Microsoft Raw Image Extension 代码注入漏洞

Microsoft Raw Image Extension is a software application from Microsoft. It enables the viewing of thumbnails and metadata for supported raw file formats directly in Windows File Explorer or the viewing of images in the Photos application. A code injection vulnerability exists in Microsoft Raw Ima...

Android “System Update” malware steals photos, videos, GPS location

A newly discovered piece of Android malware shares the same capabilities found within many modern stalkerware-type apps—it can swipe images and video, rifle through online searches, record phone calls and video, and peer into GPS location data—but the infrastructure behind the malware obscures it...

Watch Out! That Android System Update May Contain A Powerful Spyware

Researchers have discovered a new information-stealing trojan, which targets Android devices with an onslaught of data-exfiltration capabilities — from collecting browser searches to recording audio and phone calls. While malware on Android has previously taken the guise of copycat apps, which go...

COVID-19 testing service in US exposes patients’ photos, passports

By Habiba Rashid COVID-19 testing service in the State of Utah stored passport scans and other highly personal data on unsecured Amazon S3 buckets. This is a post from HackRead.com Read the original post: COVID-19 testing service in US exposes patients photos, passports...

X-rated social media app Fleek exposed explicit photos of users

By Waqas Fleek shut down its operation in 2019 but did not secure its server or remove users' data. Here's what was leaked and when. This is a post from HackRead.com Read the original post: X-rated social media app Fleek exposed explicit photos of users...

Experts Sound Alarm On New Android Malware Sold On Hacking Forums

Cybersecurity researchers have exposed the operations of an Android malware vendor who teamed up with a second threat actor to market and sell a remote access Trojan RAT capable of device takeover and exfiltration of photos, locations, contacts, and messages from popular apps such as Facebook,...

Keybase: Keybase /AppData/Local/Keybase/uploadtemps folder stores pasted photos

During research, I had noticed that Keybase does not adequately clear the cache and some residual files can be viewed, with no form of encryption on the files. In addition, these pasted photos remain even after clearing the containing chat. Not all of the pasted photos remain, so it's unclear wha...

Sextortionist Campaign Targets iOS, Android Users with New Spyware

New spyware is targeting iOS and Android frequenters of adult mobile sites by posing as a secure messaging application in yet another twist on sextortionist scams. The spyware, dubbed Goontact, targets users of escort-service sites and other sex-oriented services – particularly in Chinese-speakin...

Apache Cordova Access Control Error Vulnerability

Apache Cordova is a camera plug-in for Android from the Apache Foundation. An access control error vulnerability exists in Cordova Android, which can be exploited by an attacker to gain access to photos taken externally using the application...

Android Messenger App Still Leaking Photos, Videos

The GO SMS Pro Android app has published two new versions on Google Play since a major security weakness was disclosed in November – but neither fixes the original issue, leaving 100 million users at risk for privacy violations, researchers said. Meanwhile, a raft of exploitation tools have been...

WARNING: Unpatched Bug in GO SMS Pro App Exposes Millions of Media Messages

GO SMS Pro, a popular messaging app for Android with over 100 million installs, has been found to have an unpatched security flaw that publicly exposes media transferred between users, including private voice messages, photos, and videos. "This means any sensitive media shared between users of th...

WhatsApp Using Up Your Phone Storage? Here’s How to Fix It

It's time to do something about those photos and videos automatically saving to your camera roll...

GNOME security, bug fix, and enhancement update

dleyna-renderer 0.6.0-3 - Add a manual Resolves: 1612579 frei0r-plugins 1.6.1-7 - Rebuild with newer annobin to fix rpmdiff problems - Fix the build with a newer opencv - Resolves: rhbz1703994 gdm 3.28.3-34 - Fix file descriptor leak Resolves: 1877853 3.28.3-33 - Fix problem with Xorg fallback...

Unspecified Vulnerability in Apple iOS and macOS Mojave Live Photos in FaceTime Component

Apple iOS is an operating system developed by Apple Inc. for mobile devices.Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in the Live Photos in FaceTime component of Apple iOS versions prior to 12.1.4 and macOS Mojave...

CVE-2019-7288

The issue was addressed with improved validation on the FaceTime server. This issue is fixed in macOS Mojave 10.14.3 Supplemental Update, iOS 12.1.4. A thorough security audit of the FaceTime service uncovered an issue with Live Photos...

CVE-2019-7288

The issue was addressed with improved validation on the FaceTime server. This issue is fixed in macOS Mojave 10.14.3 Supplemental Update, iOS 12.1.4. A thorough security audit of the FaceTime service uncovered an issue with Live Photos...

Code injection

The issue was addressed with improved validation on the FaceTime server. This issue is fixed in macOS Mojave 10.14.3 Supplemental Update, iOS 12.1.4. A thorough security audit of the FaceTime service uncovered an issue with Live Photos...

CVE-2019-7288

The issue was addressed with improved validation on the FaceTime server. This issue is fixed in macOS Mojave 10.14.3 Supplemental Update, iOS 12.1.4. A thorough security audit of the FaceTime service uncovered an issue with Live Photos...

pittsburghoperaphotos.com Cross Site Scripting vulnerability OBB-1446963

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

pittsburghoperaphotos.com Cross Site Scripting vulnerability OBB-1425042

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...