Trend Micro Mobile Security for Enterprise invite_devices user_name SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Mobile Security for Enterprise. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of the invitedevices action. When parsing the...

Trend Micro Mobile Security for Enterprise delete_group ParentId SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Mobile Security for Enterprise. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of the deletegroup action. When parsing the 'id'...

Trend Micro Mobile Security for Enterprise get_user_list LDAPAccount SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Mobile Security for Enterprise. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of the getuserlist action. When parsing the...

Trend Micro Mobile Security for Enterprise get_dep_profile Id SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Mobile Security for Enterprise. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of the getdepprofile action. When parsing the 'i...

Trend Micro Mobile Security for Enterprise eas_agent_sync_client_info SlinkId SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Mobile Security for Enterprise. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of the easagentsyncclientinfo action. When...

Trend Micro Mobile Security for Enterprise get_remote_unlockstring Device_DeviceId SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Mobile Security for Enterprise. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of the getremoteunlockstring action. When parsin...

Samsung Launches Bug Bounty Program — Offering up to $200,000 in Rewards

With the growing number of cyber attacks and data breaches, a number of tech companies and organisations have started Bug Bounty programs for encouraging hackers, bug hunters and researchers to find and responsibly report bugs in their services and get rewarded. Samsung is the latest in the list ...

Is Your Mobile Carrier Your Weakest Link?

More online services than ever now offer two-step authentication -- requiring customers to complete a login using their phone or other mobile device after supplying a username and password. But with so many services relying on your mobile for that second factor, there has never been more riding o...

How do I Integrate XenMobile and SkyCure

Skycure for Citrix XenMobile extends your organization’s mobile security with next-generationMobile Threat Defensecapabilities: proactively detect and automatically remediate known and unknown threats, vulnerabilities and active attacks across all mobile attack vectors. Integrate Skycure with...

This Week in Security News

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...

Android 8.0 Oreo Released – 11 New Features That Make Android Even Better

While the moon was eclipsing the sun, Google announced the launch of its new mobile operating system called Android 8.0 Oreo in an Eclipse-themed launch event in New York City. Yes, the next version of sugary snack-themed Android and the successor to Android Nougat will now be known as Android...

Runtime Mobile Exploration: objection

objection is a runtime mobile exploration toolkit, powered by Frida . It was built with the aim of helping assess mobile applications and their security posture without the need for a jailbroken or rooted mobile device. The project’s name quite literally explains the approach as well, whereby...

Google Android QTEE Application Buffer Overflow Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which the QTEE application is one. A buffer overflow vulnerability exists in the QTEE application in Android. An attacker can exploit this vulnerability to perform unauthorized...

SKILLS.com.au Industry App - Man In The Middle Remote Code Execution

Exploit Title: SKILLS.com.au Industry App - Remote Code Execution via MITM Date: 20/Jul/17 Exploit Author: MaXe Vendor Homepage: https://play.google.com/store/apps/details?id=a3.skills.com http://archive.is/NRlNP Software Link: N/A Screenshot: N/A Version: 1.0 Tested on: Android 4.1.0 Google APIs...

Using the CTS for vulnerability detection and principles of analysis-vulnerability warning-the black bar safety net

360 Vulpecker team Membership 360 Information Security Department, committed to the Android application and the system-layer vulnerability discovery as well as other Android security research. We passed on the CTS frame of the research, the preparation of a vulnerability detection aspect of the...

Wawa Employees Credit Union Mobile Information Disclosure Vulnerability

Wawa Employees Credit Union Mobile allows you to bank anywhere, anytime. Wawa Employees Credit Union Mobile for iOS fails to validate SSL servers with X.509 certificates, allowing man-in-the-middle attackers to spoof servers and gain access to sensitive information by crafting certificates...

Avira Mobile Security for iOS Information Disclosure Vulnerability

Avira Mobile Security for iOS is a set of mobile security software based on the iOS platform from Avira Germany. An information disclosure vulnerability exists in iOS-based versions of Avira Mobile Security prior to 1.5.11, which originates when the program sends sensitive login information in...

CVE-2015-7732

The Avira Mobile Security app before 1.5.11 for iOS sends sensitive login information in cleartext...

Design/Logic Flaw

The Avira Mobile Security app before 1.5.11 for iOS sends sensitive login information in cleartext...

CVE-2015-7732

CVE-2015-7732 affects Avira Mobile Security for iOS prior to 1.5.11. The vulnerability is an information disclosure where the app sends sensitive login information in cleartext, potentially exposing credentials. Multiple connected sources corroborate the issue and identify the impacted version ra...