Wednesday, February 7, 2018

Hotspot Shield VPN flaw can betray users' location

According to the entry for the vulnerability (CVE-2018-6460) in the National Vulnerability Database, Hotspot Shield runs a webserver with a static IP address 127.0.0.1 and port 895, and the web server uses JSONP and hosts sensitive information including configuration. But user-controlled input is not ...

from Google Alert - vulnerability http://ift.tt/2GTPAMW
via IFTTT

No comments:

Post a Comment