7030 matches found
New Sneaky Xamalicious Android Malware Hits Over 327,000 Devices
A new Android backdoor has been discovered with potent capabilities to carry out a range of malicious actions on infected devices. Dubbed Xamalicious by the McAfee Mobile Research Team, the malware is so named for the fact that it's developed using an open-source mobile app framework called Xamar...
Endpoint Managment - How to add local apps to Android dedicated device home screen.
How to add local apps to Android-dedicated device home screen...
Flatpak: Multiple Vulnerabilities
Background Flatpak is a Linux application sandboxing and distribution framework. Description Multiple vulnerabilities have been discovered in Flatpak. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There ...
Debian DSA-5583-1 : gst-plugins-bad1.0 - security update
The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5583 advisory. A buffer overflow was discovered in the AV1 video plugin for the GStreamer media framework, which may result in denial of service or potentially the execution of arbitrary...
CVE-2023-49749
CVE-2023-49749: CSRF in WordPress plugin SureTriggers (versions
org.wso2.identity.apps:org.wso2.identity.apps.authentication.portal.server.feature (>=0.1.125 <=1.6.179) potentially affected by CVE-2023-6837 via org.wso2.identity.apps:authentication-portal (>=0.1.125 <=1.6.179)
org.wso2.identity.apps:authentication-portal MAVEN version =0.1.125, =0.1.125, =1.6.179 Source cves: CVE-2023-6837 Source advisory: OSV:GHSA-F6JM-9PR8-9C3W...
Microsoft Security Update Validation Report December 2023
Microsoft’s December 2023 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwa...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in the insufficient protection of sensitive data, allowing attackers to gain unauthorized access to protected information.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by opening a specially create...
CVE-2023-45894
The Remote Application Server in Parallels RAS before 19.2.23975 does not segment virtualized applications from the server, which allows a remote attacker to achieve remote code execution via standard kiosk breakout techniques...
Threat actors misuse OAuth applications to automate financially driven attacks
Threat actors are misusing OAuth applications as an automation tool in financially motivated attacks. OAuth is an open standard for token-based authentication and authorization that enables applications to get access to data and resources based on permissions set by a user. Threat actors compromi...
New MrAnon Stealer Malware Targeting German Users via Booking-Themed Scam
A phishing campaign has been observed delivering an information stealer malware called MrAnon Stealer to unsuspecting victims via seemingly benign booking-themed PDF lures. "This malware is a Python-based information stealer compressed with cx-Freeze to evade detection," Fortinet FortiGuard Labs...
CVE-2023-40446
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. Processing maliciously crafted input may lead to arbitrary code execution in user-installed apps...
Microsoft Power Platform Connector Security Vulnerability
The Microsoft Power Platform Connector is a proxy or wrapper for an API from Microsoft Corporation USA. A security vulnerability exists in Microsoft Power Platform Connector. An attacker could exploit this vulnerability to conduct spoofing attacks. The following products and versions are affected...
Microsoft Outlook Security Vulnerability
Microsoft Outlook is a suite of e-mail applications from Microsoft Corporation USA. A security vulnerability exists in Microsoft Office Outlook. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and editions are affected:Microsoft Office...
SpyLoan Scandal: 18 Malicious Loan Apps Defraud Millions of Android Users
Cybersecurity researchers have discovered 18 malicious loan apps for Android on the Google Play Store that have been collectively downloaded over 12 million times. "Despite their attractive appearance, these services are in fact designed to defraud users by offering them high-interest-rate loans...
Apple macOS Sonoma Security Vulnerability
Apple macOS Sonoma is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma version 14.2, which arises from the handling of maliciously crafted files that could result in the unexpected termination of an application or arbitrary cod...
Police Can Spy on Your iOS and Android Push Notifications
Governments can access records related to push notifications from mobile apps by requesting that data from Apple and Google, according to details in court records and a US senator...
CVE-2023-33071
Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities...
