20566 matches found
PT-2024-6843 · Microsoft · Windows Mobile Broadband Driver +1
Name of the Vulnerable Software and Affected Versions: Windows Mobile Broadband Driver affected versions not specified Description: The issue is related to a denial of service vulnerability in the Windows Mobile Broadband Driver, which is caused by insufficient input validation, leading to a buff...
Microsoft Windows Mobile Broadband Driver 安全漏洞
Microsoft Windows Mobile Broadband Driver is a driver from Microsoft USA that allows the Windows operating system to communicate with mobile broadband devices. A security vulnerability exists in Microsoft Windows Mobile Broadband Driver. An attacker exploiting this vulnerability could remotely...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Oct-2024 Release 1, which originates from allowing out-of-bounds write...
CVE-2024-44068
An issue was discovered in the m2m scaler driver in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850,and W920. A Use-After-Free in the mobile processor leads to privilege escalation...
CVE-2024-42027
The E2EE password entropy generated by Rocket.Chat Mobile prior to version 4.5.1 is insufficient, allowing attackers to crack it if they have the appropriate time and resources...
CVE-2024-42027
The E2EE password entropy generated by Rocket.Chat Mobile prior to version 4.5.1 is insufficient, allowing attackers to crack it if they have the appropriate time and resources...
CVE-2024-42027
The E2EE password entropy generated by Rocket.Chat Mobile prior to version 4.5.1 is insufficient, allowing attackers to crack it if they have the appropriate time and resources...
CVE-2024-42027
The CVE-2024-42027 entry describes a vulnerability in Rocket.Chat Mobile versions prior to 4.5.1 where E2EE password entropy is insufficient, enabling an attacker with sufficient time/resources to crack the initial E2EE password. Affected product: Rocket.Chat Mobile (pre-4.5.1). Root cause: low-e...
MTN Group: Ability to Add and Verify Uncontrolled Mobile Numbers Leading to Account Takeover (ATO)
The vulnerability allowed attackers to manipulate the OTP verification response to bypass the OTP check and link an uncontrolled mobile number to the victim's account. This led to an account takeover scenario where the attacker gained full access to the victim's account without controlling the...
PT-2024-19853
Name of the Vulnerable Software and Affected Versions MSM module affected versions not specified Description The issue involves memory corruption when invoking IOCTL calls for the MSM module from user space during audio playback and record. This occurs due to improper handling of IOCTL calls,...
CVE-2024-47652
This vulnerability exists in Shilpi Client Dashboard due to implementation of inadequate authentication mechanism in the login module wherein access to any users account is granted with just their corresponding mobile number. A remote attacker could exploit this vulnerability by providing mobile...
CVE-2024-47652 Insecure Authentication Vulnerability
This vulnerability exists in Shilpi Client Dashboard due to implementation of inadequate authentication mechanism in the login module wherein access to any users account is granted with just their corresponding mobile number. A remote attacker could exploit this vulnerability by providing mobile...
CVE-2024-47652 Insecure Authentication Vulnerability
This vulnerability exists in Shilpi Client Dashboard due to implementation of inadequate authentication mechanism in the login module wherein access to any users account is granted with just their corresponding mobile number. A remote attacker could exploit this vulnerability by providing mobile...
PT-2024-32711 · Unknown · Shilpi Client Dashboard
Name of the Vulnerable Software and Affected Versions: Shilpi Client Dashboard affected versions not specified Description: The issue is related to an inadequate authentication mechanism in the login module of the Shilpi Client Dashboard. This allows access to any user's account with just their...
Apple iOS和iPadOS 安全漏洞
Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS prior to 18.0.1 and iPadOS prior to 18.0.1, which stems from an audio message...
PT-2024-40243 · Saltcorn · Saltcorn
Name of the Vulnerable Software and Affected Versions: Saltcorn version 1.0.0-beta.13 Description: A user with admin permission can read arbitrary file and directory names on the filesystem by calling the "/build-mobile-app/result" endpoint. The build dir name parameter is not properly validated...
The vulnerability of Microsoft Teams’ corporate platform for the iOS operating system allows attackers to perform spear-phishing attacks.
The vulnerability of Microsoft Teams’ operating system on iOS is related to information representation errors in the user interface. Exploiting this vulnerability could allow a malicious actor to perform spear-phishing attacks remotely...
Crypto Scam App Disguised as WalletConnect Steals $70K in Five-Month Campaign
Cybersecurity researchers have discovered a malicious Android app on the Google Play Store that enabled the threat actors behind it to steal approximately $70,000 in cryptocurrency from victims over a period of nearly five months. The dodgy app, identified by Check Point, masqueraded as the...
MTN Group: Broken Access Control leads to disclosure of transaction history via /v2/rechargeTransactionHistory endpoint
The vulnerability disclosed the transaction history details of MTN NG customers, including recharge dates, amounts, and transaction IDs. This was caused by insufficient authorization checks in the /v2/rechargeTransactionHistory API endpoint, which allowed access to other customers' data without...
