1913 matches found
Beware! This Android Trojan Stole Millions of Dollars from Over 10 Million Users
A newly discovered "aggressive" mobile campaign has infected north of 10 million users from over 70 countries via seemingly innocuous Android apps that subscribe the individuals to premium services costing €36 $42 per month without their knowledge. Zimperium zLabs dubbed the malicious trojan...
The vulnerability of the Smart Email Alerts WordPress plugin lies in its lack of protection for website structures, allowing attackers to inject arbitrary web scripts.
The vulnerability of the /views/settings.php file in the Smart Email Alerts WordPress plugin exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web scripts remotely...
Macs turn on apps signed by Symantec, treat them as malware
On August 23, following an update to Apples security systems on macOS, some Mac users began to see security alerts about some of their apps, claiming that they "will damage your computer," and offering users the option to "report malware to Apple." This has led to much confusion online, and to an...
CVE-2021-35221
Improper Access Control Tampering Vulnerability using ImportAlert function which can lead to a Remote Code Execution RCE from the Alerts Settings page...
CVE-2021-35221
Improper Access Control Tampering Vulnerability using ImportAlert function which can lead to a Remote Code Execution RCE from the Alerts Settings page...
CVE-2021-35222
This vulnerability allows attackers to impersonate users and perform arbitrary actions leading to a Remote Code Execution RCE from the Alerts Settings page...
Improper access control
Improper Access Control Tampering Vulnerability using ImportAlert function which can lead to a Remote Code Execution RCE from the Alerts Settings page...
Remote code execution
This vulnerability allows attackers to impersonate users and perform arbitrary actions leading to a Remote Code Execution RCE from the Alerts Settings page...
CVE-2021-35222
This vulnerability allows attackers to impersonate users and perform arbitrary actions leading to a Remote Code Execution RCE from the Alerts Settings page...
CVE-2021-35219
ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability using ImportAlert function within the Alerts Settings page...
CVE-2021-35219
ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability using ImportAlert function within the Alerts Settings page...
CVE-2021-35220
Command Injection vulnerability in EmailWebPage API which can lead to a Remote Code Execution RCE from the Alerts Settings page...
CVE-2021-35220
Command Injection vulnerability in EmailWebPage API which can lead to a Remote Code Execution RCE from the Alerts Settings page...
Information disclosure
ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability using ImportAlert function within the Alerts Settings page...
Command injection
Command Injection vulnerability in EmailWebPage API which can lead to a Remote Code Execution RCE from the Alerts Settings page...
CVE-2021-35220
Command Injection vulnerability in EmailWebPage API which can lead to a Remote Code Execution RCE from the Alerts Settings page...
CVE-2021-35219
ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability using ImportAlert function within the Alerts Settings page...
CVE-2021-35222
CVE-2021-35222 affects SolarWinds Orion Platform; the vulnerability is described as enabling attackers to impersonate users and perform arbitrary actions resulting in Remote Code Execution (RCE) from the Alerts Settings page. The connected documents corroborate the RCE/Risk association for this C...
CVE-2021-35222 Resource.aspx Reflected Cross-Site Scripting Vulnerability
This vulnerability allows attackers to impersonate users and perform arbitrary actions leading to a Remote Code Execution RCE from the Alerts Settings page...