CVE-2022-34551: Improper Limitation of a Pathname to a Restricted Directory

Sims v1.0 was discovered to allow path traversal when downloading attachments...

The NSA and FBI Expose Fancy Bear's Sneaky Hacking Tool

Plus: TikTok tracking, Russian SIMs, and more of this week's top security news...

SIM Cards in 29 Countries Vulnerable to Remote Simjacker Attacks

Until now, I'm sure you all might have heard of the SimJacker vulnerability disclosed exactly a month ago that affects a wide range of SIM cards and can remotely be exploited to hack into any mobile phone just by sending a specially crafted binary SMS. If you are unaware, the name "SimJacker" has...

The Sims™ 4 Gallery - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application The Sims™ 4 Gallery published at the 'play' market has multiple vulnerabilities...

Launch Day App The Sims 4 - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Launch Day App The Sims 4 published at the 'play' market has multiple vulnerabilities...

LG Game Pad: The Sims FreePlay - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application LG Game Pad: The Sims FreePlay published at the 'play' market has multiple vulnerabilities...

newsletter.sims-magazin.de XSS vulnerability

Open Bug Bounty ID: OBB-57429 Description| Value ---|--- Affected Website:| newsletter.sims-magazin.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventi...

Facebook Game - The Sims Social Detected (deprecated)

Binary data 6390.prm...

GE Intelligent Platforms Proficy Historian Data Archiver Buffer Overflow Vulnerability

Overview ICS-CERT originally released Advisory ICSA-11-243-03P on the US-CERT secure Portal on August 31, 2011. This web page release was delayed to allow users time to download and install the update. ICS-CERT received a report from GE Intelligent Platforms and the Zero Day Initiative concerning...

CVE-2000-0164

Sun Internet Mail Server (SIMS) installations create a world-readable file that allows local users to obtain passwords. Affected: SIMS. Issue: world-writable or world-readable file exposure leading to complete confidentiality impact for local users. Root cause and exact file/path are not specifie...

CVE-2000-0164: Undefined Security Weakness

The installation of Sun Internet Mail Server SIMS creates a world-readable file that allows local users to obtain passwords...

sims-sds.txt

Date: Fri, 25 Dec 1998 19:51:56 PST From: Dana Jones Reply-To: Bugtraq List To: [email protected] Subject: Vulnerability SIMS 3.x Sun Internet Mail Server and SDS 1.x & 3.1 Sun LDAP Directory services vulnerability. /var/opt/SUNWconn/ldap/log/slapd.log is used to log ldap connects/operations. ...