CVE-2021-37126

Arbitrary file has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability .Successful exploitation of this vulnerability may cause the directory is traversed...

Design/Logic Flaw

Arbitrary file has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability .Successful exploitation of this vulnerability may cause confidentiality is affected...

Design/Logic Flaw

MyHuawei-App has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability could compromise confidentiality...

Design/Logic Flaw

Arbitrary file has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability .Successful exploitation of this vulnerability may cause the directory is traversed...

Spoofing

The HwNearbyMain module has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability may cause a process to restart...

CVE-2021-39989

CVE-2021-39989 affects Huawei HarmonyOS HwNearbyMain. Description: Exposure of Sensitive Information to an Unauthorized Actor, potentially causing a process restart. CVSS: v3.1 base score 7.5 (HIGH) with NETWORK attack vector, LOW complexity, no privileges required, UI: none, scope unchanged, and...

CVE-2021-39989

The HwNearbyMain module has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability may cause a process to restart...

CVE-2021-39980

CNVD-2022-08457 describes an unspecified vulnerability in Huawei HarmonyOS where an attacker can bypass privileges to access IMSI. The Huawei HarmonyOS component and root cause are not detailed in the entry, and there is no remediation information provided. Action: monitor for updates.

CVE-2021-39980

Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability could lead to sensitive information disclosure...

CVE-2021-39972

MyHuawei-App has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability could compromise confidentiality...

CVE-2021-39972

CVE-2021-39972 affects Huawei HarmonyOS ecosystem via MyHuawei-App exposure leading to information disclosure to unauthorized actors. CVSSv3.1 base score 7.5 (HIGH): Network attack, no privileges required, no user interaction; confidentiality impact HIGH, others NONE. The documents confirm Huawei...

CVE-2021-37126

Arbitrary file has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability .Successful exploitation of this vulnerability may cause the directory is traversed...

CVE-2021-37125

The connected documents confirm CVE-2021-37125 relates to Huawei HarmonyOS. The vulnerability is an information-disclosure issue caused by insufficient input validation in a HarmonyOS component, leading to unauthorized access to sensitive data and compromising confidentiality. No exploit details ...

APT ‘Aquatic Panda’ Targets Universities with Log4Shell Exploit Tools

Cyber criminals, under the moniker Aquatic Panda, are the latest advanced persistent threat group APT to exploit the Log4Shell vulnerability. Researchers from CrowdStrike Falcon OverWatch recently disrupted the threat actors using Log4Shell exploit tools on a vulnerable VMware installation during...

Chinese APT Hackers Used Log4Shell Exploit to Target Academic Institution

A never-before-seen China-based targeted intrusion adversary dubbed Aquatic Panda has been observed leveraging critical flaws in the Apache Log4j logging library as an access vector to perform various post-exploitation operations, including reconnaissance and credential harvesting on targeted...

CVE-2021-43845 Prevent out-of-bounds read in PJSIP

PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size, potentially resulting in an out-of-bound read access. This affects all users that use PJMEDIA a...

Expert Details macOS Bug That Could Let Malware Bypass Gatekeeper Security

Apple recently fixed a security vulnerability in the macOS operating system that could be potentially exploited by a threat actor to "trivially and reliably" bypass a "myriad of foundational macOS security mechanisms" and run arbitrary code. Security researcher Patrick Wardle detailed the discove...

4-Year-Old Bug in Azure App Service Exposed Hundreds of Source Code Repositories

A security flaw has been unearthed in Microsoft's Azure App Service that resulted in the exposure of source code of customer applications written in Java, Node, PHP, Python, and Ruby for at least four years since September 2017. The vulnerability, codenamed "NotLegit," was reported to the tech...

Apple macOS High Sierra 安全漏洞

A security vulnerability exists in Apple macOS High Sierra, a specialized operating system developed by Apple for Mac computers. An attacker could exploit this vulnerability to elevate privileges...

New Exploit Lets Malware Attackers Bypass Patch for Critical Microsoft MSHTML Flaw

A short-lived phishing campaign has been observed taking advantage of a novel exploit that bypassed a patch put in place by Microsoft to fix a remote code execution vulnerability affecting the MSHTML component with the goal of delivering Formbook malware. "The attachments represent an escalation ...