upload and modify the configuration of the CMS Server. The vulnerability is in the FileName parameter, which accepts directory traversal (..\\..\\) characters. Therefore, this function can be abused to overwrite any files in the installation drive of CMS Server. This vulnerability is exploitable in CMS versions up to and including 2.4.
Tags:

7:12
HotelDruid 2.3 Cross Site Scripting
» ‎ Packet Storm Security Exploits

HotelDruid version 2.3 suffers from a cross site scripting vulnerability.
Tags:

7:12
HotelDruid 2.3 Cross Site Scripting
» ‎ Packet Storm Security Recent Files

HotelDruid version 2.3 suffers from a cross site scripting vulnerability.
Tags:

7:12
HotelDruid 2.3 Cross Site Scripting
» ‎ Packet Storm Security Misc. Files

HotelDruid version 2.3 suffers from a cross site scripting vulnerability.
Tags:

7:09
Apple macOS 10.13.5 Local Privilege Escalation
» ‎ Packet Storm Security Exploits

Apple macOS version 10.13.5 local privilege escalation exploit.
Tags:

7:09
Apple macOS 10.13.5 Local Privilege Escalation
» ‎ Packet Storm Security Recent Files

Apple macOS version 10.13.5 local privilege escalation exploit.
Tags:

7:09
Apple macOS 10.13.5 Local Privilege Escalation
» ‎ Packet Storm Security Misc. Files

Apple macOS version 10.13.5 local privilege escalation exploit.
Tags:

7:05
Tech News 4.3.4 Cross Site Scripting
» ‎ Packet Storm Security Exploits

Tech News version 4.3.4 suffers from a cross site scripting vulnerability.
Tags:

7:05
Tech News 4.3.4 Cross Site Scripting
» ‎ Packet Storm Security Recent Files

Tech News version 4.3.4 suffers from a cross site scripting vulnerability.
Tags:

7:05
Tech News 4.3.4 Cross Site Scripting
» ‎ Packet Storm Security Misc. Files

Tech News version 4.3.4 suffers from a cross site scripting vulnerability.
Tags:

7:04
Ubuntu Security Notice USN-3892-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 3892-1 - Burghard Britzke discovered that GDM incorrectly handled certain configurations. An attacker could possibly use this issue to get unauthorized access to a different user.
Tags:

7:04
Ubuntu Security Notice USN-3892-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 3892-1 - Burghard Britzke discovered that GDM incorrectly handled certain configurations. An attacker could possibly use this issue to get unauthorized access to a different user.
Tags:

7:04
Ubuntu Security Notice USN-3892-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 3892-1 - Burghard Britzke discovered that GDM incorrectly handled certain configurations. An attacker could possibly use this issue to get unauthorized access to a different user.
Tags:

7:04
Debian Security Advisory 4396-1
» ‎ Packet Storm Security Advisories

Debian Linux Security Advisory 4396-1 - Several vulnerabilities have been found in Ansible, a configuration management, deployment, and task execution system.
Tags:

7:04
Debian Security Advisory 4396-1
» ‎ Packet Storm Security Recent Files

Debian Linux Security Advisory 4396-1 - Several vulnerabilities have been found in Ansible, a configuration management, deployment, and task execution system.
Tags:

7:04
Debian Security Advisory 4396-1
» ‎ Packet Storm Security Misc. Files

Debian Linux Security Advisory 4396-1 - Several vulnerabilities have been found in Ansible, a configuration management, deployment, and task execution system.
Tags:

7:02
Google Admits Error Over Hidden Microphone
» ‎ Packet Storm Security Headlines

Google Admits Error Over Hidden Microphone
Tags: headlineprivacygooglespyware
7:02
Cyber Thieves Set Sights On Hijacking Payment Data
» ‎ Packet Storm Security Headlines

Cyber Thieves Set Sights On Hijacking Payment Data
Tags: headlinehackerprivacybankcybercrimedata lossfraud
7:02
WinRAR Had A Code Execution Flaw For 14 Years
» ‎ Packet Storm Security Headlines

WinRAR Had A Code Execution Flaw For 14 Years
Tags: headlineflaw
7:02
Vulnerabilities Discovered In Several Password Managers
» ‎ Packet Storm Security Headlines

Vulnerabilities Discovered In Several Password Managers
Tags: headlineprivacyflawpassword
7:02
Microsoft Ramps Up GitHub Bug Bounty Payouts To Over $30,000
» ‎ Packet Storm Security Headlines

Microsoft Ramps Up GitHub Bug Bounty Payouts To Over $30,000
Tags: headlinehackermicrosoftflaw

7:01
The Woeful World of Worldwide E-Waste
» ‎ Hack a Day

How large is the cache of discarded electronics in your home? They were once expensive and cherished items, but now they’re a question-mark for responsible disposal. I’m going to dig into this problem — which goes far beyond your collection of dead smartphones — as well as the issues of …read more

Tags: featured
4:00
Custom Firmware For Cheap Fitness Trackers
» ‎ Hack a Day

The concept of wearable hardware is an enticing one, but it can be difficult to tackle for the first-time maker. While many of us are experienced at designing PCBs and soldering up arcane gadgets, interfacing with the soft and fleshy human form can present unforeseen difficulties. There’s a way around …read more

Tags: wearable hacks

2:11
FTPShell Sever 6.83 Denial Of Service
» ‎ Packet Storm Security Exploits

FTPShell Server version 6.83 suffers from a denial of service vulnerability.
Tags:

2:11
FTPShell Sever 6.83 Denial Of Service
» ‎ Packet Storm Security Recent Files

FTPShell Server version 6.83 suffers from a denial of service vulnerability.
Tags:

2:11
FTPShell Sever 6.83 Denial Of Service
» ‎ Packet Storm Security Misc. Files

FTPShell Server version 6.83 suffers from a denial of service vulnerability.
Tags:

1:00
Casio Watch Gets a MEMS Oscillator Upgrade
» ‎ Hack a Day

We’ve got to admit to being a bit of a Casio G-Shock watch geek. The big, chunky watches were every day carry items that survived everything we dished out, right up until the smartphone made wearing one seem redundant. But others continue to use and abuse G-Shocks, and some brave …read more

Tags: clock hacks

0:15
[SECURITY] [DSA 4396-1] ansible security update
» ‎ Bugtraq

Posted by Moritz Muehlenhoff on Feb 20
-------------------------------------------------------------------------
Debian Security Advisory DSA-4396-1 security () debian org
https://www.debian.org/security/ Moritz Muehlenhoff
February 19, 2019 https://www.debian.org/security/faq
-------------------------------------------------------------------------

Package : ansible
CVE ID : CVE-2018-10855 CVE-2018-10875...

Tags:

0:00
Vuln: systemd CVE-2019-6454 Local Denial of Service Vulnerability
» ‎ SecurityFocus Vulnerabilities

systemd CVE-2019-6454 Local Denial of Service Vulnerability
Tags:

February 19, 2019
22:00
Cheaply Charging Cylindrical Cells
» ‎ Hack a Day

For one reason or another, a lot of us have a bunch of 18650 cells sitting around. Whether they’re for flashlights, our fancy new vape pen, remote controlled toys, or something more obscure, there is a need to charge a bunch of lithium ion cells all at once. This project, …read more

Tags: Hardware
19:00
Visualizing Eddy Currents
» ‎ Hack a Day

If [Electroboom] gives up making videos and decides to become a lounge lizard in the Poconos, we hope he adopts the stage name Eddy Currents. However, he is talking about eddy currents in his recent video post that you can see below.

We know he doesn’t really think he can …read more

Tags: science
16:00
Sphero RVR’s Quest For A Niche In Introductory Robotics
» ‎ Hack a Day

Thanks to internet commerce opening up a global marketplace, it is now easier than ever for a budding roboticist to get started. There are so many robot kits available, across such a wide range of price and sophistication, that deciding which one to buy becomes a challenging project in itself. …read more

Tags: robots hacks

13:14
TestSSL 3.0rc4
» ‎ Packet Storm Security Recent Files

testssl.sh is a free command line tool which checks a server's service on any port for the support of TLS/SSL ciphers, protocols as well as recent cryptographic flaws, and much more. It is written in (pure) bash, makes only use of standard Unix utilities, openssl and last but not least bash sockets.
Tags:

13:14
TestSSL 3.0rc4
» ‎ Packet Storm Security Tools

testssl.sh is a free command line tool which checks a server's service on any port for the support of TLS/SSL ciphers, protocols as well as recent cryptographic flaws, and much more. It is written in (pure) bash, makes only use of standard Unix utilities, openssl and last but not least bash sockets.
Tags:

13:14
TestSSL 3.0rc4
» ‎ Packet Storm Security Misc. Files

testssl.sh is a free command line tool which checks a server's service on any port for the support of TLS/SSL ciphers, protocols as well as recent cryptographic flaws, and much more. It is written in (pure) bash, makes only use of standard Unix utilities, openssl and last but not least bash sockets.
Tags:

