WordPress Sp*tify Play Button for WordPress plugin <= 2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via spotifyplaybutton Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via spotifyplaybutton Shortcode vulnerability discovered by Peter Thaleikis in WordPress Plugin Sptify Play Button for WordPress versions = 2.11...

Gmail's New Shielded Email Feature Lets Users Create Aliases for Email Privacy

Google appears to be readying a new feature called Shielded Email that allows users to create email aliases when signing up for online services and better combat spam. The feature was first reported by Android Authority last week following a teardown of the latest version of Google Play Services...

These 8 Apps on Google Play Store Contain Android/FakeApp Trojan

Eight Android apps on the Google Play Store, downloaded by millions, contain the Android.FakeApp trojan, stealing user data…...

North Korean Hackers Team Up with Play Ransomware in Global Attack

State-Sponsored Espionage Meets Ransomware!...

North Korean Group Collaborates with Play Ransomware in Significant Cyber Attack

Threat actors linked to North Korea have been implicated in a recent incident that deployed a known ransomware family called Play, underscoring their financial motivations. The activity, observed between May and September 2024, has been attributed to a threat actor tracked as Jumpy Pisces , which...

CVE-2024-28052

The WBR-6012 is a wireless SOHO router. It is a low-cost device which functions as an internet gateway for homes and small offices while aiming to be easy to configure and operate. In addition to providing a WiFi access point, the device serves as a 4-port wired router and implements a variety of...

PT-2024-22238 · Wbr-6012 · Wbr-6012

Name of the Vulnerable Software and Affected Versions: WBR-6012 affected versions not specified Description: The WBR-6012 is a wireless SOHO router that functions as an internet gateway for homes and small offices. It provides a WiFi access point and serves as a 4-port wired router, implementing...

Russian Espionage Group Targets Ukrainian Military with Malware via Telegram

A suspected Russian hybrid espionage and influence operation has been observed delivering a mix of Windows and Android malware to target the Ukrainian military under the Telegram persona Civil Defense. Google's Threat Analysis Group TAG and Mandiant are tracking the activity under the name UNC581...

CVE-2024-48791

An issue in Plug n Play Camera com.starvedia.mCamView.zwave 5.5.1 allows a remote attacker to obtain sensitive information via the firmware update process...

Plug n Play Camera com.starvedia.mCamView.zwave 安全漏洞

Plug n Play Camera com.starvedia.mCamView.zwave is a camera driver from Plug n Play. A security vulnerability exists in Plug n Play Camera com.starvedia.mCamView.zwave version 5.5.1. A remote attacker could exploit this vulnerability to obtain sensitive information through the firmware update...

CVE-2024-48791

An issue in Plug n Play Camera com.starvedia.mCamView.zwave 5.5.1 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48791

An issue in Plug n Play Camera com.starvedia.mCamView.zwave 5.5.1 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48791

A security vulnerability exists in the Plug n Play Camera com.starvedia.mCamView.zwave version 5.5.1 driver. A remote attacker can exploit this issue to obtain sensitive information by targeting the firmware update process . The root cause is identified as missing authentication for a critical fu...

CVE-2024-48791: Missing Authentication for Critical Function

An issue in Plug n Play Camera com.starvedia.mCamView.zwave 5.5.1 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48770

An issue in Plug n Play Camera com.wisdomcity.zwave 1.1.0 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48775

An issue in Plug n Play Camera com.ezset.delaney 1.2.0 allows a remote attacker to obtain sensitive information via the firmware update process...

Plug n Play Camera com.ezset.delaney 安全漏洞

Plug n Play Camera com.ezset.delaney is a camera driver from Plug n Play. A security vulnerability exists in Plug n Play Camera com.ezset.delaney version 1.2.0, which originated from an issue that allows remote attackers to obtain sensitive information through the firmware update process...

CVE-2024-48771

An issue in almando GmbH Almando Play APP com.almando.play 1.8.2 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48771

An issue in almando GmbH Almando Play APP com.almando.play 1.8.2 allows a remote attacker to obtain sensitive information via the firmware update process...

PT-2024-33207 · Almando Gmbh · Almando Play App

Name of the Vulnerable Software and Affected Versions: almando GmbH Almando Play APP version 1.8.2 Description: The issue allows a remote attacker to obtain sensitive information via the firmware update process. Recommendations: For version 1.8.2, at the moment, there is no information about a...