Samsung mobile security vulnerabilities

SAMSUNG mobile is a cell phone from Samsung South Korea. A security vulnerability exists in SAMSUNG mobile prior to SMR-Dec-2024 Release 1, which originates from the use of an alternate path to bypass authentication and allow a physical attacker to temporarily access the recent applications list...

Samsung mobile security vulnerabilities

SAMSUNG mobile is a cell phone from Samsung South Korea. A security vulnerability exists in SAMSUNG mobile prior to SMR-Dec-2024 Release 1, which arises from improper validation of cryptographic signatures and allows a local attacker to install malicious applications...

SAP NetWeaver Java Application Server Auth Bypass Information Disclosure

The vulnerability of SAP NetWeaver Java Application Server web applications is related to the incorrect use of standard permissions. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...

Fake Betting Apps Using AI-Generated Voices to Sensitive Data

Group-IB has discovered that cybercriminals are using fake betting apps and ads with AI-generated voices to steal personal information and money. Discover the tactics used by scammers and how to avoid falling victim to these fraudulent schemes...

OESA-2024-2485 openjdk-latest security update

The OpenJDK runtime environment. Security Fixes: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows...

Malware in k8s-apps-wordpress

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-11048 Malicious code in k8s-apps-wordpress (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40a470c4b317b1c3a7ca0ef77aa42d47d230d8b4d2cfe94f870ae1232c927327 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-11145

Valor Apps Easy Folder Listing Pro has a deserialization vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code with the privileges of the Joomla! application. Fixed in versions 3.8 and 4.5...

CVE-2024-11145

Valor Apps Easy Folder Listing Pro has a deserialization vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code with the privileges of the Joomla! application. Fixed in versions 3.8 and 4.5...

CVE-2024-11145 Easy Folder Listing Pro deserialization vulnerability

Valor Apps Easy Folder Listing Pro has a deserialization vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code with the privileges of the Joomla! application. Fixed in versions 3.8 and 4.5...

PT-2024-16787

Name of the Vulnerable Software and Affected Versions Valor Apps Easy Folder Listing Pro versions prior to 3.8 and 4.5 Description The issue is a deserialization vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code with the privileges of the Joomla! application...

Valor Apps Easy Folder Listing Pro has security vulnerabilities

Valor Apps Easy Folder Listing Pro is a flexible, easy-to-use extension from Valor Apps for listing the contents of any folder. A security vulnerability exists in Valor Apps Easy Folder Listing Pro versions prior to 4.5, which stems from the presence of a deserialization vulnerability that allows...

CVE-2024-11145: Deserialization of Untrusted Data

Valor Apps Easy Folder Listing Pro has a deserialization vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code with the privileges of the Joomla! application. Fixed in versions 3.8 and 4.5...

PT-2024-8866 · Microsoft · Dynamics 365 Sales

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 Sales versions prior to 3.24104.15 Description: The issue concerns a spoofing vulnerability in Microsoft Dynamics 365 Sales. This vulnerability may allow a remote attacker to perform a spoofing attack by not taking...

PT-2024-10061

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 133 Thunderbird versions prior to 133 Description The issue is related to incorrect restriction of visualized user interface layers in Mozilla Firefox and Thunderbird on Android operating systems. This could allow a...

Zoom Apps for macOS < 6.1.5 Informatioon Disclosure (ZSB-24039)

The version of Zoom Workplace Desktop App for macOS installed on the remote host is prior to 6.1.5. It is, therefore, affected by an informatioon disclosure vulnerability as referenced in the ZSB-24039 advisory: - Uncontrolled resource consumption in the installer for some Zoom apps for macOS...

Meta takes down more than 2 million accounts in fight against pig butchering

Meta provided insight this week into the company's efforts in taking down more than 2 million accounts that were connected to pig butchering scams on their owned platforms, Facebook and Instagram. Pig butchering scams are big business, with hundreds of millions of dollars involved every year. The...

Citrix Virtual Apps and Desktops Session Recording Code Execution

The vulnerability of the Session Recording component of the software for virtualizing and delivering Citrix Virtual Apps and Desktops formerly XenApp and XenDesktop is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to elevate their privileges and...

Session Recording Code Execution

The vulnerability of the Session Recording software component for Citrix Virtual Apps and Desktops formerly XenApp and XenDesktop is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...