13:00
Building A 1.4W Laser Pointer In A Tiny Housing
» ‎ Hack a Day

Laser pointers were cool for about 30 seconds when they first came out, before becoming immediately passé and doing absolutely nothing to improve the boss’s quarterly reports presentation. However, just as with boom boxes and sports cars, more power can always make things better. [Styropyro] was unimpressed with the weak …read more

Tags: laser hacks

12:57
Belkin Wemo UPnP Remote Code Execution
» ‎ Packet Storm Security Exploits

This Metasploit module has been tested on a Wemo-enabled Crock-Pot, but other Wemo devices are known to be affected, albeit on a different RPORT (49153).
Tags:

12:57
Belkin Wemo UPnP Remote Code Execution
» ‎ Packet Storm Security Recent Files

This Metasploit module has been tested on a Wemo-enabled Crock-Pot, but other Wemo devices are known to be affected, albeit on a different RPORT (49153).
Tags:

12:57
Belkin Wemo UPnP Remote Code Execution
» ‎ Packet Storm Security Misc. Files

This Metasploit module has been tested on a Wemo-enabled Crock-Pot, but other Wemo devices are known to be affected, albeit on a different RPORT (49153).
Tags:

12:57
FaceTime Texture Processing Memory Corruption
» ‎ Packet Storm Security Exploits

FaceTime suffers from a memory corruption vulnerability in texture processing.
Tags:

12:57
FaceTime Texture Processing Memory Corruption
» ‎ Packet Storm Security Recent Files

FaceTime suffers from a memory corruption vulnerability in texture processing.
Tags:

12:57
FaceTime Texture Processing Memory Corruption
» ‎ Packet Storm Security Misc. Files

FaceTime suffers from a memory corruption vulnerability in texture processing.
Tags:

12:56
Microsoft Edge Insecure click2play Whitelist
» ‎ Packet Storm Security Advisories

Microsoft Edge has an issue where the default flash click2play whitelist is insecure.
Tags:

12:56
Microsoft Edge Insecure click2play Whitelist
» ‎ Packet Storm Security Recent Files

Microsoft Edge has an issue where the default flash click2play whitelist is insecure.
Tags:

12:56
Microsoft Edge Insecure click2play Whitelist
» ‎ Packet Storm Security Misc. Files

Microsoft Edge has an issue where the default flash click2play whitelist is insecure.
Tags:

12:54
Android seccomp Filter Ptrace Hole
» ‎ Packet Storm Security Exploits

On Android, a ptrace hold makes the seccomp filter useless on devices with a kernel with a version lower than 4.8.
Tags:

12:54
Android seccomp Filter Ptrace Hole
» ‎ Packet Storm Security Recent Files

On Android, a ptrace hold makes the seccomp filter useless on devices with a kernel with a version lower than 4.8.
Tags:

12:54
Android seccomp Filter Ptrace Hole
» ‎ Packet Storm Security Misc. Files

On Android, a ptrace hold makes the seccomp filter useless on devices with a kernel with a version lower than 4.8.
Tags:

12:51
Red Hat Security Advisory 2019-0373-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2019-0373-01 - Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 60.5.1 ESR. Issues addressed include integer overflow and use-after-free vulnerabilities.
Tags:

12:51
Red Hat Security Advisory 2019-0373-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2019-0373-01 - Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 60.5.1 ESR. Issues addressed include integer overflow and use-after-free vulnerabilities.
Tags:

12:51
Red Hat Security Advisory 2019-0373-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2019-0373-01 - Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 60.5.1 ESR. Issues addressed include integer overflow and use-after-free vulnerabilities.
Tags:

12:49
Red Hat Security Advisory 2019-0380-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2019-0380-01 - Red Hat Single Sign-On 7.2 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. This release of Red Hat Single Sign-On 7.2.6 serves as a replacement for Red Hat Single Sign-On 7.2.5, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Issues addressed include a cross site scripting vulnerability.
Tags:

12:49
Red Hat Security Advisory 2019-0380-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2019-0380-01 - Red Hat Single Sign-On 7.2 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. This release of Red Hat Single Sign-On 7.2.6 serves as a replacement for Red Hat Single Sign-On 7.2.5, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Issues addressed include a cross site scripting vulnerability.
Tags:

12:49
Red Hat Security Advisory 2019-0380-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2019-0380-01 - Red Hat Single Sign-On 7.2 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. This release of Red Hat Single Sign-On 7.2.6 serves as a replacement for Red Hat Single Sign-On 7.2.5, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Issues addressed include a cross site scripting vulnerability.
Tags:

12:47
MaxxAudio Drivers WavesSysSvc64.exe 1.6.2.0 Privilege Escalation
» ‎ Packet Storm Security Exploits

MaxxAudio Drivers WavesSysSvc64.exe version 1.6.2.0 suffers from a file permission privilege escalation vulnerability that results in SYSTEM level access.
Tags:

12:47
MaxxAudio Drivers WavesSysSvc64.exe 1.6.2.0 Privilege Escalation
» ‎ Packet Storm Security Recent Files

MaxxAudio Drivers WavesSysSvc64.exe version 1.6.2.0 suffers from a file permission privilege escalation vulnerability that results in SYSTEM level access.
Tags:

12:47
MaxxAudio Drivers WavesSysSvc64.exe 1.6.2.0 Privilege Escalation
» ‎ Packet Storm Security Misc. Files

MaxxAudio Drivers WavesSysSvc64.exe version 1.6.2.0 suffers from a file permission privilege escalation vulnerability that results in SYSTEM level access.
Tags:

12:46
Typo3 CMS Shop System tt_products 2.9.4 SQL Injection
» ‎ Packet Storm Security Exploits

Typo3 CMS Shop System tt_products version 2.9.4 suffers from a remote SQL injection vulnerability.
Tags:

12:46
Typo3 CMS Shop System tt_products 2.9.4 SQL Injection
» ‎ Packet Storm Security Recent Files

Typo3 CMS Shop System tt_products version 2.9.4 suffers from a remote SQL injection vulnerability.
Tags:

12:46
Typo3 CMS Shop System tt_products 2.9.4 SQL Injection
» ‎ Packet Storm Security Misc. Files

Typo3 CMS Shop System tt_products version 2.9.4 suffers from a remote SQL injection vulnerability.
Tags:

12:45
Jenkins Remote Code Execution
» ‎ Packet Storm Security Exploits

This write up contains details on how to perform remote code execution within Jenkins.
Tags:

12:45
Jenkins Remote Code Execution
» ‎ Packet Storm Security Recent Files

This write up contains details on how to perform remote code execution within Jenkins.
Tags:

12:45
Jenkins Remote Code Execution
» ‎ Packet Storm Security Misc. Files

This write up contains details on how to perform remote code execution within Jenkins.
Tags:

12:44
Webiness Inventory 2.3 Arbitrary File Upload
» ‎ Packet Storm Security Exploits

Webiness Inventory version 2.3 suffers from an arbitrary file upload vulnerability.
Tags:

12:44
Webiness Inventory 2.3 Arbitrary File Upload
» ‎ Packet Storm Security Recent Files

Webiness Inventory version 2.3 suffers from an arbitrary file upload vulnerability.
Tags:

12:44
Webiness Inventory 2.3 Arbitrary File Upload
» ‎ Packet Storm Security Misc. Files

Webiness Inventory version 2.3 suffers from an arbitrary file upload vulnerability.
Tags:

12:41
Typo3 CMS T3 EasyEvent tx_easyevent_pi1 0.37.3 SQL Injection
» ‎ Packet Storm Security Exploits

Typo3 CMS T3 EasyEvent tx_easyevent_pi1 version 0.37.3 suffers from a remote SQL injection vulnerability.
Tags:

12:41
Typo3 CMS T3 EasyEvent tx_easyevent_pi1 0.37.3 SQL Injection
» ‎ Packet Storm Security Recent Files

Typo3 CMS T3 EasyEvent tx_easyevent_pi1 version 0.37.3 suffers from a remote SQL injection vulnerability.
Tags:

12:41
Typo3 CMS T3 EasyEvent tx_easyevent_pi1 0.37.3 SQL Injection
» ‎ Packet Storm Security Misc. Files

Typo3 CMS T3 EasyEvent tx_easyevent_pi1 version 0.37.3 suffers from a remote SQL injection vulnerability.
Tags:

12:39
WordPress WooCommerce GloBee Payment Gateway 1.1.1 Bypass / Spoofing
» ‎ Packet Storm Security Exploits

WordPress WooCommerce plugin with GloBee cryptocurrency payment gateway versions 1.1.1 and below suffer from payment bypass and unauthorized order status spoofing vulnerabilities.
Tags:

12:39
WordPress WooCommerce GloBee Payment Gateway 1.1.1 Bypass / Spoofing
» ‎ Packet Storm Security Recent Files

WordPress WooCommerce plugin with GloBee cryptocurrency payment gateway versions 1.1.1 and below suffer from payment bypass and unauthorized order status spoofing vulnerabilities.
Tags:

12:39
WordPress WooCommerce GloBee Payment Gateway 1.1.1 Bypass / Spoofing
» ‎ Packet Storm Security Misc. Files

WordPress WooCommerce plugin with GloBee cryptocurrency payment gateway versions 1.1.1 and below suffer from payment bypass and unauthorized order status spoofing vulnerabilities.
Tags:

