PT-2021-16557 · Samsung · Secure Folder

Name of the Vulnerable Software and Affected Versions: Secure Folder versions prior to SMR APR-2021 Release 1 Description: A pendingIntent hijacking issue allows unprivileged applications to access contact information. Recommendations: For versions prior to SMR APR-2021 Release 1, update to SMR...

Azure File Sync Agent v11.3 Release – April 2021 (KB4539953)

Update for Azure File Sync agent version 11.3.0.0. For more details, see the associated Microsoft Knowledge Base article...

CVE-2021-30161

An issue was discovered on LG mobile devices with Android OS 11 software. Attackers can bypass the lockscreen protection mechanism after an incoming call has been terminated. The LG ID is LVE-SMP-210002 April 2021...

CVE-2021-30161

An issue was discovered on LG mobile devices with Android OS 11 software. Attackers can bypass the lockscreen protection mechanism after an incoming call has been terminated. The LG ID is LVE-SMP-210002 April 2021...

Node.js -- April 2021 Security Releases

Node.js reports: OpenSSL - CA certificate check bypass with X509VFLAGX509STRICT High CVE-2021-3450 This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20210325.txt OpenSSL - NULL pointer deref in...

Android Automotive OS Update Bulletin—April 2021Stay organized with collectionsSave and categorize content based on your preferences.

The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2021-04-01 or later from the April 2021 Android Security Bulletin in addition to all issues in this...

Pixel Update Bulletin—April 2021Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2021-04-05 or later address all issues in this bulletin and all issues in the April 2021 Android Securi...

Threat Roundup for March 26 to April 2

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between March 26 and April 2. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral...

Threat Source Newsletter (April 1, 2021)

Newsletter compiled by Jon Munshaw. Good afternoon, Talos readers. We hope you’re enjoying Cisco Live this week and only reading this after you’ve caught up on your sessions for the day. No April Fool’s jokes here thankfully — we are just excited to tell you that applications... This is only the...

CVE-2021-26855

creationtimestamp| type| source ---|---|--- 2021-03-03 02:44:45+00:00| seen| https://t.me/cibsecurity/24377 2021-03-03 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=556 2021-03-03 06:30:17+00:00| seen| MISP/76591c3b-efb3-4084-a644-87a6cca8c784 2021-03-07 19:26:18+00:00|...

Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime affect IBM Cognos Command Center

Summary There are vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 8 that is used by IBM Cognos Command Center. These issues were disclosed as part of the IBM Java SDK update for April 2020 and July 2020. Vulnerability Details CVEID: CVE-2020-2781 DESCRIPTION: An...

QuadMenu < 2.0.7 - Unauthenticated RCE via compiler_save

The compilersave AJAX action, available to both authenticated and unauthenticated users did not check the extension of the imported file, and had the nonce used for CSRF check displayed in the homepage. This could allow unauthenticated users to create an arbitrary PHP file on the blog, leading to...

CVE-2021-20066

creationtimestamp| type| source ---|---|--- 2021-02-16 22:48:16+00:00| seen| https://t.me/cibsecurity/23683 2025-04-09 12:29:59+00:00| seen| codeclarity.io - https://github.com/CodeClarityCE/frontend...

CVE-2021-25646

creationtimestamp| type| source ---|---|--- 2021-02-05 23:22:52+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/5128 2021-02-06 07:37:08+00:00| published-proof-of-concept| https://t.me/cKure/3868 2021-02-09 12:30:57+00:00| published-proof-of-concept| https://t.me/reconshell/428...

Cleaning up after Emotet: the law enforcement file

This blog post was authored by Hasherezade and Jérôme Segura Emotet has been the most wanted malware for several years. The large botnet is responsible for sending millions of spam emails laced with malicious attachments. The once banking Trojan turned into loader was responsible for costly...

Advanced Custom Field Pro < 5.9.1 - Reflected Cross-Site Scripting (XSS)

The plugin did not properly escape the generated update URL when outputting it in an attribute, leading to a reflected Cross-Site Scripting issue in the update settings page. PoC The PoC will be displayed on April 16, 2021, to give users the time to update...

CVE-2021-3129

creationtimestamp| type| source ---|---|--- 2021-01-12 18:52:35+00:00| seen| https://t.me/cibsecurity/21947 2021-01-23 14:27:59+00:00| published-proof-of-concept| Telegram/V0JRptGFrgnQJ2SXhKrSjD8wR0dUer2UmfcxEmcwlwjBg 2021-01-24 14:36:01+00:00| seen| https://t.me/CyberSecurityTechnologies/2562...

CVE-2020-10148

creationtimestamp| type| source ---|---|--- 2020-12-28 10:40:02+00:00| exploited| https://t.me/SecLabNews/9489 2020-12-28 14:17:56+00:00| seen| https://t.me/truesecator/1296 2020-12-30 14:26:54+00:00| published-proof-of-concept| https://t.me/canyoupwnme/6698 2020-12-31 18:23:59+00:00| exploited|...

CVE-2020-4463

creationtimestamp| type| source ---|---|--- 2020-12-08 11:03:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2248 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-02-01 00:00:00+00:00| seen| The Shadowserver...

CVE-2020-13942

creationtimestamp| type| source ---|---|--- 2020-11-23 03:53:17+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2119 2020-11-23 09:45:55+00:00| published-proof-of-concept| https://t.me/cKure/2943 2020-11-24 20:46:57+00:00| seen| https://t.me/cibsecurity/16796 2023-11-22...