PT-2024-33207 · Almando Gmbh · Almando Play App

Name of the Vulnerable Software and Affected Versions: almando GmbH Almando Play APP version 1.8.2 Description: The issue allows a remote attacker to obtain sensitive information via the firmware update process. Recommendations: For version 1.8.2, at the moment, there is no information about a...

CVE-2024-48775

An issue in Plug n Play Camera com.ezset.delaney 1.2.0 allows a remote attacker to obtain sensitive information via the firmware update process...

Almando Play 安全漏洞

Almando Play is a high quality audio software from Almando. A security vulnerability exists in Almando Play version 1.8.2, which stems from a problem that allows remote attackers to obtain sensitive information through the firmware update process...

Almando Play 安全漏洞

Almando Play is a high quality audio software from Almando. A security vulnerability exists in Almando Play version 2.3.1, which stems from a problem that allows remote attackers to obtain sensitive information through the firmware update process...

PT-2024-33211 · Unknown · Plug N Play Camera

Name of the Vulnerable Software and Affected Versions: Plug n Play Camera com.ezset.delaney version 1.2.0 Description: The issue allows a remote attacker to obtain sensitive information via the firmware update process. Recommendations: For version 1.2.0, update the firmware to a version that...

Plug n Play Camera com.wisdomcity.zwave 安全漏洞

Plug n Play Camera com.wisdomcity.zwave is a camera driver from Plug n Play. A security vulnerability exists in Plug n Play Camera com.wisdomcity.zwave version 1.1.0, which stems from contains a vulnerability that allows remote attackers to obtain sensitive information through the firmware update...

CVE-2024-48770

The Plug n Play Camera com.wisdomcity.zwave (version 1.1.0 ) is vulnerable to an issue that allows a remote attacker to obtain sensitive information during the firmware update process . The vulnerability is associated with CWE-922 (Insecure Storage of Sensitive Information). As of the current doc...

CVE-2024-48775

A security vulnerability exists in Plug n Play Camera com.ezset.delaney version 1.2.0 , a camera driver. The issue allows a remote attacker to obtain sensitive information through the firmware update process . This vulnerability is associated with CWE-306 (Missing Authentication for Critical Func...

CVE-2024-48770

An issue in Plug n Play Camera com.wisdomcity.zwave 1.1.0 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48775

An issue in Plug n Play Camera com.ezset.delaney 1.2.0 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48770

An issue in Plug n Play Camera com.wisdomcity.zwave 1.1.0 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48771

A security vulnerability exists in the almando GmbH Almando Play APP (com.almando.play) version 1.8.2 . This issue is caused by missing authentication for a critical function during the firmware update process, which allows a remote attacker to obtain sensitive information . While the vulnerabili...

CVE-2024-48775: Missing Authentication for Critical Function

An issue in Plug n Play Camera com.ezset.delaney 1.2.0 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48771: Missing Authentication for Critical Function

An issue in almando GmbH Almando Play APP com.almando.play 1.8.2 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48770: Insecure Storage of Sensitive Information

An issue in Plug n Play Camera com.wisdomcity.zwave 1.1.0 allows a remote attacker to obtain sensitive information via the firmware update process...

Google Blocks Unsafe Android App Sideloading in India for Improved Fraud Protection

Google has announced that it's piloting a new security initiative that automatically blocks sideloading of potentially unsafe Android apps in India, after similar tests in Singapore, Thailand, and Brazil. The enhanced fraud protection feature aims to keep users safe when they attempt to install...

Android Security Bulletin October 2024Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2024-10-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

Fake Trading Apps Target Victims Globally via Apple App Store and Google Play

A large-scale fraud campaign leveraged fake trading apps published on the Apple App Store and Google Play Store, as well as phishing sites, to defraud victims, per findings from Group-IB. The campaign is part of a consumer investment fraud scheme that's also widely known as pig butchering, in whi...

Pig Butchering: Fake Trading Apps Target Crypto on Apple, Google Play Stores

Pig Butchering scam targets crypto users with fake trading apps on Apple and Google Play Stores. Disguised as…...

Malicious code in google-play-store (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b0f8bc12f61546bde84dd1d7a64519fcdc55ce875b71f3d8d848d2d5daa2248d This is a copy of https://pypi.org/project/play-scraper/ with added a very questionable "telemetry": in scraper.py, L90 sends the user hostname, IP and the exa...