12:38
Typo3 CMS Realty Manager tx_realty_pi1 2.0.0 Database Disclosure / SQL Injection
» ‎ Packet Storm Security Exploits

Typo3 CMS Realty Manager tx_realty_pi1 version 2.0.0 suffers from database disclosure and remote SQL injection vulnerabilities.
Tags:

12:38
Typo3 CMS Realty Manager tx_realty_pi1 2.0.0 Database Disclosure / SQL Injection
» ‎ Packet Storm Security Recent Files

Typo3 CMS Realty Manager tx_realty_pi1 version 2.0.0 suffers from database disclosure and remote SQL injection vulnerabilities.
Tags:

12:38
Typo3 CMS Realty Manager tx_realty_pi1 2.0.0 Database Disclosure / SQL Injection
» ‎ Packet Storm Security Misc. Files

Typo3 CMS Realty Manager tx_realty_pi1 version 2.0.0 suffers from database disclosure and remote SQL injection vulnerabilities.
Tags:

12:36
Zoho ManageEngine ServiceDesk Plus (SDP) Arbitrary File Upload
» ‎ Packet Storm Security Exploits

Zoho ManageEngine ServiceDesk Plus (SDP) versions prior to 10.0 build 10012 suffer from an arbitrary file upload vulnerability.
Tags:

12:36
Zoho ManageEngine ServiceDesk Plus (SDP) Arbitrary File Upload
» ‎ Packet Storm Security Recent Files

Zoho ManageEngine ServiceDesk Plus (SDP) versions prior to 10.0 build 10012 suffer from an arbitrary file upload vulnerability.
Tags:

12:36
Zoho ManageEngine ServiceDesk Plus (SDP) Arbitrary File Upload
» ‎ Packet Storm Security Misc. Files

Zoho ManageEngine ServiceDesk Plus (SDP) versions prior to 10.0 build 10012 suffer from an arbitrary file upload vulnerability.
Tags:

12:36
Typo3 CMS Commerce DAM connector tx_commerce_pi1 0.1.0 SQL Injection
» ‎ Packet Storm Security Exploits

Typo3 CMS Commerce DAM connector tx_commerce_pi1 version 0.1.0 suffers from a remote SQL injection vulnerability.
Tags:

12:36
Typo3 CMS Commerce DAM connector tx_commerce_pi1 0.1.0 SQL Injection
» ‎ Packet Storm Security Recent Files

Typo3 CMS Commerce DAM connector tx_commerce_pi1 version 0.1.0 suffers from a remote SQL injection vulnerability.
Tags:

12:36
Typo3 CMS Commerce DAM connector tx_commerce_pi1 0.1.0 SQL Injection
» ‎ Packet Storm Security Misc. Files

Typo3 CMS Commerce DAM connector tx_commerce_pi1 version 0.1.0 suffers from a remote SQL injection vulnerability.
Tags:

12:33
Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2 Traversal / XSS
» ‎ Packet Storm Security Exploits

Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2 suffers from cross site scripting and path traversal vulnerabilities.
Tags:

12:33
Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2 Traversal / XSS
» ‎ Packet Storm Security Recent Files

Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2 suffers from cross site scripting and path traversal vulnerabilities.
Tags:

12:33
Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2 Traversal / XSS
» ‎ Packet Storm Security Misc. Files

Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2 suffers from cross site scripting and path traversal vulnerabilities.
Tags:

12:32
XAMPP 5.6.8 Cross Site Scripting / SQL Injection
» ‎ Packet Storm Security Exploits

XAMPP version 5.6.8 suffers from cross site scripting and remote SQL injection vulnerabilities.
Tags:

12:32
XAMPP 5.6.8 Cross Site Scripting / SQL Injection
» ‎ Packet Storm Security Recent Files

XAMPP version 5.6.8 suffers from cross site scripting and remote SQL injection vulnerabilities.
Tags:

12:32
XAMPP 5.6.8 Cross Site Scripting / SQL Injection
» ‎ Packet Storm Security Misc. Files

XAMPP version 5.6.8 suffers from cross site scripting and remote SQL injection vulnerabilities.
Tags:

12:31
NetSetMan 4.7.1 Denial Of Service
» ‎ Packet Storm Security Exploits

NetSetMan version 4.7.1 suffers from a denial of service vulnerability.
Tags:

12:31
NetSetMan 4.7.1 Denial Of Service
» ‎ Packet Storm Security Recent Files

NetSetMan version 4.7.1 suffers from a denial of service vulnerability.
Tags:

12:31
NetSetMan 4.7.1 Denial Of Service
» ‎ Packet Storm Security Misc. Files

NetSetMan version 4.7.1 suffers from a denial of service vulnerability.
Tags:

12:31
Typo3 Calendar Base tx_pxkalender_pi1 2.0.0 Database Disclosure / SQL Injection
» ‎ Packet Storm Security Exploits

Typo3 Calendar Base tx_pxkalender_pi1 version 2.0.0 suffers from database disclosure and remote SQL injection vulnerabilities.
Tags:

12:31
Typo3 Calendar Base tx_pxkalender_pi1 2.0.0 Database Disclosure / SQL Injection
» ‎ Packet Storm Security Recent Files

Typo3 Calendar Base tx_pxkalender_pi1 version 2.0.0 suffers from database disclosure and remote SQL injection vulnerabilities.
Tags:

12:31
Typo3 Calendar Base tx_pxkalender_pi1 2.0.0 Database Disclosure / SQL Injection
» ‎ Packet Storm Security Misc. Files

Typo3 Calendar Base tx_pxkalender_pi1 version 2.0.0 suffers from database disclosure and remote SQL injection vulnerabilities.
Tags:

12:31
Typo3 CMS BrowserMaps Leaflet Tutorial tx_browser_pi1 8.0.39 SQL Injection
» ‎ Packet Storm Security Exploits

Typo3 CMS BrowserMaps Leaflet Tutorial tx_browser_pi1 version 8.0.39 suffers from a remote SQL injection vulnerability.
Tags:

12:31
Typo3 CMS BrowserMaps Leaflet Tutorial tx_browser_pi1 8.0.39 SQL Injection
» ‎ Packet Storm Security Recent Files

Typo3 CMS BrowserMaps Leaflet Tutorial tx_browser_pi1 version 8.0.39 suffers from a remote SQL injection vulnerability.
Tags:

12:31
Typo3 CMS BrowserMaps Leaflet Tutorial tx_browser_pi1 8.0.39 SQL Injection
» ‎ Packet Storm Security Misc. Files

Typo3 CMS BrowserMaps Leaflet Tutorial tx_browser_pi1 version 8.0.39 suffers from a remote SQL injection vulnerability.
Tags:

12:30
Joomla JWallPapers 2.0.1 Cross Site Request Forgery / Shell Upload
» ‎ Packet Storm Security Exploits

Joomla JWallPapers component version 2.0.1 suffers from cross site request forgery and remote shell upload vulnerabilities.
Tags:

12:30
Joomla JWallPapers 2.0.1 Cross Site Request Forgery / Shell Upload
» ‎ Packet Storm Security Recent Files

Joomla JWallPapers component version 2.0.1 suffers from cross site request forgery and remote shell upload vulnerabilities.
Tags:

12:30
Joomla JWallPapers 2.0.1 Cross Site Request Forgery / Shell Upload
» ‎ Packet Storm Security Misc. Files

Joomla JWallPapers component version 2.0.1 suffers from cross site request forgery and remote shell upload vulnerabilities.
Tags:

12:29
eDirectory SQL Injection / File Disclosure
» ‎ Packet Storm Security Exploits

eDirectory suffers from file disclosure and remote SQL injection vulnerabilities.
Tags:

12:29
eDirectory SQL Injection / File Disclosure
» ‎ Packet Storm Security Recent Files

eDirectory suffers from file disclosure and remote SQL injection vulnerabilities.
Tags:

12:29
eDirectory SQL Injection / File Disclosure
» ‎ Packet Storm Security Misc. Files

eDirectory suffers from file disclosure and remote SQL injection vulnerabilities.
Tags:

12:28
BulletProof FTP Server 2019.0.0.50 Denial Of Service
» ‎ Packet Storm Security Exploits

BulletProof FTP Server version 2019.0.0.50 suffers from a denial of service vulnerability.
Tags:

12:28
BulletProof FTP Server 2019.0.0.50 Denial Of Service
» ‎ Packet Storm Security Recent Files

BulletProof FTP Server version 2019.0.0.50 suffers from a denial of service vulnerability.
Tags:

12:28
BulletProof FTP Server 2019.0.0.50 Denial Of Service
» ‎ Packet Storm Security Misc. Files

BulletProof FTP Server version 2019.0.0.50 suffers from a denial of service vulnerability.
Tags:

12:26
Valentina Studio 9.0.4 Denial Of Service
» ‎ Packet Storm Security Exploits

Valentina Studio version 9.0.4 suffers from a denial of service vulnerability.
Tags:

12:26
Valentina Studio 9.0.4 Denial Of Service
» ‎ Packet Storm Security Recent Files

Valentina Studio version 9.0.4 suffers from a denial of service vulnerability.
Tags:

12:26
Valentina Studio 9.0.4 Denial Of Service
» ‎ Packet Storm Security Misc. Files

Valentina Studio version 9.0.4 suffers from a denial of service vulnerability.
Tags:

11:31
3D Printed Alarm Clock Looks Just Like Store Bought
» ‎ Hack a Day

Clocks are a popular project on Hackaday. They’re a great way to showcase a whole range of creative build techniques, and can make an excellent showpiece as well. We’ve seen everything from the blinkiest binary build to the noisiest alarms, but [Benoit] has delivered something different — a stylish build that looks like it came right off the store shelf.

