KLA12199 Multiple vulnerabilities in Microsoft Apps

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Paint 3D can be exploited remotely to execute...

Microsoft Office 代码注入漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code injection vulnerability exists in Microsoft Office. The following products and edition...

Security Updates for Microsoft Office Web Apps (June 2021)

The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-31939 %NASLMINLEVEL 70300 C...

Bad Apple: App Store Rife with Fraud, Fleeceware

A new analysis from the Washington Post reveals just how widespread fraud is across the Apple App Store, while also offering glimpse into the revenue flowing into Cupertino generated by those malicious activities. The Apple App Store has been under heightened scrutiny for maintaining its iron gri...

HealthForYou 1.11.1 / HealthCoach 2.9.2 User Enumeration Vulnerability

User enumeration through API Overview Advisory ID: TRSA-2104-01 Advisory version: 1.0 Advisory status: Public Advisory URL: https://trovent.io/security-advisory-2104-01 Affected product: HealthForYou & Sanitas HealthCoach mobile and web applications Tested versions: HealthForYou 1.11.1...

CVE-2021-22308

There is a Business Logic Errors vulnerability in Huawei Smartphone. The malicious apps installed on the device can keep taking screenshots in the background. This issue does not cause system errors, but may cause personal information leakage...

Design/Logic Flaw

There is a Business Logic Errors vulnerability in Huawei Smartphone. The malicious apps installed on the device can keep taking screenshots in the background. This issue does not cause system errors, but may cause personal information leakage...

CVE-2021-22308

There is a Business Logic Errors vulnerability in Huawei Smartphone. The malicious apps installed on the device can keep taking screenshots in the background. This issue does not cause system errors, but may cause personal information leakage...

CVE-2021-22308

CVE-2021-22308 affects Huawei EMUI/Magic UI on Huawei smartphones, involving a business logic error that allows malicious apps to continuously capture screenshots in the background, potentially leaking personal information. The reports describe the vulnerability as a local issue with low official...

CVE-2021-22308

There is a Business Logic Errors vulnerability in Huawei Smartphone. The malicious apps installed on the device can keep taking screenshots in the background. This issue does not cause system errors, but may cause personal information leakage...

FreePBX 13.x <= 13.0.93.2, 14.x <= 14.0.22.2, 15.x <= 15.0.19.2 RCE Vulnerability

FreePBX is prone to a remote code execution RCE vulnerability. NOTE: This VT is reporting a false positive and therefore has been deprecated. The vulnerability exists in the Restapps / Phone apps module and not in the core framework itself. SPDX-FileCopyrightText: 2021 Greenbone AG Some text...

How Mobile Ad Fraud has Evolved in the Year of the Pandemic

The past 18 months have arguably been the most turbulent on record for the mobile industry. The majority of the world spent significant portions of 2020 under some kind of lockdown, with pressure mounting on mobile operators to keep us connected to the outside world, and with each other. This...

CVE-2020-10666

The Restapps (Rest Phone apps) module in Sangoma FreePBX and PBXact (versions 13–15 up to 15.0.19.2) is vulnerable to remote code execution via a URL variable to an AMI command. Root cause is a flaw in Restapps’ handling of AMI commands that allows injection. Impact per sources is high (remote, n...

Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2020-4996)

Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to security vulnerability. The vulnerability concerns sensitive data leakage via screenshots in ISAR Apps. Vulnerability Details CVEID: CVE-2020-4996 DESCRIPTION: IBM Security Access Manager...

The vulnerability of Microsoft Office packages and Microsoft Office Web Apps arises from the possibility of writing operations beyond the buffer in memory, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of Microsoft Office packages and Microsoft Office Web Apps is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of Microsoft Office packages and Microsoft Office Web Apps arises from improper code generation management, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and Microsoft Office Web Apps is related to improper code generation during the processing of COM objects. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malware file or a specially crafted...

VPN Android apps: What you should know

Months ago, we told readers about the importance of using a VPN on their iPhones, and while those lessons do apply to Android devices—a VPN for Android will encrypt your Android’s web activity and app traffic, and it will stop your mobile carrier from monetizing your data—Android users should...

The vulnerability of Microsoft Office Web Apps Server, Microsoft Office, Office Online Server, and Microsoft Excel stems from improper code generation management, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Office Web Apps Server, Microsoft Office, Office Online Server, and Microsoft Excel is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of Microsoft Office packages and Microsoft Office Web Apps lies in the lack of protection for sensitive data, allowing attackers to disclose protected information.

The vulnerability of Microsoft Office packages and Microsoft Office Web Apps is related to the lack of protection for sensitive data. Exploiting this vulnerability can allow attackers to disclose protected information...

Digital Transformation Usain Bolt-Style: Health Care's Sprint to Modernization

Instead of picking up their phone to schedule a doctor's visit, ring an insurance provider, or call the pharmacy, a patient's first step to getting care is now often the use of an app on their smartphone. There are new ways to order prescriptions, conduct appointments, seek care, and share health...