CVE-2021-25451

A PendingIntent hijacking in NetworkPolicyManagerService prior to SMR Sep-2021 Release 1 allows attackers to get IMSI data...

CVE-2021-25451

A PendingIntent hijacking in NetworkPolicyManagerService prior to SMR Sep-2021 Release 1 allows attackers to get IMSI data...

Samsung SMR 授权问题漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in Samsung SMR, which originated prior to the September 2021 release of SMR, and can be exploited by an attacker to obtain IMSI data by hijacking th...

Joker’s Stash Carding Market to Call it Quits

Jokers Stash, by some accounts the largest underground shop for selling stolen credit card and identity data, says its closing up shop effective mid-February 2021. The announcement came on the heels of a turbulent year for the major cybercrime store, and just weeks after U.S. and European...

Tax Scams – Everything you need to know to keep your money and data safe

Tax season has always been a pretty nerve-wracking time for hard-working Americans. But over the years, technology advances have arrived to gradually make the process a bit easier. The bad news is that they can also introduce new cyber risks and even more stress. There are two things that...

This Week in Security News: Operation Overtrap Targets Japanese Online Banking Users and Everything You Need to Know About Tax Scams

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about the number of ways Operation Overtrap can infect or trap victims with its payload. Also, read about how to protect your personal...

Microsoft Windows UAC Protection Bypass Vulnerability

Microsoft Windows is a set of operating systems developed by Microsoft Corporation in the United States. Microsoft Windows suffers from a UAC protection bypass vulnerability. As the program fails to check input identity data. An attacker could exploit the vulnerability to gain administrator acces...

Galaxy CMS Cross-Site Scripting Vulnerability

Galaxy CMS is a lightweight, fast-response request content management system based on the .NET Framework and a SQL Server database. A cross-site scripting vulnerability exists in Galaxy CMS, which could be exploited by an attacker to execute arbitrary script code in the browser of a user in the...

CVE-2010-2628

The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which allows remote attackers to execute arbitrary code via crafted 1 certificate or 2 identity data that triggers buffer overflows...

Buffer overflow

The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which allows remote attackers to execute arbitrary code via crafted 1 certificate or 2 identity data that triggers buffer overflows...

CVE-2010-2628

The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which allows remote attackers to execute arbitrary code via crafted 1 certificate or 2 identity data that triggers buffer overflows...