The vulnerability of the Qualcomm EXIF analyzer in the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Qualcomm EXIF analyzer for the Android operating system is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Akamai 2018 Spring Release, In A Nutshell

Progressing Towards Our Future in The Cloud, Together As organizations continue to fuel and execute on their digital transformation ambitions, they're increasingly finding significant business agility and cost savings by adopting cloud, multi-cloud, or hybrid architectures. Availability, security...

The vulnerability of the Master IP Camera01’s microprogrammed software lies in its ability to perform unlimited upload/download operations on configuration files. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Master IP Camera01 microprogramming system lies in the unlimited ability to upload/download the configuration file. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the `ih264d_get_implicit_weights` function (decoder/ih264d_parse_bslice.c) in the Media Framework component of the Android operating system, which allows a perpetrator to manipulate the accessibility of data.

The vulnerability of the ih264dgetimplicitweights function in the decoder/ih264dparsebslice.c file of the Media Framework component of the Android operating system is related to resource management errors. Exploiting this vulnerability could allow a remote attacker to compromise data accessibilit...

The vulnerability of the `ih264d_parse_bmb_non_direct_cavlc` function (decoder/ih264d_parse_bslice.c) in the Media Framework component of the Android operating system, which allows a hacker to compromise data accessibility.

The vulnerability of the ih264dparsebmbnondirectcavlc function decoder/ih264dparsebslice.c in the Media Framework of the Android operating system is related to resource management errors. Exploiting this vulnerability could allow a remote attacker to compromise data accessibility...

The vulnerability of the Media Framework component of the Android operating system, which allows a hacker to compromise the accessibility of data

The vulnerability of the Media Framework component in the Android operating system is related to resource management errors. Exploiting this vulnerability allows an attacker to compromise data accessibility...

Potent Skygofree Malware Packs ‘Never-Before-Seen’ Features

Researchers have identified a powerful new Android malware strain called Skygofree capable of eavesdropping on WhatsApp messages, siphoning private data off phones and allowing adversaries to open reverse shell modules on targeted devices, giving attackers ultimate remote control. Researchers sai...

The vulnerability of Google Chrome’s IndexedDB implementation lies in its reliance on memory after it is released. This allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability in the Google Chrome browser’s IndexedDB implementation relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of data through a specially crafted HTML page...

The vulnerability of the component’s dispatcher in SageCRM’s customer relationship management system allows a hacker to increase their privileges and impact the confidentiality, integrity, and accessibility of data.

The vulnerability of the component dispatcher in SageCRM’s customer relationship management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to increase their privileges and compromise the confidentiality, integrity, and...

The vulnerability of the fimg2d driver for the Samsung Exynos 7420 Android operating system, which allows a hacker to compromise data confidentiality, integrity, and accessibility.

The vulnerability of the fimg2d driver for the Samsung Exynos 7420 Android operating system is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to compromise data confidentiality, integrity, and accessibility...

Xxe

Files or directories accessible to external parties vulnerability in picasa.php in Synology Photo Station before 6.8.1-3458 and before 6.3-2970 allows remote attackers to obtain arbitrary files via progid field...

Google to Block Third-Party Software from Injecting Code into Chrome Browser

To improve performance and reduce crashes caused by third-party software on Windows, Google Chrome, by mid-2018, will no longer allow outside applications to run code within its web browser. If you are unaware, many third-party applications, like accessibility or antivirus software, inject code...

WebKit: use-after-free in WebCore::AXObjectCache::performDeferredCacheUpdate(CVE-2017-13795)

There is a use-after-free security vulnerability in WebKit. The vulnerability was confirmed on ASan build of WebKit nightly. Note that accessibility features need to be enabled in order to trigger this bug. On Safari on Mac this can be accomplished by opening the inspector simply opening the...

WebKit - WebCore::AXObjectCache::performDeferredCacheUpdate Use-After-Free Exploit

Exploit for multiple platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1347 There is a use-after-free security vulnerability in WebKit. The vulnerability was confirmed on ASan build of WebKit nightly. Note that accessibility features need to be...

WebKit - 'WebCore::AXObjectCache::performDeferredCacheUpdate' Use-After-Free

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1347 There is a use-after-free security vulnerability in WebKit. The vulnerability was confirmed on ASan build of WebKit nightly. Note that accessibility features need to be enabled in order to trigger this bug. On Safari on Mac...

Google Begins Removing Play Store Apps Misusing Android Accessibility Services

Due to rise in malware and adware abusing Android accessibility services, Google has finally decided to take strict steps against the apps on its app platform that misuse this feature. Google has emailed Android app developers informing them that within 30 days, they must show how accessibility...

The vulnerability of the Elastic Cloud Storage storage platform, combined with the use of a pre-installed account, allows attackers to gain access to the system.

The vulnerability of the Dell EMC Elastic Cloud Storage ECS storage platform is related to the use of a pre-installed emcservice account. Exploiting this vulnerability allows an attacker operating remotely to gain access to the system and compromise the confidentiality, integrity, and accessibili...

CVE-2017-1000382

VIM version 8.0.1187 and other versions most likely ignores umask when creating a swap file "ORIGINALFILENAME.swp" resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the vi binary...

CVE-2017-1000382

CVE-2017-1000382 is tied to Vim prior to patch levels where 8.0.1187 (and likely other versions) ignores umask when creating a swap file named ​.swp, causing the swap file to be world-readable or accessible in ways not intended by the user running vim. The connected sources confirm this specific ...

The vulnerability of the `sixel_output_create` function (coders/sixel.c) in the console-based graphic editor ImageMagick allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sixeloutputcreate function in the console-based image editing tool ImageMagick is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...