Biltay Technology Scienta SQL Injection Vulnerability

Biltay Technology Scienta is a mobile application from Biltay Technology designed for enterprise management. A SQL injection vulnerability exists in versions prior to Biltay Technology Scienta v.1390 that stems from incorrect neutralization of special elements used in SQL commands...

Line Trust management vulnerabilities

Line is the instant messaging platform of Line Corporation. A security vulnerability exists in Line prior to version 13.16.0 iOS, which stems from a lack of TLS certificate validation for log transfers in the Finance module of the Line Client...

The vulnerability of the software implementation of the GTP protocol (GPRS Tunneling Protocol) for Open5GS mobile communication networks lies in the lack of authentication for a critical function, allowing attackers to access confidential information.

The vulnerability of the software implementation of the GTP protocol GPRS Tunneling Protocol for mobile communication networks based on Open5GS is related to the absence of authentication for the critical function. Exploiting this vulnerability can allow a malicious actor to gain access to...

Mobile Address Bar Changer <= 3.0 - Settings Update via CSRF

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

Biltay Technology Scienta SQL Injection Vulnerability

Biltay Technology Scienta is a mobile application from Biltay Technology designed for enterprise management. A SQL injection vulnerability exists in versions prior to Biltay Technology Scienta v.1390 that stems from incorrect neutralization of special elements used in SQL commands...

IoT Secure Development Guide

Introduction This guide deals with threat modelling and early stages of development so that security issues and controls are identified before committing to manufacturing. Current attack methods, and the pitfalls we find in embedded designs, have been highlighted so that a finished product is as...

The vulnerability of the AppleMobileFileIntegrity component in operating systems such as iPadOS, tvOS, iOS, and watchOS allows attackers to circumvent existing security restrictions.

The vulnerability of the AppleMobileFileIntegrity component in operating systems such as iPadOS, tvOS, iOS, and watchOS is related to the lack of protection for service data. It is also associated with deficiencies in access control. Exploiting this vulnerability could allow attackers to circumve...

Spoofing Attack

chromium is vulnerable to Spoofing Attack. The vulnerability exists due to the inappropriate implementation in Custom Mobile Tabs in the library, which allows an attacker to spoof security UI via a maliciously crafted HTML page...

Information disclosure

HP LIFE Android Mobile application is potentially vulnerable to escalation of privilege and/or information disclosure...

CVE-2023-5365

Technical details about CVE-2023-5365 are not publicly available in the provided documents. Please monitor for updates from HP, Red Hat, and CVE lists for affected components, impact, and fixes.

CVE-2023-5365 HP LIFE Android Mobile – Potential Escalation of Privilege, Information Disclosure

HP LIFE Android Mobile application is potentially vulnerable to escalation of privilege and/or information disclosure...

HP LIFE Android Mobile – Potential Escalation of Privilege, Information Disclosure

HP LIFE Android Mobile application is potentially vulnerable to escalation of privilege and/or information disclosure. Update your application...

Researchers Link DragonEgg Android Spyware to LightSpy iOS Surveillanceware

New findings have identified connections between an Android spyware called DragonEgg and another sophisticated modular iOS surveillanceware tool named LightSpy. DragonEgg, alongside WyrmSpy aka AndroidControl, was first disclosed by Lookout in July 2023 as a strain of malware capable of gathering...

Lyca Mobile Suffers Cyber Attack, Investigating Ransomware Possibility

By Waqas Lyca Mobile confirms a cyber attack impacting all markets except the US, Australia, Ukraine, and Tunisia. This is a post from HackRead.com Read the original post: Lyca Mobile Suffers Cyber Attack, Investigating Ransomware Possibility...

Apple iTunes Incorrect Permission Assignment Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Apple iTunes. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Apple Mobile Device...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Oct-2023 Release 1 version, which stems from improper access control of system propertie...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices, which originates from incorrect input validation in the UEFI firmware...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices version 6.24.3.007, which stems from an improper access control vulnerability in Samsung Heal...

Apple iOS and iPadOS Security Vulnerabilities

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS before 17.0.3 and iPadOS before 17.0.3, which can be exploited by...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Oct-2023 Release 1 version, which originates from a logic error when installing a software package...