Huawei Mate 30 输入验证错误漏洞

Huawei Mate 30 is a smartphone from the Chinese company Huawei Huawei. The Huawei phone suffers from a security vulnerability that originates from an anomaly in a module that does not adequately validate certain inputs. An attacker can exploit the vulnerability to cause a denial of service on the...

How Akamai Employees Showed Up for Akamai Earth Month

Photo from an Akamai employee who took her bike out to enjoy nature during Akamai Earth Month. Akamai employees across the globe showed up in full force for Akamai Earth Month 2021 -- our campaign to help employees take small actions at home and in their community to make a difference for the...

Threat Roundup for April 23 to April 30

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between April 23 and April 30. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral... This is on...

CVE-2021-31221

creationtimestamp| type| source ---|---|--- 2021-04-30 11:02:06+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3250...

CVE-2021-21378

creationtimestamp| type| source ---|---|--- 2021-04-30 07:37:38+00:00| seen| https://t.me/k8security/279...

The vulnerability of Huawei Mate 30 and Huawei Mate 30 Pro mobile phone microprogramming systems, related to security mechanism errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the microprogramming software in Huawei Mate 30 and Huawei Mate 30 Pro devices is related to security mechanism flaws. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

SUSE: Security Advisory (SUSE-SU-2018:1247-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:2101-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:2356-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:4195-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:0994-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:1533-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:3433-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Project Zero Cuts Bug Disclosure Timeline to a 30-Day Grace Period

Google Project Zero will now give organizations a 30-day grace period to patch zero-day flaws it discovers in a new disclosure policy revealed this week aimed at speeding up the time it takes for patches to be adopted. Known for discovering a number of high-profile zero days—in Google’s own...

Huawei Mate 30 Out-of-Bounds Read/Write Vulnerability

Huawei Mate 30 is a smartphone from the Chinese company Huawei Huawei. The Huawei Mate 30 is vulnerable to an out-of-bounds read/write vulnerability. An attacker can exploit this vulnerability by modifying a configuration to cause a denial of service when the device reads or writes out of bounds...

Weak password vulnerability in H3C WAC380-30

H3C WAC380-30 is a gateway-type wireless controller independently developed by Xinhua San Technologies Co. The H3C WAC380-30 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

CVE-2020-11222

creationtimestamp| type| source ---|---|--- 2021-03-17 11:30:42+00:00| seen| https://t.me/cibsecurity/24985...

CVE-2020-4851

creationtimestamp| type| source ---|---|--- 2021-03-16 17:30:08+00:00| seen| https://t.me/cibsecurity/24955...

Cryptocurrency exchange in liquidation due to hack, hacked again

By Waqas Cryptopia cryptocurrency exchange was hacked in 2019 and put into liquidation after suffering a loss of USD 30 million in crypto-assets. This is a post from HackRead.com Read the original post: Cryptocurrency exchange in liquidation due to hack, hacked again...

CVE-2021-22305

There is a buffer overflow vulnerability in Mate 30 10.1.0.126C00E125R5P3. A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause buffer overflow, compromising normal service...