The clock features a large 7-segment display built with IN-PI554FCH LEDs, which are similiar to the popular WS2812Bs but with lower power consumption. There’s also an OLED display for reading the date and going through menus, capacitive touch buttons for …read more

Tags: printer hacks

11:26
M/Monit 3.7.2 Privilege Escalation
» ‎ Packet Storm Security Exploits

M/Monit version 3.7.2 suffers from a privilege escalation vulnerability.
Tags:

11:26
M/Monit 3.7.2 Privilege Escalation
» ‎ Packet Storm Security Recent Files

M/Monit version 3.7.2 suffers from a privilege escalation vulnerability.
Tags:

11:26
M/Monit 3.7.2 Privilege Escalation
» ‎ Packet Storm Security Misc. Files

M/Monit version 3.7.2 suffers from a privilege escalation vulnerability.
Tags:

11:24
Joomla Attachments 3.2.6 Shell Upload
» ‎ Packet Storm Security Exploits

Joomla Attachments component version 3.2.6 suffers from a remote shell upload vulnerability.
Tags:
11:22
Ask Expert Script 3.0.5 Cross Site Scripting / SQL Injection
» ‎ Packet Storm Security Exploits

Ask Expert Script version 3.0.5 suffers from cross site scripting and remote SQL injection vulnerabilities.
Tags:

10:01
Ask Hackaday: Is There a Legit Use for Operator Precedence?
» ‎ Hack a Day

Computing is really all about order. If you can take data, apply an operation to it, and get the same result every single time, then you have a stable and reliable computing system.

So it makes total sense that there is Operator Precedence. This is also called Order of Operations, and it dictates which computations will be performed first, and which will be performed last. To get the same results every time, you must perform addition, multiplication, power functions, bitwise math, and all other calculations in a codified order.

The question I’ve had on my mind lately is, does this …read more

Tags: Ask hackaday
8:31
Flux Engine Reads Floppies
» ‎ Hack a Day

It is a bit of a paradox that we are storing more and more information digitally, yet every year more and more of it is becoming harder to access. Data on a variety of tapes and disks that were once common, is now trapped on media due to lack of hardware to read it. Do you have a ZIP drive? Do you have a computer that it will work with? Floppies are problem too. You might think you beat the system just by having a USB floppy drive. While these do exist, they typically won’t read oddball formats. That is, …read more

Tags: Retrocomputing

7:24
Debian Security Advisory 4395-1
» ‎ Packet Storm Security Advisories

Debian Linux Security Advisory 4395-1 - Several vulnerabilities have been discovered in the chromium web browser.
Tags:

7:24
Debian Security Advisory 4395-1
» ‎ Packet Storm Security Recent Files

Debian Linux Security Advisory 4395-1 - Several vulnerabilities have been discovered in the chromium web browser.
Tags:

7:24
Debian Security Advisory 4395-1
» ‎ Packet Storm Security Misc. Files

Debian Linux Security Advisory 4395-1 - Several vulnerabilities have been discovered in the chromium web browser.
Tags:

7:23
Debian Security Advisory 4394-1
» ‎ Packet Storm Security Advisories

Debian Linux Security Advisory 4394-1 - Multiple security issues were found in the rdesktop RDP client, which could result in denial of service, information disclosure and the execution of arbitrary code.
Tags:

7:23
Debian Security Advisory 4394-1
» ‎ Packet Storm Security Recent Files

Debian Linux Security Advisory 4394-1 - Multiple security issues were found in the rdesktop RDP client, which could result in denial of service, information disclosure and the execution of arbitrary code.
Tags:

7:23
Debian Security Advisory 4394-1
» ‎ Packet Storm Security Misc. Files

Debian Linux Security Advisory 4394-1 - Multiple security issues were found in the rdesktop RDP client, which could result in denial of service, information disclosure and the execution of arbitrary code.
Tags:

7:23
Debian Security Advisory 4393-1
» ‎ Packet Storm Security Advisories

Debian Linux Security Advisory 4393-1 - Chris Coulson discovered a flaw in systemd leading to denial of service. An unprivileged user could take advantage of this issue to crash PID1 by sending a specially crafted D-Bus message on the system bus.
Tags:

7:23
Debian Security Advisory 4393-1
» ‎ Packet Storm Security Recent Files

Debian Linux Security Advisory 4393-1 - Chris Coulson discovered a flaw in systemd leading to denial of service. An unprivileged user could take advantage of this issue to crash PID1 by sending a specially crafted D-Bus message on the system bus.
Tags:

7:23
Debian Security Advisory 4393-1
» ‎ Packet Storm Security Misc. Files

Debian Linux Security Advisory 4393-1 - Chris Coulson discovered a flaw in systemd leading to denial of service. An unprivileged user could take advantage of this issue to crash PID1 by sending a specially crafted D-Bus message on the system bus.
Tags:

7:23
This Malware Turns ATM Hijacking Into A Slot Machine Game
» ‎ Packet Storm Security Headlines

This Malware Turns ATM Hijacking Into A Slot Machine Game
Tags: headlinehackermalwarebankcybercrimefraud
7:23
Millions Of Medical Calls Exposed Online
» ‎ Packet Storm Security Headlines

Millions Of Medical Calls Exposed Online
Tags: headlineprivacy
7:23
Splunk Pulls Out Of Russia With Mysterious Statement
» ‎ Packet Storm Security Headlines

Splunk Pulls Out Of Russia With Mysterious Statement
Tags: headlinerussia
7:23
A Deep Dive On The Recent Widespread DNS Hijacking Attacks
» ‎ Packet Storm Security Headlines

A Deep Dive On The Recent Widespread DNS Hijacking Attacks
Tags: headlinehackerprivacydnscyberwarphish

7:01
Bell Labs, Skunk Works, and the Crowd Sourcing of Innovation
» ‎ Hack a Day

I’ve noticed that we hear a lot less from corporate research labs than we used to. They still exist, though. Sure, Bell Labs is owned by Nokia and there is still some hot research at IBM even though they quit publication of the fabled IBM Technical Disclosure Bulletin in 1998. But today innovation is more likely to come from a small company attracting venture capital than from an established company investing in research. Why is that? And should it be that way?
The Way We Were
There was a time when every big company had a significant research and development …read more

Tags: business
4:01
Honda Key Fob Turned CNC Work of Art
» ‎ Hack a Day

Now that nearly every car on the road comes with an electronic key fob, people are desperate to find ways to repair these indispensable little gadgets without coughing up potentially hundreds of dollars at the dealership. There’s a whole market for replacement shells which you can transplant your (hopefully) still functional electronics into, but if you’re going to go through the trouble of putting the electronics into a new case, why not make it special?

That’s what [Michicanery] was thinking when he decided to build his own custom key fob. The end result is an utterly magnificent feat of engineering …read more

Tags: car hacks
1:01
Active Strain Relief for 3D-Printer Filament
» ‎ Hack a Day

Enclosure: [download]

Buying 3D-printer filament is little like eating potato chips: you can’t stop at just one. You start with basic black PLA, then you need a particular color for a special project, then you start experimenting with different plastics, and before you know it, you’ve got dozens of reels lined up. Trouble is, unless you move the in-use reel right over the printer, the filament can get a bit unruly as the printer sucks it up. What to do?

How about building an active strain relief system for your filament collection? That what [Daniel Harari] chose to do, and we have …read more

Tags: printer hacks

0:00
Vuln: Opencontainers runc CVE-2019-5736 Local Command Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

Opencontainers runc CVE-2019-5736 Local Command Execution Vulnerability
Tags:
0:00
Vuln: LibVNCServer Incomplete Fix Multiple Heap Buffer Overflow Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

LibVNCServer Incomplete Fix Multiple Heap Buffer Overflow Vulnerabilities
Tags:
0:00
Vuln: Delta Industrial Automation CNCSoft CVE-2019-6547 Denial of Service Vulnerability
» ‎ SecurityFocus Vulnerabilities

Delta Industrial Automation CNCSoft CVE-2019-6547 Denial of Service Vulnerability
Tags:
0:00
Vuln: Horner Automation Cscape CVE-2019-6555 Arbitrary Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

Horner Automation Cscape CVE-2019-6555 Arbitrary Code Execution Vulnerability
Tags:
0:00
Vuln: Elasticsearch Logstash CVE-2019-7612 Information Disclosure Vulnerability
» ‎ SecurityFocus Vulnerabilities

Elasticsearch Logstash CVE-2019-7612 Information Disclosure Vulnerability
Tags:
0:00
Vuln: WordPress CVE-2019-8943 Directory Traversal Vulnerability
» ‎ SecurityFocus Vulnerabilities

WordPress CVE-2019-8943 Directory Traversal Vulnerability
Tags:

February 18, 2019
22:01
WiFi Hides Inside a USB Cable
» ‎ Hack a Day

If you weren’t scared of USB cables before, you should be now. The O.MG cable (or Offensive MG kit) from [MG] hides a backdoor inside the shell of a USB connector. Plug this cable into your computer and you’ll be the victim of remote attacks over WiFi.

