Apple iOS webkit memory corruption vulnerability (CNVD-2017-05602)

Apple iOS is an operating system for Apple smart devices. A memory corruption vulnerability exists in Webkit used by Apple iOS, which allows attackers to exploit the vulnerability to build malicious web pages that can be clicked on by users, which can crash the application or execute arbitrary co...

CVE-2017-0584

An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10,...

CVE-2017-0562

An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require...

CVE-2017-0454

An elevation of privilege vulnerability in the Qualcomm audio driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

The vulnerabilities of the Microsoft Office Web Apps package, the Microsoft Office Compatibility Pack, the Microsoft Word text editor, the Microsoft SharePoint Server corporate application, and certain Microsoft Office programs allow a perpetrator to cause service interruptions or execute arbitrary code.

The vulnerabilities of the Microsoft Office Web Apps, the Microsoft Office Compatibility Pack, the Microsoft Word text editor, the Microsoft SharePoint Server corporate application, and the Microsoft Office suite are caused by an operation that goes beyond the buffer boundaries in memory...

The vulnerability of Microsoft Excel, a software in the Microsoft Office Web Apps suite, allows a malicious actor to trigger a service failure or execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors and the Microsoft Office Web Apps is due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption by...

Huawei Files Plaintext Storage Password Vulnerability

Huawei Files is a file management APP software on cell phones from Huawei China. A plaintext storage password vulnerability exists in Huawei Files 7.1.0.308 and earlier versions. An attacker can read the plaintext password information of a user's confidential cabinet by spoofing the related...

How to Configure Citrix Profile Management

The primary intent of this article is to provide steps on how to configure Citrix Profile management for the first timeassuming that Virtual Apps and Desktops/Citrix Cloud environment is already configured. Introduction Profile management ensures that the user’s personal settings are applied to t...

Google just discovered a dangerous Android Spyware that went undetected for 3 Years

An Android version of one of the most sophisticated mobile spyware has been discovered that remained undetected for at least three years due to its smart self-destruction capabilities. Dubbed Chrysaor, the Android spyware has been used in targeted attacks against activists and journalists mostly ...

CVE-2017-2490

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause...

Verizon to pre-install a 'Spyware' app on its Android phones to collect user data

If the death of online privacy rules wasn't enough for Internet Service Providers and advertisers to celebrate, Verizon has planned to pre-install spyware on customers' Android devices in order to collect their personal data. The telecom giant has partnered with Evie Launcher to bring a new...

Deploying enterprise MDX enabled apps from App Store via Volume Purchase

The CEM/XenMobile Server is currently optimized for Volume Purchase distribution of Public App Store apps that are not MDX enabled. While it is possible to distribute MDX enabled apps from App Store via volume purchase, some considerations must be taken into account for optimal performance. This...

CVE-2015-0863

GALAXY Apps aka Samsung Apps, Samsung Updates, or com.sec.android.app.samsungapps before 14120405.03.012 allows man-in-the-middle attackers to obtain sensitive information and execute arbitrary code...

Code injection

GALAXY Apps aka Samsung Apps, Samsung Updates, or com.sec.android.app.samsungapps before 14120405.03.012 allows man-in-the-middle attackers to obtain sensitive information and execute arbitrary code...

CVE-2015-0863

GALAXY Apps aka Samsung Apps, Samsung Updates, or com.sec.android.app.samsungapps before 14120405.03.012 allows man-in-the-middle attackers to obtain sensitive information and execute arbitrary code...

CVE-2015-0863

CVE-2015-0863 concerns Samsung GALAXY Apps (aka Samsung Apps, Samsung Updates, or com.sec.android.app.samsungapps). Multiple sources confirm a vulnerability in versions before 14120405.03.012 that enables man‑in‑the‑middle (MITM) attacks to both obtain sensitive information and execute arbitrary ...

Android WiFi Denial of Service Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A denial of service vulnerability exists in Android WiFi. The vulnerability arises due to the system-level Intent mechanism "com.android.server.WifiManager.action.DEVICEIDLE" in...

Android Dialog Denial of Service Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A denial of service vulnerability exists in the Android system dialog. The vulnerability is caused by the system-level Intent mechanism "android.intent.action.CLOSESYSTEMDIALOGS" in...

Android Auto Dialer Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. There is a security vulnerability in Android Auto Dialer. The vulnerability arises because the system-level Intent mechanism "android.intent.action.CALL" defined in...

Android Emergency Dialing Initiation Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability exists in Android's emergency dialing activation feature. The vulnerability is caused by the system-level Intent mechanism...