CVE-2020-24739: Cross-Site Request Forgery (CSRF)

A CSRF vulnerability was found in iCMS v7.0.0 in the background deletion administrator account. When missing the CSRFTOKEN and can still request normally, all administrators except the initial administrator will be deleted...

Malicious 󠅮󠅰󠅭Package

Overview com.mintegral.msdk:alphab is a malicious package. The Android SDK distributed by the company contains malicious functionality in this module that tracks: 1. Downloads from Google urls either within Google apps or via browser including file downloads, e-mail attachments and Google Docs...

chromium-browser: Heap buffer overflow in background fetch

Heap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Exploit for Improper Handling of Exceptional Conditions in Google Android

Analysis of CVE-2020-0108: Vulnerability Exploitation by Eleva...

ASB-A-140108616

In postNotification of ServiceRecord.java, there is a possible bypass of foreground process restrictions due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

DJI Drone App Riddled With Privacy Issues, Researchers Allege

Leading commercial drone maker DJI is hitting back against researcher allegations that its Android mobile application is riddled with privacy holes. One includes that the app continues to run in the background even after it’s been closed and collects sensitive data from users without consent. The...

PHP website background management system SEO special version of Langfang Shanghao Information Network Co., Ltd. suffers from universal password login vulnerability

Langfang Shanghao Information Network Co., Ltd. was established in 2000 by merging Shanghao Advertising Design Company and Shanghao Software Development Company. There is a universal password login vulnerability in the SEO-specific version of Langfang Shanghao Information Network Co., Ltd.'s PHP...

DEBIAN-CVE-2020-6510

Heap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2020-6510

Heap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

UBUNTU-CVE-2020-6510

Heap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2020-6510

Heap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2020-6510

Heap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2020-6510: Out-of-bounds Write

Heap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2020-0227

In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege allowing background data usage or launching from the background, with no additional execution privileges needed. User...

CVE-2020-0227

In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege allowing background data usage or launching from the background, with no additional execution privileges needed. User...

CVE-2020-0227: Missing Authorization

In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege allowing background data usage or launching from the background, with no additional execution privileges needed. User...

PT-2020-5705

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 84.0.4147.89 Description The issue is related to a heap buffer overflow in the background fetch component, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. This may lead to...

PT-2020-11584

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 10 Description A permissions bypass issue exists due to a missing permission check in the onCommand method of CompanionDeviceManagerService.java. This could lead to local escalation of privilege, allowing backgroun...

IIS Privilege Escalation

The vulnerability of the Microsoft Internet Information Server IIS server, due to the Windows Background Intelligent Transfer Service BITS, affects operating systems running on Windows. This vulnerability is related to file operation processing errors. Exploiting this vulnerability can allow an...

PT-2020-12203

Name of the Vulnerable Software and Affected Versions Xiaomi Mi Jia ink-jet printer versions prior to 3.4.6 0138 Description An issue was discovered in the Xiaomi Mi Jia ink-jet printer, where injecting parameters to the ippserver through the web management background results in command execution...