7035 matches found
Apple macOS Sonoma Security Vulnerability
Apple macOS Sonoma is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma version 14.2, which arises from the handling of maliciously crafted files that could result in the unexpected termination of an application or arbitrary cod...
Police Can Spy on Your iOS and Android Push Notifications
Governments can access records related to push notifications from mobile apps by requesting that data from Apple and Google, according to details in court records and a US senator...
CVE-2023-33071
Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities...
CVE-2023-33071
Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities...
Memory corruption
Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities...
CVE-2023-33071
CVE-2023-33071 affects Automotive OS where memory corruption occurs when untrusted applications access HAb for graphics functionalities. The incident is described across multiple feeds (NVD, Red Hat, CVE lists, and vendor summaries) as a memory corruption vulnerability in the Automotive OS graphi...
CVE-2023-42677
In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
200+ Malicious Android Apps Targeting Iranian Banks: Experts Warn
An Android malware campaign targeting Iranian banks has expanded its capabilities and incorporated additional evasion tactics to fly under the radar. That's according to a new report from Zimperium, which discovered more than 200 malicious apps associated with the malicious operation, with the...
Super Progressive Web Apps < 2.2.22 - Missing Authorization
Description The Super Progressive Web Apps plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the superpwanewslettersubmit function hooked via a nopriv AJAX action in versions up to, and including, 2.2.21. This makes it possible for...
Study Finds Amazon, eBay and Afterpay as Top Android User Data Collectors
By Deeba Ahmed Amazon and eBay have been declared the highest data-collecting platforms among all the Android shopping apps researchers examined. This is a post from HackRead.com Read the original post: Study Finds Amazon, eBay and Afterpay as Top Android User Data Collectors...
apps-barcelona.com Improper Access Control vulnerability OBB-3793112
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-6235
An uncontrolled search path element vulnerability has been found in the Duet Display product, affecting version 2.5.9.1. An attacker could place an arbitrary libusk.dll file in the C:\Users\user\AppData\Local\Microsoft\WindowsApps\ directory, which could lead to the execution and persistence of...
Top 5 Best Telegram Client Apps for Android
By Owais Sultan Ranked and described the functionality of the top 5 best Telegram client applications for Android. Telegram messenger is… This is a post from HackRead.com Read the original post: Top 5 Best Telegram Client Apps for Android...
Malicious Apps Disguised as Banks and Government Agencies Targeting Indian Android Users
Android smartphone users in India are the target of a new malware campaign that employs social engineering lures to install fraudulent apps that are capable of harvesting sensitive data. "Using social media platforms like WhatsApp and Telegram, attackers are sending messages designed to lure user...
Social engineering attacks lure Indian users to install Android banking trojans
Microsoft has observed ongoing activity from mobile banking trojan campaigns targeting users in India with social media messages designed to steal users’ information for financial fraud. Using social media platforms like WhatsApp and Telegram, attackers are sending messages designed to lure users...
Social engineering attacks lure Indian users to install Android banking trojans
Microsoft has observed ongoing activity from mobile banking trojan campaigns targeting users in India with social media messages designed to steal users’ information for financial fraud. Using social media platforms like WhatsApp and Telegram, attackers are sending messages designed to lure users...
Duet Display Security Vulnerability
Duet Display is a remote desktop application. A security vulnerability exists in Duet Display version 2.5.9.1 that stems from the presence of an uncontrolled search path element vulnerability. An attacker can place an arbitrary libusk.dll file in the C:UsersuserAppDataLocalMicrosoftWindowsApps...
CVE-2023-6045
in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through type confusion...