CVE-2024-34652

Incorrect authorization in kperfmon prior to SMR Sep-2024 Release 1 allows local attackers to access information related to performance including app usage...

EUVD-2021-25976

Malware in sbrugna...

EUVD-2021-12401

Malware in sbrugna...

EUVD-2023-47078

Malicious code in bioql PyPI...

EUVD-2023-47103

Malicious code in bioql PyPI...

EUVD-2023-47171

Malicious code in bioql PyPI...

What does Facebook know about me? (Lock and Code S06E11)

This week on the Lock and Code podcast … There's an easy way to find out what Facebook knows about you—you just have to ask. In 2020, the social media giant launched an online portal that allows all users to access their historical data and to request specific types of information for download...

CVE-2021-39619

In updatePackageMappingsData of UsageStatsService.java, there is a possible way to bypass security and privacy settings of app usage due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

1 in 10 people do nothing to stay secure and private on vacation

This year, Spring Break vacationers are packing more than their flip-flops, bucket hats, and sunglasses—they’re also packing a few cybersecurity anxieties for the trip. According to new research from Malwarebytes, 52% of people said they “worry about being scammed while traveling,” while another...

Pairwise Authentication of Humans

Here's an easy system for two humans to remotely authenticate to each other, so they can be sure that neither are digital impersonations. To mitigate that risk, I have developed this simple solution where you can setup a unique time-based one-time passcode TOTP between any pair of persons. This i...

CVE-2024-34652

Incorrect authorization in kperfmon prior to SMR Sep-2024 Release 1 allows local attackers to access information related to performance including app usage...

CVE-2024-34652

Incorrect authorization in kperfmon prior to SMR Sep-2024 Release 1 allows local attackers to access information related to performance including app usage...

PT-2024-26072 · Kperfmon · Kperfmon

Name of the Vulnerable Software and Affected Versions: kperfmon versions prior to SMR Sep-2024 Release 1 Description: The issue is related to incorrect authorization in kperfmon, allowing local attackers to access information related to performance, including app usage. Recommendations: For...

All users can reset the allowed apps list for Guest App users

None...

CVE-2023-42709

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-42701

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

PT-2023-28519 · Unknown · Omacp Service

Name of the Vulnerable Software and Affected Versions: omacp service affected versions not specified Description: The issue is related to a missing permission check in the omacp service, which could allow writing permission usage records of an app. This may lead to local information disclosure...

PT-2023-28528 · Unknown · Firewall Service

Name of the Vulnerable Software and Affected Versions: Firewall service affected versions not specified Description: The issue is related to a missing permission check in the firewall service, which could allow writing permission usage records of an app. This might lead to local information...

PT-2023-28532 · Unisoc (Shanghai) Technologies Co. +1 · Sc7731E/Sc9832E/Sc9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: Firewall service affected versions not specified Description: The issue is related to a missing permission check in the firewall service, which could allow writing permission usage records of an app. This may lead to local information...

PT-2023-28492 · Unknown · Imsservice

Name of the Vulnerable Software and Affected Versions: imsservice affected versions not specified Description: The issue is related to a missing permission check in imsservice, allowing potential local information disclosure without requiring additional execution privileges. This could lead to...