You might be asking what’s inside this tiny USB cable to make it susceptible to such attacks. That’s the trick: inside the shell of the USB ‘A’ connector is a PCB loaded up with a WiFi microcontroller — the documentation doesn’t say which one — that will send payloads over the USB device. …read more

Tags: security hacks

20:27
[SECURITY] [DSA 4395-1] chromium security update
» ‎ Bugtraq

Posted by Michael Gilbert on Feb 18
-------------------------------------------------------------------------
Debian Security Advisory DSA-4395-1 security () debian org
https://www.debian.org/security/ Michael Gilbert
February 18, 2019 https://www.debian.org/security/faq
-------------------------------------------------------------------------

Package : chromium
CVE ID : CVE-2018-17481 CVE-2019-5754...

Tags:

19:01
MIT IAP Tackles Radio
» ‎ Hack a Day

MIT is well known for rigorous courses, but they also have a special four-week term at the start of each year called the IAP — Independent Activities Period. This year, the MIT Radio Society had several interesting presentations on both the history and application of radio. You weren’t there? No problem, as the nine lecture were all recorded for you to watch at your leisure. You can see one of the nine, below.

These aren’t some five minute quicky videos, either. They are basically live captures that run anywhere from an hour to almost two hours in length. The topics …read more

Tags: radio hacks

18:34
[SECURITY] [DSA 4394-1] rdesktop security update
» ‎ Bugtraq

Posted by Moritz Muehlenhoff on Feb 18
-------------------------------------------------------------------------
Debian Security Advisory DSA-4394-1 security () debian org
https://www.debian.org/security/ Moritz Muehlenhoff
February 18, 2019 https://www.debian.org/security/faq
-------------------------------------------------------------------------

Package : rdesktop
CVE ID : CVE-2018-8791 CVE-2018-8792...

Tags:
18:30
[SECURITY] [DSA 4393-1] systemd security update
» ‎ Bugtraq

Posted by Salvatore Bonaccorso on Feb 18
-------------------------------------------------------------------------
Debian Security Advisory DSA-4393-1 security () debian org
https://www.debian.org/security/ Salvatore Bonaccorso
February 18, 2019 https://www.debian.org/security/faq
-------------------------------------------------------------------------

Package : systemd
CVE ID : CVE-2019-6454

Chris Coulson...

Tags:

16:01
Inefficient NeoPixel Control Solved with Hardware Hackery
» ‎ Hack a Day

Everyone loves NeoPixels. Individually addressable RGB LEDs at a low price. Just attach an Arduino, load the demo code, and enjoy your blinking lights.

But it turns out that demo code isn’t very efficient. [Ben Heck] practically did a spit take when he discovered that the ESP32 sample code for NeoPixels used a uint32 to store each bit of data. This meant 96 bytes of RAM were required for each LED. With 4k of RAM, you can control 42 LEDs. That’s the same amount of RAM that the Apollo Guidance Computer needed to get to the moon!

His adventure is …read more

Tags: led hacks
13:01
Travelling The Oregon Trail With An Apple II Robot
» ‎ Hack a Day

For one reason or another, we’re going with a retro-futuristic 80s aesthetic in this case, [Mike] decided to turn an Apple IIe into a robot. If you have to ask why, you’ll never know, but this project does have some interesting things going for it. There’s a voice synthesizer, a brand spankin’ new power supply, and it rolls around on the floor thanks to Apple BASIC.

Since this is a mobile robot, there needs to be a power supply in there somewhere. The Apple II had a fantastic switching power supply, but it ran off mains voltage. To make this …read more

Tags: classic hacks
11:30
The Rotary Joystick Can Take A Beating
» ‎ Hack a Day

It’s a well-known fact amongst the older set that games used to be harder. Back in the 1980s, most home computers had awful keyboards, barely adequate joysticks, and the games had to be difficult to have any longevity, because there’s only so much you can fit into a single sided disk. Some of these games became known as joystick killers, due to the repetitive thrashing movements required to win. [Jan] was tired of letting Decathlon and its ilk get the better of him and his controllers, so built a joystick that was up to the task.

The basic concept of …read more

Tags: Retrocomputing

11:02
Red Hat Security Advisory 2019-0367-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2019-0367-01 - Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience. This release of Red Hat JBoss Core Services Apache HTTP Server 2.4.29 Service Pack 1 serves as an update to Red Hat JBoss Core Services Apache HTTP Server 2.4.29, and includes bug fixes for CVEs which are linked to in the References section. Issues addressed include bypass, denial of service, null pointer, out of bounds write, traversal, and use-after-free vulnerabilities.
Tags:

11:02
Red Hat Security Advisory 2019-0367-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2019-0367-01 - Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience. This release of Red Hat JBoss Core Services Apache HTTP Server 2.4.29 Service Pack 1 serves as an update to Red Hat JBoss Core Services Apache HTTP Server 2.4.29, and includes bug fixes for CVEs which are linked to in the References section. Issues addressed include bypass, denial of service, null pointer, out of bounds write, traversal, and use-after-free vulnerabilities.
Tags:

11:02
Red Hat Security Advisory 2019-0367-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2019-0367-01 - Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience. This release of Red Hat JBoss Core Services Apache HTTP Server 2.4.29 Service Pack 1 serves as an update to Red Hat JBoss Core Services Apache HTTP Server 2.4.29, and includes bug fixes for CVEs which are linked to in the References section. Issues addressed include bypass, denial of service, null pointer, out of bounds write, traversal, and use-after-free vulnerabilities.
Tags:

11:02
Ubuntu Security Notice USN-3891-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 3891-1 - It was discovered that systemd incorrectly handled certain D-Bus messages. A local unprivileged attacker could exploit this in order to crash the init process, resulting in a system denial-of-service.
Tags:

11:02
Ubuntu Security Notice USN-3891-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 3891-1 - It was discovered that systemd incorrectly handled certain D-Bus messages. A local unprivileged attacker could exploit this in order to crash the init process, resulting in a system denial-of-service.
Tags:

11:02
Ubuntu Security Notice USN-3891-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 3891-1 - It was discovered that systemd incorrectly handled certain D-Bus messages. A local unprivileged attacker could exploit this in order to crash the init process, resulting in a system denial-of-service.
Tags:

11:02
Ubuntu Security Notice USN-3850-2
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 3850-2 - USN-3850-1 fixed several vulnerabilities in NSS. This update provides the corresponding update for Ubuntu 12.04 ESM. Keegan Ryan discovered that NSS incorrectly handled ECDSA key generation. A local attacker could possibly use this issue to perform a cache-timing attack and recover private ECDSA keys. Various other issues were also addressed.
Tags:

11:02
Ubuntu Security Notice USN-3850-2
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 3850-2 - USN-3850-1 fixed several vulnerabilities in NSS. This update provides the corresponding update for Ubuntu 12.04 ESM. Keegan Ryan discovered that NSS incorrectly handled ECDSA key generation. A local attacker could possibly use this issue to perform a cache-timing attack and recover private ECDSA keys. Various other issues were also addressed.
Tags:

11:02
Ubuntu Security Notice USN-3850-2
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 3850-2 - USN-3850-1 fixed several vulnerabilities in NSS. This update provides the corresponding update for Ubuntu 12.04 ESM. Keegan Ryan discovered that NSS incorrectly handled ECDSA key generation. A local attacker could possibly use this issue to perform a cache-timing attack and recover private ECDSA keys. Various other issues were also addressed.
Tags:

11:01
Red Hat Security Advisory 2019-0365-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2019-0365-01 - Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red Hat JBoss Enterprise Application Platform 7.1.6 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.1.5, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Issues addressed include a cross site scripting vulnerability.
Tags:

11:01
Red Hat Security Advisory 2019-0365-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2019-0365-01 - Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red Hat JBoss Enterprise Application Platform 7.1.6 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.1.5, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Issues addressed include a cross site scripting vulnerability.
Tags:

11:01
Red Hat Security Advisory 2019-0365-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2019-0365-01 - Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red Hat JBoss Enterprise Application Platform 7.1.6 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.1.5, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Issues addressed include a cross site scripting vulnerability.
Tags:

11:01
Red Hat Security Advisory 2019-0361-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2019-0361-01 - The RHV-M Virtual Appliance automates the process of installing and configuring the Red Hat Virtualization Manager. The appliance is available to download as an OVA file from the Customer Portal. Issues addressed include stack overflow vulnerabilities.
Tags:

11:01
Red Hat Security Advisory 2019-0361-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2019-0361-01 - The RHV-M Virtual Appliance automates the process of installing and configuring the Red Hat Virtualization Manager. The appliance is available to download as an OVA file from the Customer Portal. Issues addressed include stack overflow vulnerabilities.
Tags:

