CVE-2023-32346

Teltonika’s Remote Management System versions prior to 4.10.0 contain a function that allows users to claim their devices. This function returns information based on whether the serial number of a device has already been claimed, the MAC address of a device has already been claimed, or whether th...

Open Networking Foundation ONOS 安全漏洞

Open Networking Foundation ONOS is an open source SDN controller from Open Networking Foundation open source. It is used to build next-generation SDN/NFV solutions. A security vulnerability exists in Open Networking Foundation ONOS version 2.5.1, which stems from an Intent with a capital letter i...

PT-2022-36395 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.225 Description: The issue concerns an invalid length check when fetching device IDs. This problem was introduced in version v5.3 and is fixed in Linux Kernel version v5.4.225. The actual impact and attack...

PT-2022-25086 · Samsung · Galaxy Buds Pro

Name of the Vulnerable Software and Affected Versions: Galaxy Buds Pro Manage versions prior to 4.1.22092751 Description: The issue allows local attackers with log access permission to obtain device identifier data through device logs. This is due to a sensitive information exposure vulnerability...

SAMSUNG Galaxy Buds Pro Manager 日志信息泄露漏洞

SAMSUNG Galaxy Buds Pro Manager is an application from Samsung South Korea. Allows you to use features such as device settings and status view while connected to your Galaxy Buds Pro device. A security vulnerability exists in SAMSUNG Galaxy Buds Pro Manager prior to version 4.1.22092751, which...

Apple watchOS 安全漏洞

Apple watchOS is an operating system for smartwatches from the American company Apple. A security vulnerability exists in previous versions of Apple watchOS 9, which stems from an application's ability to read permanent device identifiers...

PT-2022-23678 · Unknown · Waterplugin

Name of the Vulnerable Software and Affected Versions: Waterplugin versions prior to 2.2.11.22040751 Description: The issue is related to improper handling of insufficient permissions or privileges, allowing an attacker to access sensitive device information, including the IMEI and Serial number...

MiCODUS MV720 GPS 安全漏洞

The MiCODUS MV720 GPS is a GPS tracker from MiCODUS USA. A security vulnerability exists in the MiCODUS MV720 GPS that originates from an authenticated and insecure direct object reference vulnerability in the main web server on the endpoint and parameterized device IDs, which accepts arbitrary...

SAMSUNG Mobile devices SecSoterService 安全漏洞

Samsung SecSoterService is a service for Samsung Samsung mobile devices. Samsung SecSoterService is vulnerable to an information disclosure vulnerability that stems from the improper use of unique device IDs in unprotected SecSoterService, which could be exploited by an attacker to unauthorized...

CVE-2021-37121

There is a Configuration defects in Smartphone.Successful exploitation of this vulnerability may elevate the MEID IMEI permission...

Triada Trojan in WhatsApp mod

WhatsApp users sometimes feel the official app is lacking a useful feature of one sort or another, be it animated themes, self-destructing messages which automatically delete themselves, the option of hiding certain conversations from the main list, automatic translation of messages, or the optio...

China's Baidu Android Apps Caught Collecting Sensitive User Data

Two popular Android apps from Chinese tech giant Baidu were temporarily unavailable on the Google Play Store in October after they were caught collecting sensitive user details. The two apps in question—Baidu Maps and Baidu Search Box —were found to collect device identifiers, such as the...

Apple iOS Authorization Vulnerability

Apple iOS is an operating system for mobile devices developed by Apple Inc. in the United States. A security vulnerability exists in Apple iOS versions prior to 12.1, which stems from the possibility that a local user may be able to read persistent device identifiers. No details of the...

Popular iOS SDK Accused of Spying on Billions of Users and Committing Ad Fraud

A popular iOS software development kit SDK used by over 1,200 apps—with a total of more than a billion mobile users—is said to contain malicious code with the goal of perpetrating mobile ad-click fraud and capturing sensitive information. According to a report published by cybersecurity firm Snyk...

Researchers Uncover Novel Way to De-anonymize Device IDs to Users' Biometrics

Researchers have uncovered a potential means to profile and track online users using a novel approach that combines device identifiers with their biometric information. The details come from a newly published research titled "Nowhere to Hide: Cross-modal Identity Leakage between Biometrics and...

Researchers Uncover Novel Way to De-anonymize Device IDs to Users' Biometrics

Researchers have uncovered a potential means to profile and track online users using a novel approach that combines device identifiers with their biometric information. The details come from a newly published research titled "Nowhere to Hide: Cross-modal Identity Leakage between Biometrics and...

Microsoft Edge Shares Privacy-Busting Telemetry, Research Alleges

Microsoft Edge is one of the least private web browsers — even more so than other popular browsers like Google Chrome and Mozilla Firefox — according to academic researchers. According to the analysis, from Douglas Leith with the School of Computer Science and Statistics at Trinity College in...

Over 1,300 Android Apps Caught Collecting Data Even If You Deny Permissions

Smartphones are a goldmine of sensitive data, and modern apps work as diggers that continuously collect every possible information from your devices. The security model of modern mobile operating systems, like Android and iOS, is primarily based on permissions that explicitly define which sensiti...

The vulnerability of the jsm_probe_one handler implementation in Linux kernels allows a hacker to trigger a service failure.

The vulnerability in the implementation of the jsmprobeone function in the drivers/tty/serial/jsm/jsm.ko kernel of the Linux operating system is caused by a memory leak. Exploiting this vulnerability can allow an attacker to cause a system failure by connecting a Digi International Neo and Classi...

Android Q — Google Adds New Mobile Security and Privacy Features

Google has recently released the first beta version of Android Q, the next upcoming version of Google's popular mobile operating system, with a lot of new privacy improvements and other security enhancements. Android Q, where Q has not yet been named, offers more control over installed apps, thei...