491 matches found
Google Android Media framework (libstagefright_soft_avcenc) information disclosure vulnerability
Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Media framework libstagefrightsoftavcenc is one of the soft decoding libraries. An information disclosure vulnerability exis...
Sprawling Mobile Espionage Campaign Targets Android Devices
A massive mobile espionage campaign has been collecting troves of sensitive personal information since 2012, according to a new report from the Electronic Frontier Foundation and security firm Lookout. Dubbed Dark Caracal, the advanced persistent threat APT campaign has managed to steal hundreds ...
Google Android Qualcomm WLAN elevation of privilege vulnerability (CNVD-2018-01112)
Android on Google Pixel and Nexus is an open source Linux-based operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm Bootloader is a bootloader developed by Qualcomm using the Qualcomm Bootloader is a bootloader developed by...
How to open Secure Mail email links with Native or 3rd party browser on android devices
This article explains how to open secure mail links on a native browser on Android devices...
Google Android Qualcomm WLAN Information Disclosure Vulnerability
Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, with Qualcomm WLAN being one of the components used. Qualcomm WLAN is a wireless LAN component developed by Qualco...
The vulnerability of the Lenovo Service Framework (LSF) processing push notifications lies in the lack of measures to clean up special elements used in the command line. This allows a perpetrator to execute arbitrary commands or run arbitrary code.
The vulnerability of the Lenovo Service Framework LSF software for processing push notifications on devices running the Android operating system is related to the lack of measures to clean up special elements used in commands. Exploiting this vulnerability allows a malicious actor to execute...
Google Android Qualcomm Linux boot information disclosure vulnerability
Android on Google Pixel and Nexus is an open source Linux-based operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handheld Alliance OHA.Qualcomm Linux boot is one of the Linux boot programs. Qualcomm Linux boot is one of the Linux boot programs. An...
Samsung Internet Browser SOP Bypass
This module takes advantage of a Same-Origin Policy SOP bypass vulnerability in the Samsung Internet Browser, a popular mobile browser shipping with Samsung Android devices. By default, it initiates a redirect to a child tab, and rewrites the innerHTML to gather credentials via a fake pop-up...
The vulnerability of the initial loader of devices running the HTC Android operating system allows a hacker to increase their privileges.
The vulnerability of the initial loader on HTC Android devices is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Authentication Failure When Password Contains £ Character
Authentication for 401 based failure is observed only oniOS devices ,when the password contains £ character, it works for Form based authentication. Authentication for 401 and Form based is working fine without any issue on Android devices ,when the password contains £ character. Coming to RADIUS...
CVE-2017-11062
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, currently attributes are not validated in wlanhddcfg80211doacs which can potentially lead to a buffer overread...
Google Researcher Publishes PoC Exploit for Apple iPhone Wi-Fi Chip Hack
You have now another good reason to update your iPhone to newly released iOS 11—a security vulnerability in iOS 10 and earlier now has a working exploit publicly available. Gal Beniamini, a security researcher with Google Project Zero, has discovered a security vulnerability CVE-2017-11120 in...
MDM/MAM Enrollment flow for Secure Hub Android devices-On Cloud Setup.
This article explains the MDM/MAM Enrollment flow for Android devices for-On Cloud Setup Where XMS Load Balance on cloud and Netscaler Gateway is on Premise...
Premium SMS Malware 'ExpensiveWall' Infects Millions of Android Devices
Google has ejected 50 apps from its Google Play store that were harboring mobile malware dubbed ExpensiveWall. The malware, which was downloaded between 1 million to 4.2 million times, sends fraudulent premium SMS messages for fake fee-based services without the knowledge or permission of users,...
Xafecopy Malware Secretly Steals Money From Android Devices
By Waqas In May 2017, Google announced there are more than 2 billion Android This is a post from HackRead.com Read the original post: Xafecopy Malware Secretly Steals Money From Android Devices...
Smartphones Under Fire: Why We Need to Keep Our Android Devices Safe
If there’s one thing we know about cybercrimnals it’s that where there’s people and money, they will surely follow. With an estimated 1.4 billion Android devices in use today, it’s not hard to see why they might have your smartphone in their sights. Attacks on Android devices made up 81 percent o...
WireX Variant Capable of UDP Flood Attacks
The WireX botnet presented defenders with many superlatives: the largest mobile botnet ever; hundreds of mobile apps spreading application-layer DDoS malware; unprecedented cooperation between technology companies—even competitors—to halt some of its activities. And now a companion piece to WireX...
The WireX Botnet warning Bulletin-vulnerability warning-the black bar safety net
2017 8 May 17, named WireX BotNet the botnet by masquerading ordinary Android applications the way a large number of infected Android devices and launched a large-scaleDDoSattack, this caused a portion of the CDN provider's note, and thereafter from Akamai, Cloudflare, Dragon Age, Google, Oracle...