LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network
Three vulnerabilities in LG’s webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interaction from the owner.
LG has issued a fix, according to an advisory published by SSD Secure Disclosure on October 12.
The chain was tested on two TV models, the 32LQ636BPSA and the 27TQ600SW, running webOS 7.5.7-25 on firmware
Source: The Hacker News
GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks The safety check that is supposed to stop an AI coding agent from running a dangerous command can be
Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild. The vulnerability,
Tailscale Traces Database Corruption to 16y/o SQLite WAL-Reset Bug Source: Hacker News