7083 matches found
Provide a report that can display all applications installed on a device
Customer looking for a way to get a list or inventory of all apps from a device. The app inventory policy is not sufficient or detailed enough. Or is there a way to get the list of all apps installed on all devices, so the customer can filter out the apps. Reporting Devices and apps section only...
CVE-2023-25931
Medtronic identified that the Pelvic Health clinician apps, which are installed on the Smart Programmer mobile device, have a password vulnerability that requires a security update to fix. Not updating could potentially result in unauthorized control of the clinician therapy application, which ha...
CVE-2023-25931 Medtronic Micro Clinician & InterStim X Clinician App Password Reset Issue
Medtronic identified that the Pelvic Health clinician apps, which are installed on the Smart Programmer mobile device, have a password vulnerability that requires a security update to fix. Not updating could potentially result in unauthorized control of the clinician therapy application, which ha...
CVE-2023-25931
Medtronic Pelvic Health clinician apps (Micro Clinician A51200 and InterStim X Clinician A51300) installed on the Smart Programmer mobile device are affected by a password-related vulnerability (CVE-2023-25931) that could allow unauthorized control of the clinician therapy application. The issue ...
Alphabet YouTube Embedded 安全漏洞
Alphabet YouTube Embedded is a video sharing application from Alphabet USA. A security vulnerability exists in the Alphabet YouTube Embedded version 1.2 SDK, which stems from a ClassLoader that the SDK can load for malicious applications...
APKHunt - Comprehensive Static Code Analysis Tool For Android Apps That Is Based On The OWASP MASVS Framework
APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their cod...
Malicious code in py-urlmcvisa (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx d3e10d1b221e350879186a37885d12e93eb448269a138f7efcd06c143600c7bc EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
Shocking Findings from the 2023 Third-Party App Access Report
Spoiler Alert: Organizations with 10,000 SaaS users that use M365 and Google Workspace average over 4,371 additional connected apps. SaaS-to-SaaS third-party app installations are growing nonstop at organizations around the world. When an employee needs an additional app to increase their...
[SECURITY] Fedora 37 Update: kde-gtk-config-5.27.1-1.fc37
This is a System Settings configuration module for configuring the appearance of GTK apps in KDE...
Even Top-Ranked Android Apps in Google Play Store Provide Misleading Data Safety Labels
An investigation into data safety labels for Android apps available on the Google Play Store has uncovered "serious loopholes" that allow apps to provide misleading or outright false information. The study, conducted by the Mozilla Foundation as part of its Privacy Not Included initiative, compar...
Even Top-Ranked Android Apps in Google Play Store Provide Misleading Data Safety Labels
An investigation into data safety labels for Android apps available on the Google Play Store has uncovered "serious loopholes" that allow apps to provide misleading or outright false information. The study, conducted by the Mozilla Foundation as part of its Privacy Not Included initiative, compar...
Hackers Using Trojanized macOS Apps to Deploy Evasive Cryptocurrency Mining Malware
Trojanized versions of legitimate applications are being used to deploy evasive cryptocurrency mining malware on macOS systems. Jamf Threat Labs, which made the discovery, said the XMRig coin miner was executed by means of an unauthorized modification in Final Cut Pro, a video editing software fr...
google-oauth-client: missing PKCE support in accordance with the RFC for OAuth 2.0 for Native Apps can lead to improper authorization
PKCE support is not implemented in accordance with the RFC for OAuth 2.0 for Native Apps. Without the use of PKCE, the authorization code returned by an authorization server is not enough to guarantee that the client that issued the initial authorization request is the one that will be authorized...
PT-2023-19794 · Misskey · Misskey
Name of the Vulnerable Software and Affected Versions: Misskey versions prior to 13.3.1 Description: The issue arises from insufficient validation of the redirect URL during miauth authentication, allowing arbitrary JavaScript execution when a user allows the link. This can be exploited when user...
Twitter and two-factor authentication: What's changing?
Twitter is making some dramatic shake ups to its currently available security settings. From March 19, users of Twitter wont be able to use SMS-based two-factor authentication 2FA unless they have a subscription to the paid Twitter Blue service. If you use text-based 2FA, the important thing here...
New Samsung Message Guard protects users against Zero-Click attacks
By Deeba Ahmed Samsung Message Guard is a new feature that protects users against zero-click attacks, including those appearing from messaging apps. This is a post from HackRead.com Read the original post: New Samsung Message Guard protects users against Zero-Click attacks...
Finding forensics breadcrumbs in Android image storage
Introduction Our digital forensics work is wide and varied. Often there’s very little that we can talk about in the public domain, so when I find something that we can share I get a bit excited. In this post I’ll be talking about image scanning apps, and how to reverse engineer them to pinpoint...
Security Updates for Microsoft Office Online Server (February 2023)
The Microsoft Office Web Apps installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An unauthenticated attacker could send a malicious e-mail containing an RTF payload that would allow them...
Citrix Virtual Apps and Desktops Privilege Escalation Vulnerability (CTX477616)
The version of Citrix Virtual Apps and Desktops installed on the remote Windows host is affected by a privilege escalation vulnerability that could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM on a Citrix Virtual Apps and Desktops Windows VDA. Note that Nessus has...
