2460 matches found
Google Warns of Growing Android Attack Vector: Backdoored SDKs and Pre-Installed Apps
Google is reporting an uptick in efforts by bad actors to plant potentially harmful applications PHAs on Android devices via pre-installed apps and by bundling them with system updates delivered over the air. The technique is especially troubling, Google said, because PHAs are often malicious and...
The vulnerability of the information collection tool for devices on the Cisco Common Services Platform Collector lies in the presence of a pre-installed account, which allows a perpetrator to gain access to the device.
The vulnerability of the device information collection tool in the Cisco Common Services Platform Collector relates to the presence of a pre-installed account. Exploiting this vulnerability can allow an attacker operating remotely to gain access to the device...
rdesktop Detection
Detects whether rdesktop is present on the target system and if so, tries to figure out the installed version. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU...
(0Day) (Pwn2Own) Google Android Contacts Incorrect Permission Assignment Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Google Android. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...
The vulnerability in the web interface of software for network monitoring in Cisco Network Assurance Engine allows a perpetrator to disclose protected information or cause service failures.
The vulnerability of the software web interface for network monitoring in the Cisco Network Assurance Engine lies in the use of pre-installed credentials. Exploiting this vulnerability can allow attackers to disclose sensitive information or cause service failures...
LogMeIn Control Panel Installed (Windows)
Binary data logmeincontrolpanelwininstalled.nbin...
LogMeIn Client Installed (Windows)
Binary data logmeinclientwininstalled.nbin...
CVE-2018-19638 User can overwrite arbitrary log files in support tar
In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the directory that is used by supportutils to collect the log files...
Microsoft Visual Studio Isolated Shell Installed
Binary data microsoftvsisoshellinstalled.nbin...
Microsoft Visual Studio Code Installed
Binary data microsoftvisualstudiocodeinstalled.nbin...
Yokogawa CellActivision Detection (Windows SMB Login)
Detects the installed version of Yokogawa CellActivision for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPC UA Local Discovery Server Detection (Windows SMB Login)
Detects the installed version of OPC UA Local Discovery Server for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of Juniper Advanced Threat Prevention’s microprogramming software, related to the use of the DES algorithm and a pre-installed password hashing modifier, allows attackers to gain access to protected information.
The vulnerability of Juniper Advanced Threat Prevention’s detection and prevention software lies in the use of the DES algorithm and a pre-installed modifier for password hashing. Exploiting this vulnerability could allow attackers to gain access to protected information...
Information Disclosure of Installed Extensions
More info at https://typo3.org/security/advisory/typo3-core-sa-2019-001...
Information Disclosure of Installed Extensions
More info at https://typo3.org/security/advisory/typo3-core-sa-2019-001...
Information Disclosure of Installed Extensions
It has been discovered that mechanisms used for configuration of RequireJS package loading are susceptible to information disclosure. This way a potential attack can retrieve additional information about installed system and third party extensions...
The vulnerability of the EVLink Parking software lies in its use of pre-installed credentials, allowing a violator to gain access to the device.
The vulnerability of the EVLink Parking software is related to the use of pre-set credentials. Exploiting this vulnerability could allow a remote attacker to gain access to the device...
The vulnerability of D-Link DIR-620 router’s microprogramming software, which stems from the use of pre-installed registration data, allows attackers to enhance their privileges and execute arbitrary code.
The vulnerability of D-Link DIR-620 router microprogramming software is related to the use of pre-installed registration data. Exploiting this vulnerability allows a remote attacker to enhance their privileges and execute arbitrary code...
The vulnerability of the software controller for the centralized control of wireless networks by D-Link Central WiFi Manager arises from the use of pre-installed credentials. This allows a hacker to execute arbitrary PHP code.
The vulnerability of the D-Link Central WiFi Manager software control panel lies in the use of pre-installed credentials FTP services: admin, admin, which are running on port 9000. Exploiting this vulnerability allows a malicious actor to execute arbitrary PHP code by loading it into the root...
The new landscape of pre-installed mobile malware: malicious code within
Here's a scary thought: Mobile devices may soon come with pre-installed malware on required system apps. While it might sound like a grim foretelling, pre-installed mobile malware is an unfortunate reality of the future. In the past, we’ve seen pre-installed malware with the notorious Adups threa...