Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from improper handling of device information in the device management module. An attacker...

PT-2024-34686 · Unknown · Device Management Module

Name of the Vulnerable Software and Affected Versions: Device Management Module affected versions not specified Description: The issue is related to improper device information processing in the device management module. Successful exploitation of this issue may affect system availability...

Unauthorized data access vulnerability in macOS is detailed by Microsoft

The Microsoft Threat Intelligence team disclosed details about a macOS vulnerability, dubbed "HM Surf," that could allow an attacker to gain access to the user’s data in Safari. The data the attacker could access without users’ consent includes browsed pages, along with the device’s camera,...

The vulnerability of the validateAMCWSConnection method in the Ivanti Avalanche mobile device management system allows a hacker to disclose protected information.

The vulnerability of the validateAMCWSConnection method in the Ivanti Avalanche mobile device management system is related to insufficient validation of incoming requests. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of the Faces Mojarra component in the Ivanti Avalanche mobile device management system allows a hacker to disclose protected information.

The vulnerability of the Faces Mojarra component in the Ivanti Avalanche mobile device management system is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

Unauthorized Access Vulnerability in the Device Management Platform of Xiamen Sihsin Communications Technology Co.

Xiamen Syson Communication Technology Co., Ltd. is a leading global provider of IoT communication equipment and solution services. An unauthorized access vulnerability exists in the device management platform of Xiamen Sihsin Communication Technology Co. Ltd, which can be exploited by attackers t...

Ivanti Avalanche 安全漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche versions prior to 6.4.5. An attacker could bypass authenticatio...

Ivanti Avalanche 安全漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche versions prior to 6.4.5. An attacker could bypass authenticatio...

Ivanti Avalanche 安全漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche versions prior to 6.4.5, which stems from a null pointer...

Ivanti Avalanche 安全漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche versions prior to 6.4.5. An attacker exploiting this...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 15, which originates on MDM-managed devices, where an application may be able to bypass certain privacy preferences...

CVE-2024-45103

The CVE-2024-45103 issue affects Lenovo XClarity Administrator (LXCA). The vulnerability arises when an authenticated LXCA user can unmanage an LXCA-managed device via the LXCA web interface without sufficient privileges, indicating a privilege-escalation risk within the web management flow. Tech...

IBM MaaS360 Trust Management Issue Vulnerability

IBM MaaS360 is a suite of enterprise mobile device management solutions from International Business Machines IBM. The solution provides end-to-end security and management of mobile devices, documents, applications and email. A trust management issue vulnerability exists in IBM MaaS360 versions 6....

Meteocontrol WEBlog Password Extractor

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Meteocontrol WEBlog Password Extractor', 'Description' = % This module exploits an authentication bypass vulnerability in Meteocontrol WEBLog...

Cambium EPMP 1000 Get_chart Command Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Cambium ePMP 1000 'getchart' Command Injection v3.1-3.5-RC7", 'Description' = % This module exploits an OS Command Injection vulnerability in...

Cambium EPMP 1000 Account Password Reset

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cambium ePMP 1000 Account Password Reset', 'Description' = % This module exploits an access control vulnerability in Cambium ePMP device manageme...

PT-2024-26153 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a logic error in the code of OwnersData.java, specifically in the shouldWrite method. This error can prevent MDM policies from...

PT-2025-16921 · Google · Chrome Os

Name of the Vulnerable Software and Affected Versions: Google ChromeOS version 124.0.6367.34 Description: The issue allows enrolled users with local access to unenroll devices and intercept device management requests by loading components from the unencrypted stateful partition. This is due to a...

PT-2024-8681

Name of the Vulnerable Software and Affected Versions Ivanti Avalanche versions 6.3.1 Description A NULL pointer dereference exists in the WLAvalancheService component of Ivanti Avalanche. This issue allows a remote, unauthenticated attacker to cause a denial-of-service DoS condition by crashing...

The vulnerability of the web component of the mobile device and mobile application lifecycle management application, Ivanti Endpoint Manager Mobile (EPMM) (formerly MobileIron Core), allows a perpetrator to gain access to confidential data.

The vulnerability of the Ivanti Endpoint Manager Mobile EPMM web component for managing the lifecycle of mobile devices and applications formerly known as MobileIron Core is related to authentication process flaws. Exploiting this vulnerability could allow a malicious actor to gain access to...