6177 matches found
Apple macOS 安全漏洞
Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS. An attacker exploiting this vulnerability could access sensitive user information. The following products and versions are affected: mac Studio version 2022, Ma...
Apple macOS 安全漏洞
Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. Apple macOS suffers from a security vulnerability that originates from the fact that a user with physical access to the device may be able to access contacts from the lock screen. The following products and...
philippineair.co.kr Cross Site Scripting vulnerability OBB-2961815
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Apple releases security update for iPhones and iPads to address vulnerability
Apple has released a security update for iOS 12.5.6 to patch a remotely exploitable WebKit vulnerability that allows attackers to execute arbitrary code on unpatched devices. The WebKit zero-day that is known as CVE-2022-32893 was fixed for iOS 15.6.1, iPadOS 15.6, and macOS Monterey 12.5.1 on...
Apple Releases iOS Update for Older iPhones to Fix Actively Exploited Vulnerability
Apple on Wednesday backported security updates to older iPhones, iPads, and iPod touch devices to address a critical security flaw that has been actively exploited in the wild. The shortcoming, tracked as CVE-2022-32893 CVSS score: 8.8, is an out-of-bounds write issue affecting WebKit that could...
India's Newest Airline Akasa Air Found Leaking Passengers' Personal Information
Akasa Air, India's newest commercial airline, exposed the personal data belonging to its customers that the company blamed on a technical configuration error. According to security researcher Ashutosh Barot, the issue is rooted in the account registration process, leading to the exposure of detai...
Air-Gapped Devices Can Send Covert Morse Signals via Network Card LEDs
A security researcher who has a long line of work demonstrating novel data exfiltration methods from air-gapped systems has come up with yet another technique that involves sending Morse code signals via LEDs on network interface cards NICs. The approach, codenamed ETHERLED, comes from Dr...
ETHERLED and GAIROSCOPE Attacks Allow Data Exfiltration from Air-gapped PC
By Deeba Ahmed Researchers have demonstrated possibilities in which attackers can use resonance frequency in Gyroscope and network card LEDs to exfiltrate data from air-gapped PC. This is a post from HackRead.com Read the original post: ETHERLED and GAIROSCOPE Attacks Allow Data Exfiltration from...
New Air-Gap Attack Uses MEMS Gyroscope Ultrasonic Covert Channel to Leak Data
A novel data exfiltration technique has been found to leverage a covert ultrasonic channel to leak sensitive information from isolated, air-gapped computers to a nearby smartphone that doesn't even require a microphone to pick up the sound waves. Dubbed GAIROSCOPE, the adversarial model is the...
China-backed APT41 Hackers Targeted 13 Organisations Worldwide Last Year
The Chinese advanced persistent threat APT actor tracked as Winnti has targeted at least 13 organizations geographically spanning across the U.S, Taiwan, India, Vietnam, and China against the backdrop of four different campaigns in 2021. "The targeted industries included the public sector,...
accurateairservice.com Cross Site Scripting vulnerability OBB-2845851
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Security update for trivy (moderate)
openSUSE Security Update: Security update for trivy Announcement ID: openSUSE-SU-2022:10081-1 Rating: moderate References: Cross-References: CVE-2022-1996 CVSS scores: CVE-2022-1996 NVD : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2022-1996 SUSE: 7.5...
cebuairtravel.com Cross Site Scripting vulnerability OBB-2824488
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Flaws in Enabot Ebo Air Home Security Robot Allowed Attackers to Spy on Users
By Deeba Ahmed If exploited, the flaw could have allowed an attacker to hijack the devices camera and microphone to spy… This is a post from HackRead.com Read the original post: Flaws in Enabot Ebo Air Home Security Robot Allowed Attackers to Spy on Users...
AutomationDirect Stride Field I/O
1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: AutomationDirect Equipment: Stride Field I/O Vulnerability: Cleartext Transmission of Sensitive Information. 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to...
Hackers Can Now Steal Data from Air-Gapped PCs via SATA Cables
By Deeba Ahmed In May 2020, researchers were able to demonstrate how attackers can steal data from air-gapped PC by turning… This is a post from HackRead.com Read the original post: Hackers Can Now Steal Data from Air-Gapped PCs via SATA Cables...
Apple iPadOS和Apple iOS 缓冲区错误漏洞
Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. A buffer error vulnerability exists in iPhone 6s and later, iPad Pro all models, iPad Air 2nd generation and...
New Air-Gap Attack Uses SATA Cable as an Antenna to Transfer Radio Signals — The Hacker News
A new method devised to leak information and jump over air-gaps takes advantage of Serial Advanced Technology Attachment SATA or Serial ATA cables as a communication medium, adding to a long list of electromagnetic, magnetic, electric, optical, and acoustic methods already demonstrated to plunder...
Samsung Gallery Access Control Error Vulnerability
Samsung Gallery is an application from Samsung Samsung Inc. The best image and video viewing application for Galaxy users.An access control error vulnerability exists in versions prior to Samsung Gallery 13.1.05.8, which stems from faulty access validation logic in Gallery, and could be exploited...
