1287 matches found
CVE-2022-30754
Implicit Intent hijacking vulnerability in AppLinker prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of AppLinker...
Information disclosure
Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of Finder...
Input validation
Improper input validation vulnerability in BillingPackageInsraller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege...
Input validation
Improper validation vulnerability in ucmRetParcelable of KnoxSDK prior to SMR Jul-2022 Release 1 allows attackers to launch certain activities...
SAMSUNG Mobile devices KnoxSDK 输入验证错误漏洞
Samsung KnoxSDK is an open source Android platform-based security solution from Samsung Samsung in South Korea that can enhance security across the board through a combination of physical means and software systems, while being perfectly compatible with the Android and Google ecosystems, bringing...
CVE-2022-33704
Improper validation vulnerability in ucmRetParcelable of KnoxSDK prior to SMR Jul-2022 Release 1 allows attackers to launch certain activities...
The Age of Collaborative Security: What Tens of Thousands of Machines Witness
Disclaimer: This article is meant to give insight into cyber threats as seen by the community of users of CrowdSec. What can tens of thousands of machines tell us about illegal hacker activities? Do you remember that scene in Batman - The Dark Knight, where Batman uses a system that aggregates...
CVE-2022-27549
HCL Launch may store certain data for recurring activities in a plain text format...
Format string
HCL Launch may store certain data for recurring activities in a plain text format...
[Security Nation] Pete Cooper and Irene Pontisso on the Results of the UK Government’s Security Culture Challenge
!\Security Nation\ Pete Cooper and Irene Pontisso on the Results of the UK Government’s Security Culture Challengehttps://blog.rapid7.com/content/images/2022/07/securitynationlogo.jpg In this episode of Security Nation, Jen and Tod are joined again by Pete Cooper and Irene Pontisso of the UK...
PT-2022-18480 · Hcl · Hcl Launch
Name of the Vulnerable Software and Affected Versions: HCL Launch affected versions not specified Description: The issue concerns the storage of certain data for recurring activities in a plain text format. Recommendations: At the moment, there is no information about a newer version that contain...
CVE-2022-27549
HCL Launch may store certain data for recurring activities in a plain text format...
Prison Management System SQL Injection Vulnerability (CNVD-2022-48400)
Prison Management System is a prison management system from Carlo Montero's personal developer. prison Management System v1.0 is vulnerable to SQL injection, which originates in the application /pms/admin/crimes/viewcrime.php in the id parameter in /pms/admin/crimes/viewcrime.php is missing the S...
Improving AI-based defenses to disrupt human-operated ransomware
Microsoft’s deep understanding of human-operated ransomware attacks, which are powered by a thriving cybercrime gig economy, continuously informs the solutions we deliver to protect customers. Our expert monitoring of threat actors, investigations into real-world ransomware attacks, and the...
Malicious code in youtrack-activities-widget (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb5490d08d9035fd8fee12c13180f7cdfdc4ddad2ad819f01feaf3e6623e1067 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7361 Malicious code in youtrack-activities-widget (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb5490d08d9035fd8fee12c13180f7cdfdc4ddad2ad819f01feaf3e6623e1067 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Samsung KfaOptions Elevation of Privilege Vulnerability
Samsung KfaOptions is a system component of Samsung mobile devices.An elevation of privilege vulnerability exists in Samsung KfaOptions, which stems from a lack of proper authentication logic in KfaOptions. An attacker could use this vulnerability to launch certain activities...
HelloXD Ransomware Installing Backdoor on Targeted Windows and Linux Systems
Windows and Linux systems are being targeted by a ransomware variant called HelloXD, with the infections also involving the deployment of a backdoor to facilitate persistent remote access to infected hosts. "Unlike other ransomware groups, this ransomware family doesn't have an active leak site;...