11:01
Red Hat Security Advisory 2019-0361-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2019-0361-01 - The RHV-M Virtual Appliance automates the process of installing and configuring the Red Hat Virtualization Manager. The appliance is available to download as an OVA file from the Customer Portal. Issues addressed include stack overflow vulnerabilities.
Tags:

10:59
Oracle Java Runtime Environment TTF Font Heap Out-Of-Bounds Read
» ‎ Packet Storm Security Exploits

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 while fuzz-testing the processing of TrueType fonts rendering in AlternateSubstitutionSubtable::process.
Tags:

10:59
Oracle Java Runtime Environment TTF Font Heap Out-Of-Bounds Read
» ‎ Packet Storm Security Recent Files

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 while fuzz-testing the processing of TrueType fonts rendering in AlternateSubstitutionSubtable::process.
Tags:

10:59
Oracle Java Runtime Environment TTF Font Heap Out-Of-Bounds Read
» ‎ Packet Storm Security Misc. Files

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 while fuzz-testing the processing of TrueType fonts rendering in AlternateSubstitutionSubtable::process.
Tags:

10:57
Oracle Java Runtime Environment TTF Font Heap Out-Of-Bounds Read
» ‎ Packet Storm Security Exploits

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 while fuzz-testing the processing of TrueType fonts rendering in ExtractBitMap_blocClass.
Tags:

10:57
Oracle Java Runtime Environment TTF Font Heap Out-Of-Bounds Read
» ‎ Packet Storm Security Recent Files

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 while fuzz-testing the processing of TrueType fonts rendering in ExtractBitMap_blocClass.
Tags:

10:57
Oracle Java Runtime Environment TTF Font Heap Out-Of-Bounds Read
» ‎ Packet Storm Security Misc. Files

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 while fuzz-testing the processing of TrueType fonts rendering in ExtractBitMap_blocClass.
Tags:

10:55
Oracle Java Runtime Environment TTF Font Heap Out-Of-Bounds Read
» ‎ Packet Storm Security Exploits

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 while fuzz-testing the processing of TrueType fonts rendering in OpenTypeLayoutEngine::adjustGlyphPositions.
Tags:

10:55
Oracle Java Runtime Environment TTF Font Heap Out-Of-Bounds Read
» ‎ Packet Storm Security Recent Files

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 while fuzz-testing the processing of TrueType fonts rendering in OpenTypeLayoutEngine::adjustGlyphPositions.
Tags:

10:55
Oracle Java Runtime Environment TTF Font Heap Out-Of-Bounds Read
» ‎ Packet Storm Security Misc. Files

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 while fuzz-testing the processing of TrueType fonts rendering in OpenTypeLayoutEngine::adjustGlyphPositions.
Tags:

10:53
Oracle Java Runtime Environment OpenType Font Heap Out-Of-Bounds Read
» ‎ Packet Storm Security Exploits

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 while fuzz-testing the processing of OpenType fonts.
Tags:

10:53
Oracle Java Runtime Environment OpenType Font Heap Out-Of-Bounds Read
» ‎ Packet Storm Security Recent Files

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 while fuzz-testing the processing of OpenType fonts.
Tags:

10:53
Oracle Java Runtime Environment OpenType Font Heap Out-Of-Bounds Read
» ‎ Packet Storm Security Misc. Files

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 while fuzz-testing the processing of OpenType fonts.
Tags:

10:52
HTMLy 2.7.4 Cross Site Scripting
» ‎ Packet Storm Security Exploits

HTMLy version 2.7.4 suffers from multiple cross site scripting vulnerabilities.
Tags:

10:52
HTMLy 2.7.4 Cross Site Scripting
» ‎ Packet Storm Security Recent Files

HTMLy version 2.7.4 suffers from multiple cross site scripting vulnerabilities.
Tags:

10:52
HTMLy 2.7.4 Cross Site Scripting
» ‎ Packet Storm Security Misc. Files

HTMLy version 2.7.4 suffers from multiple cross site scripting vulnerabilities.
Tags:

10:51
Comodo Dome Firewall 2.7.0 Cross Site Scripting
» ‎ Packet Storm Security Exploits

Comodo Dome Firewall version 2.7.0 suffers from multiple cross site scripting vulnerabilities.
Tags:

10:51
Comodo Dome Firewall 2.7.0 Cross Site Scripting
» ‎ Packet Storm Security Recent Files

Comodo Dome Firewall version 2.7.0 suffers from multiple cross site scripting vulnerabilities.
Tags:

10:51
Comodo Dome Firewall 2.7.0 Cross Site Scripting
» ‎ Packet Storm Security Misc. Files

Comodo Dome Firewall version 2.7.0 suffers from multiple cross site scripting vulnerabilities.
Tags:

10:01
Electron Microscopes Are Awesome: Everything You Didn’t Know You Wanted to Know
» ‎ Hack a Day

Electron microscopes were once the turf of research laboratories that could foot the hefty bill of procuring and maintaining such equipment. But old models have been finding their way into the hands of eager individuals who are giving us an inside look at the rare equipment. Before you start scouring Craigslist, go on a crash course of what you need to know with Adam McComb’s Hacker’s Guide to Electron Microscopy. He presented the talk at the 2018 Hackaday Superconference and the recording was just published, you’ll find it below.

Two Ways to Make the Really Small, Big

The first thing …read more

Tags: classic hacks
9:00
X-Rays and High Voltage Hack Chat
» ‎ Hack a Day

Join us on Wednesday at noon Pacific time for the X-rays and high-voltage Hack Chat!

Fran Piernas likes to push the envelope a bit with projects that others might shy away from. A quick glance at his Hackday.io profile reveals a few of the exciting projects he’s been working on recently, including a DIY X-ray machine and the high-voltage driver needed to run it. Not only that, he’s recently taken his home-brew X-ray rig to the next level – a computed tomography (CT) scanner. His YouTube channel also has some exciting stuff using potentially lethal voltages and ionizing radiation.

Please …read more

Tags: hackaday Columns

8:44
macOS TCP/4444 Bind Shell Null Free Shellcode
» ‎ Packet Storm Security Recent Files

123 bytes small macOS TCP/4444 /bin/sh binding null free shellcode.
Tags:

8:44
macOS TCP/4444 Bind Shell Null Free Shellcode
» ‎ Packet Storm Security Misc. Files

123 bytes small macOS TCP/4444 /bin/sh binding null free shellcode.
Tags:

8:31
Debian Security Advisory 4388-2
» ‎ Packet Storm Security Advisories

Debian Linux Security Advisory 4388-2 - Kushal Kumaran reported that the update for mosquitto issued as DSA 4388-1 causes mosquitto to crash when reloading the persistent database. Updated packages are now available to correct this issue.
Tags:

8:31
Debian Security Advisory 4388-2
» ‎ Packet Storm Security Recent Files

Debian Linux Security Advisory 4388-2 - Kushal Kumaran reported that the update for mosquitto issued as DSA 4388-1 causes mosquitto to crash when reloading the persistent database. Updated packages are now available to correct this issue.
Tags:

8:31
Debian Security Advisory 4388-2
» ‎ Packet Storm Security Misc. Files

Debian Linux Security Advisory 4388-2 - Kushal Kumaran reported that the update for mosquitto issued as DSA 4388-1 causes mosquitto to crash when reloading the persistent database. Updated packages are now available to correct this issue.
Tags:

8:30
Master IP CAM 01 3.3.4.2103 Remote Command Execution
» ‎ Packet Storm Security Exploits

Master IP CAM 01 version 3.3.4.2103 suffers from a remote command execution vulnerability.
Tags:

8:30
Master IP CAM 01 3.3.4.2103 Remote Command Execution
» ‎ Packet Storm Security Recent Files

Master IP CAM 01 version 3.3.4.2103 suffers from a remote command execution vulnerability.
Tags:

8:30
Master IP CAM 01 3.3.4.2103 Remote Command Execution
» ‎ Packet Storm Security Misc. Files

Master IP CAM 01 version 3.3.4.2103 suffers from a remote command execution vulnerability.
Tags:

8:30
Entry-Level SLA Printer Gets Upgrades, Prints Better
» ‎ Hack a Day

Fused-deposition modeling (FDM) printers have the lion’s share of the 3D-printing market, with cheap, easy-to-use printers slurping up thousands of kilos of filament every year. So where’s the challenge with 3D-printing anymore? Is there any room left to tinker? [Physics Anonymous] thinks so, and has started working on what might be the next big challenge in additive manufacturing for the hobbyist: hacking cheap stereolithography (SLA) printers. To wit, this teardown of and improvements to an Anycubic Photon printer.

