QR code SQL injection and other vulnerabilities in a popular biometric terminal

The report analyzes the security properties of a popular biometric access control terminal made by ZkTeco and describes vulnerabilities found in it. Continue reading QR code SQL injection and other vulnerabilities in a popular biometric terminal

The Internet Has a Huge C/C++ Problem and Developers Don’t Want to Deal With It

What do Heartbleed, WannaCry, and million dollar iPhone bugs have in common? Continue reading The Internet Has a Huge C/C++ Problem and Developers Don’t Want to Deal With It

Obihai Patches Memory Corruption, DoS, CSRF Vulnerabilities in IP Phones

Obihai Technology recently patched a slew of issues in its ObiPhone IP phone products that could have led to memory corruption, a buffer overflow, and denial of service conditions, among other outcomes.

Continue reading Obihai Patches Memory Corruption, DoS, CSRF Vulnerabilities in IP Phones