7024 matches found
The vulnerability of Microsoft Office, Microsoft Excel, and Microsoft Office Web Apps Server packages arises from improper code generation management, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office, Microsoft Excel, and Microsoft Office Web Apps Server packages is related to improper code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
iOS Kids Game Morphs into Underground Crypto Casino
A kids’ game called “Jungle Run” that, until recently, was available in the Apple App store, was secretly a cryptocurrency-funded casino set up to scam people out of money. Join experts from Digital Shadows Austin Merritt, Malwarebytes Adam Kujawa and Sift Kevin Lee to find out how cybercrime...
1-click code execution vulnerabilities in popular software apps
By Deeba Ahmed These 1-click vulnerabilities in various popular software applications can let an attacker execute arbitrary code on targeted devices. This is a post from HackRead.com Read the original post: 1-click code execution vulnerabilities in popular software apps...
JVN#54025691: Gurunavi Apps fail to restrict access permissions
Gurunavi Apps provided by Gurunavi, Inc. implement the function to access a requested URL using Custom URL Scheme. This function contains an improper access control vulnerability CWE-284 that may allow the vulnerable App to receive an request from an arbitrary App and execute an access. Impact A...
Security Updates for Microsoft Office Online Server and Microsoft Office Web Apps (April 2021)
The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability exists. An unauthenticated, local attacker can exploit this to bypass authentication and execute unauthorized...
CVE-2021-27605
SAP's HCM Travel Management Fiori Apps V2, version - 608, does not perform proper authorization check, allowing an authenticated but unauthorized attacker to read personnel numbers of employees, resulting in escalation of privileges. However, the attacker can only read some information like last...
CVE-2021-27605
Summary: CVE-2021-27605 affects SAP HCM Travel Management Fiori Apps V2 (608). The issue is an improper authorization check that permits an authenticated but unauthorized user to read personnel numbers, enabling privilege escalation. The attacker can access limited personnel data (last name, firs...
Security Update for Microsoft Office Web Apps Server 2013 (KB4504729) farm-deployment
A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Microsoft Office Web Apps Server 2013 (KB4504729)
A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Description of the security update for SharePoint Server 2010 Office Web Apps: April 13, 2021 (KB4504705)
Description of the security update for SharePoint Server 2010 Office Web Apps: April 13, 2021 KB4504705 Summary This security update resolves a Microsoft Word remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures...
Description of the security update for Office Web Apps Server 2013: April 13, 2021 (KB4504729)
None None...
BRATA Malware Poses as Android Security Scanners on Google Play Store
A new set of malicious Android apps have been caught posing as app security scanners on the official Play Store to distribute a backdoor capable of gathering sensitive information. "These malicious apps urge users to update Chrome, WhatsApp, or a PDF reader, yet instead of updating the app in...
PT-2021-2624 · Microsoft · Office Web Apps Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to errors in code generation management in Microsoft Office packages, including Microsoft Excel and Microsoft Office Web Apps Server. Exploitation of this issue...
PT-2021-2579 · Microsoft · 365 Apps For Enterprise +2
Name of the Vulnerable Software and Affected Versions: Microsoft Outlook affected versions not specified Description: The issue is related to a memory corruption vulnerability in Microsoft Outlook, which can be exploited by a remote attacker to execute arbitrary code. This vulnerability is also...
Hackers Tampered With APKPure Store to Distribute Malware Apps
APKPure, one of the largest alternative app stores outside of the Google Play Store, was infected with malware this week, allowing threat actors to distribute Trojans to Android devices. In a supply-chain attack similar to that of German telecommunications equipment manufacturer Gigaset, the...
CVE-2021-25365
An improper exception control in softsimd prior to SMR APR-2021 Release 1 allows unprivileged applications to access the API in softsimd...
CVE-2021-25358
A vulnerability that stores IMSI values in an improper path prior to SMR APR-2021 Release 1 allows local attackers to access IMSI values without any permission via untrusted applications...
CVE-2021-25356
An improper caller check vulnerability in Managed Provisioning prior to SMR APR-2021 Release 1 allows unprivileged application to install arbitrary application, grant device admin permission and then delete several installed application...
CVE-2021-25357
A pendingIntent hijacking vulnerability in Create Movie prior to SMR APR-2021 Release 1 in Android O8.x and P9.0, 3.4.81.1 in Android Q10,0, and 3.6.80.7 in Android R11.0 allows unprivileged applications to access contact information...