Malicious code in free-pokemon-go-spoofer-ios-apk-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0db129f987cd3dc788ee2d248495349ba7c3cae85e9f80507bfdfc9ca48f91e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wechat-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d33ded9daa26b1d3dac127b3e5efc1765043c402e1fd200c666be59bf9fcb48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7111 Malicious code in wechat-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d33ded9daa26b1d3dac127b3e5efc1765043c402e1fd200c666be59bf9fcb48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Nightingale - Docker Environment For Pentesting Which Having All The Required Tool For VAPT

In today's technological era, docker is the most powerful technology in each and every domain, whether it is Development, cyber security, DevOps, Automation, or Infrastructure. Considering the demand of the industry, I would like to introduce my idea to create a NIGHTINGALE: docker image for...

mobilehomeclassifieds.com Cross Site Scripting vulnerability OBB-2653709

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Samsung LSOItemData Elevation of Privilege Vulnerability

Samsung LSOItemData is a system component of Samsung mobile devices.An elevation of privilege vulnerability exists in Samsung LSOItemData. The vulnerability stems from a lack of proper authentication logic in LSOItemData, which could be exploited by an attacker to initiate certain activities...

Huawei Emui and Magic UI Logic Flaw Vulnerability

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to a logic flaw. An attacker could exploit the vulnerability to affect the usability of certain features...

Samsung SmartThings PendingIntent Hijacking Vulnerability

SmartThings is a powerful Samsung smart home mobile app. A PendingIntent hijacking vulnerability exists in versions prior to Samsung SmartThings 1.7.85.25. An unauthorized local attacker can exploit the vulnerability to access files via an implicit Intent...

Samsung mobile libsmkvextractor input validation error vulnerability (CNVD-2022-87038)

Samsung mobile devices are a family of mobile products from Samsung South Korea. samsung mobile libsmkvextractor is vulnerable to an input validation error. The vulnerability stems from incorrect input validation logic in libsmkvextractor, which can be exploited by an attacker to cause a denial o...

Samsung KfaOptions Elevation of Privilege Vulnerability

Samsung KfaOptions is a system component of Samsung mobile devices.An elevation of privilege vulnerability exists in Samsung KfaOptions, which stems from a lack of proper authentication logic in KfaOptions. An attacker could use this vulnerability to launch certain activities...

Amodat Mobile Application Gateway SQL Injection Vulnerability

Amodat Mobile Application Gateway, a mobile application gateway from Amodat Israel, is vulnerable to a SQL injection vulnerability in versions prior to 7.12.00.09, which stems from a lack of validation of external input by agentid SQL statement validation. An attacker could use this vulnerability...

HUAWEI EMUI and Magic UI Information Disclosure Vulnerability

HUAWEI EMUI and Magic UI is an Android-based mobile operating system developed by the Chinese company Huawei HUAWEI. HUAWEI EMUI and Magic UI suffers from an information disclosure vulnerability that stems from a configuration flaw in the Secure Operating System module, which can be exploited by ...

HUAWEI EMUI and Magic UI Authorization Issue Vulnerability

HUAWEI EMUI and Magic UI is an Android-based mobile operating system developed by the Chinese company Huawei HUAWEI. HUAWEI EMUI and Magic UI suffers from an authorization issue vulnerability that stems from a lack of authorization in a system component, which can be exploited by an attacker to...

WordPress Mobile browser color select plugin cross-site request forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2022-22072

Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2022-25651

Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2022-22083

Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2022-22090

Memory corruption in audio due to use after free while managing buffers from internal cache in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile...

CVE-2022-22071

Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2022-22072

Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...