CVE-2021-25425

Improper check vulnerability in Samsung Health prior to version 6.17 allows attacker to read internal cache data via exported component...

CVE-2021-25401

Intent redirection vulnerability in Samsung Health prior to version 6.16 allows attacker to execute privileged action...

CVE-2021-25401

Intent redirection vulnerability in Samsung Health prior to version 6.16 allows attacker to execute privileged action...

Information disclosure

Intent redirection vulnerability in Samsung Health prior to version 6.16 allows attacker to execute privileged action...

Input validation

Improper check vulnerability in Samsung Health prior to version 6.17 allows attacker to read internal cache data via exported component...

CVE-2021-25401

Intent redirection vulnerability in Samsung Health prior to version 6.16 allows attacker to execute privileged action...

CVE-2021-25425

Improper check vulnerability in Samsung Health prior to version 6.17 allows attacker to read internal cache data via exported component...

CVE-2021-25401

Intent redirection vulnerability in Samsung Health prior to version 6.16 allows attacker to execute privileged action...

CVE-2021-25401

Samsung Health (Android) before v6.16 contains an intent redirection vulnerability that could allow an attacker to trigger privileged actions within the app. Multiple sources (NVD entry CVE-2021-25401 and Red Hat/NVD mirrors) describe the issue as an intent redirection that enables execution of p...

CVE-2021-25425

CVE-2021-25425 affects Samsung Health (prior to v6.17). The vulnerability is an improper check in Samsung Health that allows an attacker to read internal cache data via an exported component. Public writeups in connected documents corroborate the issue and reference Samsung’s advisory page; no ex...

CVE-2021-25425

Improper check vulnerability in Samsung Health prior to version 6.17 allows attacker to read internal cache data via exported component...

PT-2021-16616

Name of the Vulnerable Software and Affected Versions: Samsung Health versions prior to 6.17 Description: The issue is related to an improper check vulnerability that allows an attacker to read internal cache data via an exported component. Recommendations: For versions prior to 6.17, update to...

SAMSUNG Health 安全漏洞

Samsung Health is a health management app from Samsung South Korea. Samsung Health has a security vulnerability that can be exploited by attackers to perform privileged operations...

PT-2021-16592

Name of the Vulnerable Software and Affected Versions: Samsung Health versions prior to 6.16 Description: The issue allows an attacker to execute privileged actions due to an intent redirection vulnerability. Recommendations: For versions prior to 6.16, update to version 6.16 or later to resolve...

Samsung Health 代码问题漏洞

Samsung Health is a health management app from Samsung South Korea. Samsung Health suffers from a code issue vulnerability that stems from an improper checking vulnerability in Samsung Health. Exploitation of the vulnerability allows an attacker to read internal cached data via the export compone...

CVE-2021-25425: Improper Check or Handling of Exceptional Conditions

Improper check vulnerability in Samsung Health prior to version 6.17 allows attacker to read internal cache data via exported component...

CVE-2021-25401: Improper Input Validation

Intent redirection vulnerability in Samsung Health prior to version 6.16 allows attacker to execute privileged action...

jamaicaobserver.com Cross Site Scripting vulnerability OBB-2044492

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| jamaicaobserver.com ---|--- Open Bug...

A week in security (May 31 – June 6)

Last week on Malwarebytes Labs, we looked at an interesting trend in facial recognition technology—hint: its a slow fade, the latest ransomware attacks on JBS and Steamship Authority, Cobalt Strike, a Coronavirus phishing campaign, WhatsApp’s decision to not limit app functionalities for...

The vulnerability of the Virtual SAN Health Check software module, which is used to manage the VMware vSphere Client (HTML5) hypervisor, allows a attacker to execute arbitrary commands.

The vulnerability of the Virtual SAN Health Check software module for managing the VMware vSphere Client HTML5 exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with unlimited privileges by sending a specially...