The Photon, available for as little as $450, has a lot going for it in the simplicity department. There’s no need to …read more

Tags: printer hacks

8:29
ArangoDB Community Edition 3.4.2-1 Cross Site Scripting
» ‎ Packet Storm Security Exploits

ArangoDB Community Edition version 3.4.2-1 suffers from a cross site scripting vulnerability.
Tags:

8:29
ArangoDB Community Edition 3.4.2-1 Cross Site Scripting
» ‎ Packet Storm Security Recent Files

ArangoDB Community Edition version 3.4.2-1 suffers from a cross site scripting vulnerability.
Tags:

8:29
ArangoDB Community Edition 3.4.2-1 Cross Site Scripting
» ‎ Packet Storm Security Misc. Files

ArangoDB Community Edition version 3.4.2-1 suffers from a cross site scripting vulnerability.
Tags:

8:27
qdPM 9.1 Cross Site Scripting
» ‎ Packet Storm Security Exploits

qdPM version 9.1 suffers from multiple cross site scripting vulnerabilities.
Tags:

8:27
qdPM 9.1 Cross Site Scripting
» ‎ Packet Storm Security Recent Files

qdPM version 9.1 suffers from multiple cross site scripting vulnerabilities.
Tags:

8:27
qdPM 9.1 Cross Site Scripting
» ‎ Packet Storm Security Misc. Files

qdPM version 9.1 suffers from multiple cross site scripting vulnerabilities.
Tags:

8:26
Apache CouchDB 2.3.0 Cross Site Scripting
» ‎ Packet Storm Security Exploits

Apache CouchDB version 2.3.0 suffers from multiple cross site scripting vulnerabilities.
Tags:

8:26
Apache CouchDB 2.3.0 Cross Site Scripting
» ‎ Packet Storm Security Recent Files

Apache CouchDB version 2.3.0 suffers from multiple cross site scripting vulnerabilities.
Tags:

8:26
Apache CouchDB 2.3.0 Cross Site Scripting
» ‎ Packet Storm Security Misc. Files

Apache CouchDB version 2.3.0 suffers from multiple cross site scripting vulnerabilities.
Tags:

8:24
CMSsite 1.0 post.php SQL Injection
» ‎ Packet Storm Security Exploits

CMSsite version 1.0 suffers from a remote SQL injection vulnerability in post.php. This version of the software has been known to have SQL injection vulnerabilities since 2010.
Tags:

8:24
CMSsite 1.0 post.php SQL Injection
» ‎ Packet Storm Security Recent Files

CMSsite version 1.0 suffers from a remote SQL injection vulnerability in post.php. This version of the software has been known to have SQL injection vulnerabilities since 2010.
Tags:

8:24
CMSsite 1.0 post.php SQL Injection
» ‎ Packet Storm Security Misc. Files

CMSsite version 1.0 suffers from a remote SQL injection vulnerability in post.php. This version of the software has been known to have SQL injection vulnerabilities since 2010.
Tags:

8:19
mIRC Remote Command Execution
» ‎ Packet Storm Security Exploits

mIRC versions prior to 7.55 suffer from a remote command execution using argument injection through custom URI protocol handlers.
Tags:

8:19
mIRC Remote Command Execution
» ‎ Packet Storm Security Recent Files

mIRC versions prior to 7.55 suffer from a remote command execution using argument injection through custom URI protocol handlers.
Tags:

8:19
mIRC Remote Command Execution
» ‎ Packet Storm Security Misc. Files

mIRC versions prior to 7.55 suffer from a remote command execution using argument injection through custom URI protocol handlers.
Tags:

8:18
Digi TransPort LR54 Restricted Shell Escape
» ‎ Packet Storm Security Exploits

Digi TransPort LR54 suffers from a restricted shell bypass vulnerability that gets a root shell.
Tags:

8:18
Digi TransPort LR54 Restricted Shell Escape
» ‎ Packet Storm Security Recent Files

Digi TransPort LR54 suffers from a restricted shell bypass vulnerability that gets a root shell.
Tags:

8:18
Digi TransPort LR54 Restricted Shell Escape
» ‎ Packet Storm Security Misc. Files

Digi TransPort LR54 suffers from a restricted shell bypass vulnerability that gets a root shell.
Tags:

8:15
Realterm Serial Termianl 2.0.0.70 Buffer Overflow
» ‎ Packet Storm Security Exploits

Realterm Serial Terminal version 2.0.0.70 local buffer overflow SEH exploit.
Tags:

8:15
Realterm Serial Termianl 2.0.0.70 Buffer Overflow
» ‎ Packet Storm Security Recent Files

Realterm Serial Terminal version 2.0.0.70 local buffer overflow SEH exploit.
Tags:

8:15
Realterm Serial Termianl 2.0.0.70 Buffer Overflow
» ‎ Packet Storm Security Misc. Files

Realterm Serial Terminal version 2.0.0.70 local buffer overflow SEH exploit.
Tags:

8:15
Debian Security Advisory 4392-1
» ‎ Packet Storm Security Advisories

Debian Linux Security Advisory 4392-1 - Multiple security issues have been found in the Thunderbird mail client, which could lead to the execution of arbitrary code, denial of service or spoofing of S/MIME signatures.
Tags:

8:15
Debian Security Advisory 4392-1
» ‎ Packet Storm Security Recent Files

Debian Linux Security Advisory 4392-1 - Multiple security issues have been found in the Thunderbird mail client, which could lead to the execution of arbitrary code, denial of service or spoofing of S/MIME signatures.
Tags:

8:15
Debian Security Advisory 4392-1
» ‎ Packet Storm Security Misc. Files

Debian Linux Security Advisory 4392-1 - Multiple security issues have been found in the Thunderbird mail client, which could lead to the execution of arbitrary code, denial of service or spoofing of S/MIME signatures.
Tags:

8:13
MISP 2.4.97 SQL Injection / Command Injection
» ‎ Packet Storm Security Exploits

MISP version 2.4.97 suffers from SQL command execution via command injection in the STIX module.
Tags:

8:13
MISP 2.4.97 SQL Injection / Command Injection
» ‎ Packet Storm Security Recent Files

MISP version 2.4.97 suffers from SQL command execution via command injection in the STIX module.
Tags:

8:13
MISP 2.4.97 SQL Injection / Command Injection
» ‎ Packet Storm Security Misc. Files

MISP version 2.4.97 suffers from SQL command execution via command injection in the STIX module.
Tags:

8:02
macOS execve(/bin/sh) Null Free Shellcode
» ‎ Packet Storm Security Recent Files

31 bytes small macOS execve(/bin/sh) null free shellcode.
Tags:

8:02
macOS execve(/bin/sh) Null Free Shellcode
» ‎ Packet Storm Security Misc. Files

31 bytes small macOS execve(/bin/sh) null free shellcode.
Tags:

7:55
macOS TCP Port 4444 IPv6 Shellcode
» ‎ Packet Storm Security Recent Files

129 bytes small macOS TCP/4444 binding IPv6 shellcode.
Tags:

7:55
macOS TCP Port 4444 IPv6 Shellcode
» ‎ Packet Storm Security Misc. Files

129 bytes small macOS TCP/4444 binding IPv6 shellcode.
Tags:

7:40
UK Lawmakers Say Facebook Broke Rules, Should Be Regulated
» ‎ Packet Storm Security Headlines

UK Lawmakers Say Facebook Broke Rules, Should Be Regulated
Tags: headlinegovernmentprivacybritaindata lossfacebooksocial
7:40
Australian Political Parties Hit By State Actor Hack
» ‎ Packet Storm Security Headlines

Australian Political Parties Hit By State Actor Hack
Tags: headlinehackergovernmentaustraliacyberwar
7:39
Special Counsel Robert Mueller Questioned Ex-Cambridge Analytica Director
» ‎ Packet Storm Security Headlines

Special Counsel Robert Mueller Questioned Ex-Cambridge Analytica Director
Tags: headlinegovernmentusarussiafraudfacebookfbi
7:39
Google Earth Accidentally Reveals Secret Military Sites
» ‎ Packet Storm Security Headlines

Google Earth Accidentally Reveals Secret Military Sites
Tags: headlinegovernmentdata losscyberwargooglespywaretaiwanmilitary

7:01
Predicting Weather with the Internet of Cars
» ‎ Hack a Day

Follow this train of thought: cars have sensors, cars are in frequent use over large areas, cars are the ultimate distributed sensor network for weather conditions.

Many years ago, as I wasted yet another chunk of my life sitting in the linear parking lot that was my morning commute, I mused that there had to be a way to prevent this madness. I thought: What if there was a way for the cars to tell each other where slowdowns are? This was long before smartphones, so it would have to be done the hard way. I imagined that each vehicle …read more

Tags: featured
4:00
Offline E-Paper Typewriter Lets You Write Without Distractions
» ‎ Hack a Day

Living and working online is not always easy, especially when it comes to staying focused. All it takes is a moment’s weakness to click on something you shouldn’t and fall down a time-wasting and creativity-killing rabbit hole. Imagine how the creative juices would come to a boil if it were not for the attractive nuisances that lie as close as the next browser tab over.

