516 matches found
Malicious code in @dp-bpsc-tiktok/ogc-analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 392d2ec573af02b972bc2bb4fd5b33b1c1f6bd8a2962744ed929259effae7c82 The OpenSSF Package Analysis project identified '@dp-bpsc-tiktok/ogc-analytics' @ 1.0.0 npm as malicious. It is considered malicious because: -...
CVE-2024-45240
The TikTok aka com.zhiliaoapp.musically application before 34.5.5 for Android allows the takeover of Lynxview JavaScript interfaces via deeplink traversal in the application's exposed WebView. On Android 12 and later, this is only exploitable by third-party applications...
CVE-2024-45240
The vulnerability CVE-2024-45240 affects the TikTok Android app (com.zhiliaoapp.musically) up to version 34.5.5. It allows takeover of Lynxview JavaScript interfaces via deeplink traversal through the app’s exposed WebView. On Android 12 and later, exploitation is limited to third-party applicati...
CVE-2024-45240
The TikTok aka com.zhiliaoapp.musically application before 34.5.5 for Android allows the takeover of Lynxview JavaScript interfaces via deeplink traversal in the application's exposed WebView. On Android 12 and later, this is only exploitable by third-party applications...
CVE-2024-45240
The TikTok aka com.zhiliaoapp.musically application before 34.5.5 for Android allows the takeover of Lynxview JavaScript interfaces via deeplink traversal in the application's exposed WebView. On Android 12 and later, this is only exploitable by third-party applications...
TikTok 安全漏洞
Bytedance TikTok Jieyin International Version is an application for creating and sharing short videos by Chinese company Bytedance. A security vulnerability exists in TikTok versions prior to 34.5.5 that stems from allowing traversal of the Lynxview JavaScript interface via deep links...
Malicious code in tiktok-session-lite-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d743d2be81de51fd6992aaa1749e06583b3d36698e80bbd08466b2af022feeeb Collects basic information about the system, most probably a pentest or bug bounty. --- Category: PROBABLYPENTEST - Packages looking like typical pentest...
MAL-2024-12364 Malicious code in tiktok-session-lite-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d743d2be81de51fd6992aaa1749e06583b3d36698e80bbd08466b2af022feeeb Collects basic information about the system, most probably a pentest or bug bounty. --- Category: PROBABLYPENTEST - Packages looking like typical pentest...
DoJ and FTC Sue TikTok for Violating Children's Privacy Laws
The U.S. Department of Justice DoJ, along with the Federal Trade Commission FTC, filed a lawsuit against popular video-sharing platform TikTok for "flagrantly violating" children's privacy laws in the country. The agencies claimed the company knowingly permitted children to create TikTok accounts...
New Android Spyware Steals Data from Gamers and TikTok Users
Transparent Tribe Expands Android Spyware Arsenal: Gamers, Weapons Fans, and TikTok Users Targeted!...
TikTok: DOM XSS in tiktok.com/login via the redirect_url parameter
A DOM Cross-Site Scripting XSS vulnerability was found in the redirecturl parameter on the tiktok.com/login page. The vulnerability was reported and confirmed to be resolved...
CapraRAT Spyware Disguised as Popular Apps Threatens Android Users
The threat actor known as Transparent Tribe has continued to unleash malware-laced Android apps as part of a social engineering campaign to target individuals of interest. "These APKs continue the group's trend of embedding spyware into curated video browsing applications, with a new expansion...
The Problem the US TikTok Crackdown and Kaspersky Ban Have in Common
While Kaspersky and TikTok make very different kinds of software, the US has targeted both over national security concerns. But the looming bans have larger implications for internet freedom...
A week in security (June 24 – June 30)
Last week on Malwarebytes Labs: TEMU sued for being "dangerous malware" by Arkansas Attorney General Driving licences and other official documents leaked by authentication service used by Uber, TikTok, X, and more "Poseidon" Mac stealer distributed via Google ads Federal Reserve "breached" data m...
MAL-2024-3272 Malicious code in updated-tiktok-followers-generator-2023-mfxswe_ahk-dvr (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in updated-tiktok-followers-generator-2023-mfxswe_ahk-dvr (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3271 Malicious code in updated-tiktok-followers-generator-2023-mfxswe_ahk-dvd (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in updated-tiktok-followers-generator-2023-mfxswe_ahk-dvd (npm)
--- -= Per source details. Do not edit below this line.=-...