4302 matches found
Linux kernel Buffer Overflow DoS
The vulnerability of the Linux operating system’s kernel is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
SQLite ALTER TABLE Data Compromise
The vulnerability of the SQLite database management system’s ALTER TABLE command lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Description of the security update for SharePoint Server 2019: May 12, 2020
None None...
MGASA-2020-0202 Updated matio packages fix security vulnerability
Updated matio packages fix a security vulnerability: Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvarstruct.c CVE-2019-13107. The matio package has been updated to version 1.5.16 to fix this issue. Also: - The scilab package has been...
printcontrol-web Access Control
The vulnerability of the printcontrol-web component is related to the lack of mechanisms for granting permissions, privileges, and managing access control. Exploiting this vulnerability could allow an attacker to compromise the accessibility of information...
Upgraded Cerberus Spyware Spreads Rapidly via MDM
A newly discovered variant of the Cerberus Android trojan has been spotted, with vastly expanded and more sophisticated info-harvesting capabilities, and the ability to run TeamViewer. It was spotted by researchers being used in a targeted campaign on a multinational conglomerate. Unusually, the...
New Android Malware Targets PayPal, CapitalOne App Users
An Android mobile malware has been uncovered that steals payment data from users of popular financial apps like PayPal, Barclays, CapitalOne and more. The infostealer, called EventBot, has targeted users of more than 200 different banking, money-transfer services and general cryptocurrency wallet...
New Android Malware Steals Banking Passwords, Private Data and Keystrokes
A new type of mobile banking malware has been discovered abusing Android's accessibility features to exfiltrate sensitive data from financial applications, read user SMS messages, and hijack SMS-based two-factor authentication codes. Called "EventBot" by Cybereason researchers, the malware is...
New Android Malware Steals Banking Passwords, Private Data and Keystrokes
A new type of mobile banking malware has been discovered abusing Android's accessibility features to exfiltrate sensitive data from financial applications, read user SMS messages, and hijack SMS-based two-factor authentication codes. Called "EventBot" by Cybereason researchers, the malware is...
ncurses Heap Buffer Overflow DoS
The vulnerability of the ncfindentry function in the ncurses library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Slurm SQL Injection
The vulnerability of the Slurm resource manager is related to the lack of protection for SQL query structures. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...
‘Black Rose Lucy’ is Back, Now Pushing Ransomware
Cybercriminals behind the Android-based dropper malware Black Rose Lucy have shifted attacks from info-stealing to ransomware – with a sextortion twist. The malware family, operated by the Lucy Gang, encrypts targeted Android devices and delivers a spoofed FBI message. The ransom note claims the...
Firefox Buffer Overflow Information Disclosure
The vulnerability of the Firefox browser is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to information and compromise its integrity and accessibility...
Google Chrome Integer Overflow
The vulnerability of Google Chrome relates to a numerical overflow vulnerability. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and compromise its integrity and accessibility through a specially created HTML file...
Banking.BR Android Trojan Emerges in Credential-Stealing Attacks
A recently uncovered banking trojan aims to steal Android victims’ online banking credentials and take over their bank accounts, using “elaborate” overlay attack capabilities. The malware, dubbed “Banker.BR” by researchers with IBM X-Force, was spotted in messages targeting users in countries tha...
Linux rds_tcp_kill_sock Buffer Overflow DoS
The vulnerability of the rdstcpkillsock function net/rds/tcp.c in the Linux operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
VLC lavc_CopyPicture Buffer Overflow
The vulnerability of the lavcCopyPicture function module/codec/avcodec/video.c in the Media Player VideoLAN VLC application is related to a buffer overflow vulnerability in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...
Privilege Escalation
qemu-kvm is vulnerable to privilege escalation. It was found that qemu-kvm did not properly drop supplemental group privileges when the root user started guests from the command line "/usr/libexec/qemu-kvm" with the "-runas" option. A qemu-kvm process started this way could use this flaw to gain...
SINAMICS PERFECT HARMONY GH180 Driver Data Compromise
The vulnerability of SINAMICS PERFECT HARMONY GH180 driver software is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the device...
libsoup soup_ntlm_parse_challenge Heap Buffer Overflow
The vulnerability of the soupntlmparsechallenge function in the libsoup library arises due to an out-of-buffer operation in memory. Exploiting this vulnerability could allow a remote attacker to compromise the integrity, confidentiality, and accessibility of the protected information...