Creativity-killing online temptations are too much for some to resist, which is why we find this homebrew electronic typewriter so intriguing. Dubbed “SPUDwrite”, or “Single Purpose User Device” by its creator [Lucian], the device is …read more

Tags: misc hacks

2:11
macOS 127.0.0.1:4444 Reverse Shell Shellcode
» ‎ Packet Storm Security Recent Files

103 bytes small macOS reverse (127.0.0.1:4444/TCP) shell (/bin/sh) with null-free shellcode.
Tags:

2:11
macOS 127.0.0.1:4444 Reverse Shell Shellcode
» ‎ Packet Storm Security Misc. Files

103 bytes small macOS reverse (127.0.0.1:4444/TCP) shell (/bin/sh) with null-free shellcode.
Tags:

1:00
Immersive Augmented Reality on a Budget
» ‎ Hack a Day

By now we’ve all seen the cheap headsets that essentially stick a smartphone a few inches away from your face to function as a low-cost alternative to devices like Oculus Rift. Available for as little as a few dollars, it’s hard to beat these gadgets for experimenting with VR on a budget. But what about if you’re more interested in working with augmented reality, where rendered images are superimposed onto your real-world view rather than replacing it?

As it turns out, there are now cheap headsets to do that with your phone as well. [kvtoet] picked one of these gadgets …read more

Tags: android hacks

0:00
Vuln: Multiple F5 BIG-IP Products CVE-2018-15319 Denial of Service Vulnerability
» ‎ SecurityFocus Vulnerabilities

Multiple F5 BIG-IP Products CVE-2018-15319 Denial of Service Vulnerability
Tags:
0:00
Vuln: Multiple Dasan GPON Routers Command Injection and Authentication Bypass Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

Multiple Dasan GPON Routers Command Injection and Authentication Bypass Vulnerabilities
Tags:
0:00
Vuln: SolarWinds Orion Network Performance Monitor (NPM) CVE-2019-8917 Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

SolarWinds Orion Network Performance Monitor (NPM) CVE-2019-8917 Remote Code Execution Vulnerability
Tags:
0:00
Vuln: QEMU CVE-2019-3812 Out-Of-Bounds Read Local Information Disclosure Vulnerability
» ‎ SecurityFocus Vulnerabilities

QEMU CVE-2019-3812 Out-Of-Bounds Read Local Information Disclosure Vulnerability
Tags:

February 17, 2019
22:00
Downloadable 3D Cockpits Enhance FPV Racing
» ‎ Hack a Day

First Person View (or First Person Video) in RC refers to piloting a remote-controlled vehicle or aircraft via a video link, and while serious racers will mount the camera in whatever way offers the best advantage, it’s always fun to mount the camera where a miniature pilot’s head would be, and therefore obtain a more immersive view of the action. [SupermotoXL] is clearly a fan of this approach, and shared downloadable designs for 3D printed cockpit kits for a few models of RC cars, including a more generic assembly for use with other vehicles. The models provide a dash, steering …read more

Tags: drone hacks

20:13
[SECURITY] [DSA 4388-2] mosquitto regression update
» ‎ Bugtraq

Posted by Salvatore Bonaccorso on Feb 17
-------------------------------------------------------------------------
Debian Security Advisory DSA-4388-2 security () debian org
https://www.debian.org/security/ Salvatore Bonaccorso
February 17, 2019 https://www.debian.org/security/faq
-------------------------------------------------------------------------

Package : mosquitto
Debian Bug : 922071

Kushal Kumaran reported...

Tags:
20:09
CVE-2018-20162: Digi TransPort LR54 Restricted Shell Escape
» ‎ Bugtraq

Posted by Stig Palmquist on Feb 17
CVE-2018-20162: Digi TransPort LR54 Restricted Shell Escape
===========================================================

The Digi TransPort LR54 is a high speed LTE router commonly used by industry,
infrastructure, retail and public transportation.

It supports running python scripts in a restricted sandbox, and has a custom
shell accessible over SSH which is subjected to the same restrictions. The
underlying OS is inaccessible to the...

Tags:
20:06
[SECURITY] [DSA 4392-1] thunderbird security update
» ‎ Bugtraq

Posted by Moritz Muehlenhoff on Feb 17
-------------------------------------------------------------------------
Debian Security Advisory DSA-4392-1 security () debian org
https://www.debian.org/security/ Moritz Muehlenhoff
February 16, 2019 https://www.debian.org/security/faq
-------------------------------------------------------------------------

Package : thunderbird
CVE ID : CVE-2018-18356 CVE-2018-18500...

Tags:
19:17
DASAN H665 has vendor backdoor built into BusyBox’s /bin/login
» ‎ Bugtraq

Posted by Krzysztof Burghardt on Feb 17
Hi!

DASAN H665 has vendor backdoor built into BusyBox /bin/login. Account
named "dnsekakf2$$" gives access to admin (uid 0) account over telnet
without any password, at least for administration interface documented
in H665 Quick Guide (subnet 192.168.55.0/24 on LAN interface).

$ telnet 192.168.55.1
Trying 192.168.55.1...
Connected to 192.168.55.1.
Escape character is '^]'.
tc login: dnsekakf2$$
# uname -a
Linux tc 2.6.36 #1...

Tags:

19:00
Anti-Lock Brakes for Bike Might Make Rides a Little Safer
» ‎ Hack a Day

Crashing one’s bike is a childhood rite of passage, one that can teach valuable lessons in applied physics. Assuming the kid is properly protected and the crash is fairly tame, scrapes and bruises are exchanged for the wisdom to avoid sand and gravel patches, and how to avoid a ballistic dismount by not applying the front brakes harder than or before the rear brakes.

But for many of us, those lessons were learned long ago using a body far more flexible than the version we’re currently in, and the stakes are higher for a bike ride that includes braking mistakes. …read more

Tags: transportation hacks
16:00
Hackaday Links: February 17, 2019
» ‎ Hack a Day

There is a population of retrocomputing enthusiasts out there, whose basements, garages, and attics have been taken over by machines of years past. Most of the time, these people concentrate on one make; you’re an Apple guy, or you’re a Commodore guy, or you’re a Ford guy, or you’re a Chevy guy. The weirdos drive around with an MSX in the trunk of an RX7. This is the auction for nobody. NASA’s JPL Lab is getting rid of several tons of computer equipment, all from various manufacturers, and not very ‘vintage’ at all. Check out the list. There are CRT …read more

Tags: hackaday Columns
13:00
How To Program A Really Cheap Microcontroller
» ‎ Hack a Day

There are rumors of a cheap chip that does USB natively, has an Open Source toolchain, and costs a quarter. These aren’t rumors: you can buy the CH552 microcontroller right now. Surprisingly, there aren’t many people picking up this cheap chip for their next project. If there’s no original projects using this chip, no one is going to use this chip. Catch 22, and all that.

Like a generous god, [Aaron Christophel] has got your back with a working example of programming this cheap chip, and doing something useful with it. It blinks LEDs, it writes to an I2C display, …read more

Tags: microcontrollers
10:00
A Lightweight AVR IDE
» ‎ Hack a Day

It’s entirely possible to do your coding in vim or emacs, hammering out hotkeys to drive the interface and bring your code to life. While working in such a way has its charms, it can be confronting to new coders, and that’s before even considering trying to understand command line compiler settings. The greenhorn coder may find themselves more at home in the warm embrace of an IDE, and [morrows_end] has now built one for those working with AVR assembly code.

The IDE goes by the name of Simple AVR IDE, or savr_ide for short. Programmed in C++ with the …read more

Tags: classic hacks

9:22
RealTerm Serial Terminal 2.0.0.70 Denial Of Service
» ‎ Packet Storm Security Exploits

RealTerm Serial Terminal version 2.0.0.70 suffers from a denial of service vulnerability.
Tags:

9:22
RealTerm Serial Terminal 2.0.0.70 Denial Of Service
» ‎ Packet Storm Security Recent Files

RealTerm Serial Terminal version 2.0.0.70 suffers from a denial of service vulnerability.
Tags:

9:22
RealTerm Serial Terminal 2.0.0.70 Denial Of Service
» ‎ Packet Storm Security Misc. Files

RealTerm Serial Terminal version 2.0.0.70 suffers from a denial of service vulnerability.
Tags:

7:00
Infinity Icosahedron Is Difficult To Contemplate Even Looking Right At It
» ‎ Hack a Day

Cubes and pyramids are wonderful primitive three-dimensional objects, but everyone knows that the real mystical power is in icosahedrons. Yes, the twenty-sided polyhedron does more than just ruin your saving throws in tabletop RPGs – it can also glow and look shiny in your loungeroom at home.

[janth]’s build relies on semitransparent acrylic mirrors for the infinity effect, lasercut into triangles to form the faces of the icosahedron. The frame is built out of 3D printed rails which slot on to the acrylic mirrors, and also hold the LED strips. [janth] chose high-density strips with 144 LEDs per meter for …read more

Tags: led hacks

Skip to page: 1 2 3 ... 873

Feeds

Recent items

Tags: classic hacks

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags: headlineprivacygooglespyware

Tags: headlinehackerprivacybankcybercrimedata lossfraud

Tags: headlineflaw

Tags: headlineprivacyflawpassword

Tags: headlinehackermicrosoftflaw

Tags: featured

Tags: wearable hacks

Tags:

Tags:

Tags:

Tags: clock hacks

Tags:

Tags:

Tags: Hardware

Tags: science

Tags: robots hacks

Tags:

Tags:

Tags:

Tags: laser hacks

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags:

Tags: