8751 matches found
Directory traversal
The Vivo V7 Android device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user/release-keys contains a platform app with a package name of com.vivo.smartshot versionCode=1, versionName=3.0.0. This app contains an exported service named...
CVE-2018-15000
CVE-2018-15000 — Concrete details exist: on Vivo V7 devices (build vivo/1718/1718:7.1.2/N2G47H/...) a platform app with package name com.vivo.smartshot includes an exported service ScreenRecordService that can record the screen for 60 minutes and write the resulting MP4 to a location chosen by th...
CVE-2018-15000
The Vivo V7 Android device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user/release-keys contains a platform app with a package name of com.vivo.smartshot versionCode=1, versionName=3.0.0. This app contains an exported service named...
PT-2019-9088
Name of the Vulnerable Software and Affected Versions Vivo V7 Android device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user/release-keys com.vivo.smartshot version 3.0.0 Description The issue concerns a platform app with a package name of com.vivo.smartshot that...
CVE-2018-15000: Undefined Security Weakness
The Vivo V7 Android device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user/release-keys contains a platform app with a package name of com.vivo.smartshot versionCode=1, versionName=3.0.0. This app contains an exported service named...
Adware-Ridden Apps in Google Play Infect 30 Million Android Users
More than 50 malicious apps have been discovered on the Google Play app marketplace, peddling adware to millions of Android victims. The 50 adware apps, which have been since removed, include fitness, photoshopping and gaming apps, and were installed a total of 30 million times, researchers at...
Memory Corruption Vulnerability in dp2 Project File of Xinjie OP20 Screen Setting Tool
Wuxi Xinjie Electric Co., Ltd. is a well-known domestic enterprise focusing on the research, development and application of industrial automation products. A memory corruption vulnerability exists in the dp2 project file of the Xinjie OP20 screen setup tool, which can be exploited by attackers to...
CVE-2016-1584
In all versions of Unity8 a running but not active application on a large-screen device could talk with Maliit and consume keyboard input...
Input validation
In all versions of Unity8 a running but not active application on a large-screen device could talk with Maliit and consume keyboard input...
CVE-2016-1584 Unity8 converged application lifecycle allows background applications to use on-screen keyboard when not top-most
In all versions of Unity8 a running but not active application on a large-screen device could talk with Maliit and consume keyboard input...
CVE-2016-1584: Undefined Security Weakness
In all versions of Unity8 a running but not active application on a large-screen device could talk with Maliit and consume keyboard input...
CVE-2019-11015
A vulnerability was found in the MIUI OS version 10.1.3.0 that allows a physically proximate attacker to bypass Lockscreen based authentication via the Wallpaper Carousel application to obtain sensitive Clipboard data and the user's stored credentials partially. This occurs because of paste acces...
[SECURITY] Fedora 30 Update: gnome-control-center-3.32.1-2.fc30
This package contains configuration utilities for the GNOME desktop, which allow to configure accessibility options, desktop fonts, keyboard and mouse properties, sound setup, desktop theme and background, user interface properties, screen resolution, and other settings...
Security Advisory - Information Disclosure Vulnerability on Smartphones
There is an information disclosure vulnerability on certain Huawei smartphones. An attacker could view the photos after a series of operation without unlock the screen lock. Successful exploit could cause an information disclosure condition. Vulnerability ID: HWPSIRT-2019-01143 This vulnerability...
Sophisticated 'TajMahal APT Framework' Remained Undetected for 5 Years
Cybersecurity researchers yesterday unveiled the existence of a highly sophisticated spyware framework that has been in operation for at least last 5 years—but remained undetected until recently. DubbedTajMahal by researchers at Kaspersky Lab, the APT framework is a high-tech modular-based malwar...
Meet ‘TajMahal,’ A New and Highly Advanced APT Framework
SINGAPORE – Researchers at Kaspersky Lab have discovered a new, highly sophisticated advanced persistent threat APT framework targeting a single Central Asian diplomatic agency. Malware samples associated with the APT reveal a complex never-before-seen code base, making it extremely hard to detec...
April 9, 2019—KB4493509 (OS Build 17763.437)
None None...
CVE-2018-4430
A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1...
CVE-2018-4430
A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1...
CVE-2018-4387
A lock screen issue allowed access to photos via Reply With Message on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1...