The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to exploit it to disclose protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the rcar_drif_g_fmt_sdr_cap function (drivers/media/platform/rcar_drif.c) in the Linux kernel allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the rcardrifgfmtsdrcap function drivers/media/platform/rcardrif.c in the Linux kernel is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of applications for synchronizing HiSuite devices and HwBackup backup functions, related to the lack of protection for service data, allows attackers to gain unauthorized access to information about the user’s Huawei mobile phone backup.

The vulnerability of applications for syncing devices with HiSuite and the HwBackup backup feature is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information about the user’s Huawei mobile phone backup,...

The vulnerability of the Web interface of the Cisco Unified Communications Manager allows a perpetrator to execute arbitrary SQL queries.

The vulnerability of the Cisco Unified Communications Manager web interface relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

The vulnerability of Adobe Connect’s instant messaging program lies in the lack of protection for service data, which allows attackers to disclose protected information.

The vulnerability of the Adobe Connect instant messaging program is related to the lack of protection for administrative data. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...

CVE-2013-4763

Samsung Galaxy S3/S4 exposes an unprotected component allowing arbitrary SMS text messages without requesting permission...

CVE-2013-4764

Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbitrary destinations without permission...

Code injection

Samsung Galaxy S3/S4 exposes an unprotected component allowing arbitrary SMS text messages without requesting permission...

CVE-2013-4763

CVE-2013-4763 affects Samsung Galaxy S3/S4 and involves a pre-loaded component (sCloudBackupProvider.apk) that exposes unprotected components. An unprivileged app can trigger a restore operation to write arbitrary SMS messages to the system SMS database (mmssms.db) via these components, enabling ...

CVE-2013-4763

Samsung Galaxy S3/S4 exposes an unprotected component allowing arbitrary SMS text messages without requesting permission...

The vulnerability of the McAfee Advanced Threat Defense software lies in the lack of protection for operational data, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the McAfee Advanced Threat Defense security tool lies in the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

The vulnerability of Windows and Linux operating systems, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of Windows and Linux operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created application...

The vulnerability of the Blink component in Google Chrome browser allows a hacker to disclose protected information.

The vulnerability of the Blink component in Google Chrome relates to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose protected information through a specially created HTML page...

New privacy tool exposes which website leaves your data unprotected

By Sudais The new privacy tool will inform you if the site you are visiting expose your data or not. Here's how it's done... This is a post from HackRead.com Read the original post: New privacy tool exposes which website leaves your data unprotected...

The vulnerability in the implementation of the WebRTC technology in Google Chrome browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially created fi...

The vulnerability of the Jackson-databind library, related to the lack of protection for service data, allows attackers to read arbitrary files on the server.

The vulnerability of the Jackson-databind library is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to read arbitrary files on the server by sending a specially crafted JSON message...

The vulnerability of the EJB container component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the EJB container of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information v...

CVE-2019-18980

On Signify Philips Taolight Smart Wi-Fi Wiz Connected LED Bulb 9290022656 devices, an unprotected API lets remote users control the bulb's operation. Anyone can turn the bulb on or off, or change its color or brightness remotely. There is no authentication or encryption to use the control API. Th...

CVE-2019-18980

On Signify Philips Taolight Smart Wi-Fi Wiz Connected LED Bulb 9290022656 devices, an unprotected API lets remote users control the bulb's operation. Anyone can turn the bulb on or off, or change its color or brightness remotely. There is no authentication or encryption to use the control API. Th...

CVE-2019-3640

Unprotected Transport of Credentials in ePO extension in McAfee Data Loss Prevention 11.x prior to 11.4.0 allows remote attackers with access to the network to collect login details to the LDAP server via the ePO extension not using a secure connection when testing LDAP connectivity...