Overview of Top Mobile Security Threats in 2022

Your smartphone is your daily companion. The chances are that most of our activities rely on them, from ordering food to booking medical appointments. However, the threat landscape always reminds us how vulnerable smartphones can be. Consider the recent discovery by Oversecured, a security startu...

Pea pod app has janus vulnerability

PeaPod is a download marketplace that provides green and safe apps and games. A janus vulnerability exists in the Pea Pod app, which can be exploited by an attacker to gain control of the server...

Microsoft SharePoint Server Operational Data Access

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, Microsoft Office Web Apps Server, and Microsoft Office Online Server relates to insufficient protection of operational data. Exploitation of this vulnerability can allow attackers to gain unauthorized access...

CVE-2022-1740

The tested version of Dominion Voting Systems ImageCast X’s on-screen application hash display feature, audit log export, and application export functionality rely on self-attestation mechanisms. An attacker could leverage this vulnerability to disguise malicious applications on a device...

Google Warns Spyware Being Deployed Against Android, iOS Users

Google is warning victims in Kazakhstan and Italy that they are being targeted by Hermit, a sophisticated and modular spyware from Italian vendor RCS Labs that not only can steal data but also record and make calls. Researchers from Google Threat Analysis Group TAG revealed details in a blog post...

Malicious Package

Overview @tide-web-apps/global-environments is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerabl...

CVE-2021-26637

CVE-2021-26637 affects SiHAS SGW-300, ACM-300, and GCM-300 firmware/apps, due to missing account authentication and permission checks. This enables unauthorized users to remotely control the device over the network; no specific exploit details are provided in the documents. PT-2022-9785 reiterate...

MAL-2022-746 Malicious code in @xvideos/apps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dc1d32a11b195ccd2b9793e68f33bccf46835e1b15a5d8c26b4bd8aac4c00c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vk-apps-contacts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b58fcc6f00c1b0623c2788c26e2df81d24da0288671c83ac3dee63c9ca9affb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6949 Malicious code in vk-apps-contacts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b58fcc6f00c1b0623c2788c26e2df81d24da0288671c83ac3dee63c9ca9affb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3189 Malicious code in free-robux-apps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3101a743a664c12689dcdd4fcb6b87a03ad3039cb2a5bcf3753fce3bb529c72d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in free-robux-apps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3101a743a664c12689dcdd4fcb6b87a03ad3039cb2a5bcf3753fce3bb529c72d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-apps/edge-lambdas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fac603a15d0ab913153cc8c0364ba23ad7ed7b353172ee00e0876c3fecdbfee3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1071 Malicious code in apps-showcase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c82f48875c33cf0dc7ce3363a53872dd7ee778927e9083715b9d88b29be083b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apps-showcase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c82f48875c33cf0dc7ce3363a53872dd7ee778927e9083715b9d88b29be083b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Microsoft Office Code Execution

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Excel Office Web Apps Server Code Execution

The vulnerability of Microsoft Excel and Microsoft Office Web Apps Server packages is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2022-32151

The httplib and urllib Python libraries that Splunk shipped with Splunk Enterprise did not validate certificates using the certificate authority CA certificate stores by default in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203. Python 3 client libraries...

CVE-2022-20193

In getUniqueUsagesWithLabels of PermissionUsageHelper.java, there is a possible incorrect permission attribution due to a logic error in the code. This could lead to local escalation of privilege by conflating apps with User execution privileges needed. User interaction is needed for...

CVE-2022-20138

In ACTIONMANAGEDPROFILEPROVISIONED of DevicePolicyManagerService.java, there is a possible way for unprivileged app to send MANAGEDPROFILEPROVISIONED intent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...