CVE-2022-44553

CVE-2022-44553 affects the HiView module in HarmonyOS. Root cause: the HiView module does not filter third‑party apps when invoking the system provider, enabling potential abuse. Impact: successful exploitation may cause third‑party apps to start periodically. CVSSv3.1 base score 5.3 (I: Low, A: ...

CVE-2022-44549

CVE-2022-44549 concerns Huawei HarmonyOS’ LBS module, specifically a vulnerability in the geofencing API access. The issue allows third‑party apps to access geofencing APIs without authorization, compromising user confidentiality. The NVD and related entries show a CVSS v3.1 base score of 7.5 (HI...

Mobile app usage soars but security still falls short

Benchmark analysis of mobile apps shows 99% have security or privacy vulnerabilities. These weaknesses can cause exposure of sensitive information and jeopardize brand reputation, customer trust and company value...

CVE-2022-27855

Cross-Site Request Forgery CSRF vulnerability in Fatcat Apps Analytics Cat plugin = 1.0.9 on WordPress allows Plugin Settings Change...

CVE-2022-27855

Cross-Site Request Forgery CSRF vulnerability in Fatcat Apps Analytics Cat plugin = 1.0.9 on WordPress allows Plugin Settings Change...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Fatcat Apps Analytics Cat plugin = 1.0.9 on WordPress allows Plugin Settings Change...

CVE-2022-27855

The CVE-2022-27855 CSRF vulnerability affects the Fatcat Apps Analytics Cat plugin for WordPress (versions ≤ 1.0.9). The issue allows an attacker to change plugin settings due to CSRF, enabling unintended configuration changes. Reported root cause is a cross-site request forgery flaw in plugin se...

Description of the security update for Office Web Apps Server 2013: November 8, 2022 (KB5002261)

None None...

Microsoft Office 安全漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A security vulnerability exists in Microsoft Office. The following products and editions are...

Security Updates for Microsoft Office Web Apps (November 2022)

The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-41060, CVE-2022-41103 ...

PT-2022-5641 · Microsoft · 365 Apps For Enterprise +2

Name of the Vulnerable Software and Affected Versions: Microsoft 365 Apps for Enterprise versions affected versions not specified Microsoft Office versions affected versions not specified Microsoft Excel versions affected versions not specified Description: The issue is related to a lack of...

PT-2022-5518

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft SharePoint affected versions not specified Microsoft Excel affected versions not specified Microsoft Office Web Apps...

PT-2022-5639 · Microsoft · 365 Apps For Enterprise +2

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to errors in security settings, allowing an...

PT-2022-5647

Name of the Vulnerable Software and Affected Versions Microsoft 365 Apps for Enterprise versions affected versions not specified Microsoft Excel versions affected versions not specified Microsoft Office versions affected versions not specified Description The issue exists due to insufficient inpu...

PT-2022-5519 · Microsoft · Sharepoint Server +5

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft SharePoint affected versions not specified Microsoft Excel affected versions not specified Microsoft Office Web Apps...

These Android Apps with a Million Play Store Installations Redirect Users to Malicious Sites

A set of four Android apps released by the same developer has been discovered directing victims to malicious websites as part of an adware and information-stealing campaign. The apps, published by a developer named Mobile apps Group and currently available on the Play Store, have been collectivel...

CVE-2022-32913

The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, watchOS 9, macOS Monterey 12.6, tvOS 16. A sandboxed app may be able to determine which app is currently using the camera...

How Decentralized Apps Shaping the Future of the Internet

By Daily Contributors The internet has drastically changed the way we interact with the world. We can now connect with people… This is a post from HackRead.com Read the original post: How Decentralized Apps Shaping the Future of the Internet...

Malware on the Google Play store leads to harmful phishing sites

A family of malicious apps from developer Mobile apps Group are listed on Google Play and infected with Android/Trojan.HiddenAds.BTGTHB. In total, four apps are listed, and together they have amassed at least one million downloads. Older versions of these apps have been detected in the past as...

ASB-A-210065877

In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way to bypass user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...