59580 matches found
Malicious code in hackbron (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e583544fc400279671a5c9455e40671ab934ff7a923c364db2efda4aa29259f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2018-9432
In createPhonebookDialogView and createMapDialogView of BluetoothPermissionActivity.java, there is a possible permissions bypass. This could lead to local escalation of privilege due to hiding and bypassing the user's ability to disable access to contacts, with no additional execution privileges...
Malicious code in preact-cli-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b97d147bbe2f906512da2cfa2de62ecc0c18b2afd14ceb1dfd755122300ea57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in easy-transify (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis da33e7bf1f97126745cda88021b8ac2884cd095a84a70caaf6938bb505f3f5df The OpenSSF Package Analysis project identified 'easy-transify' @ 7.2.3 npm as malicious. It is considered malicious because: - The package...
CVE-2024-34674
Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across multiple user profiles...
CVE-2024-34674
Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across multiple user profiles...
CVE-2024-34674
Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across multiple user profiles...
CVE-2024-34674
CVE-2024-34674 affects Samsung Mobile Contacts prior to SMR Nov-2024 Release 1, with an improper access control flaw that could allow a physical attacker to access data across multiple user profiles. The NVD entry cites a CVSSv3.1 base score of 4.6 (MEDIUM) with high confidentiality impact. Publi...
CVE-2024-34674
Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across multiple user profiles...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Nov-2024 Release 1 prior to version 1, which stems from Contacts contains an improper...
Malicious code in bytesip (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e2991197ed35fecd1cd6b875cde845773ed34ed5c51f1392f237ad8c9d6cb37e A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
About the security content of macOS Sequoia 15.1
About the security content of macOS Sequoia 15.1 This document describes the security content of macOS Sequoia 15.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...
PT-2024-41823
Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.1 Description A permissions issue allowed an application to access Contacts without user consent. This was addressed with additional restrictions. Recommendations Update to macOS version 15.1 or later...
CVE-2024-45932
Krayin CRM v1.3.0 is vulnerable to Cross Site Scripting XSS via the organization name field in /admin/contacts/organizations/edit/2...
How can you protect your data, privacy, and finances if your phone gets lost or stolen?
Steps to take when your device is lost or stolen TL;DR This is a guide to help prepare for a situation where your mobile device is lost or stolen, including where it is stolen in an unlocked state. The post covers: Creating good habits in your digital life. Using available features to secure your...
CVE-2024-46745
In the Linux kernel, the following vulnerability has been resolved: Input: uinput - reject requests with unreasonable number of slots When exercising uinput interface syzkaller may try setting up device with a really large number of slots, which causes memory allocation failure in inputmtinitslot...
CVE-2024-46745
CVE-2024-46745 affects the Linux kernel uinput interface. The root cause is an unbounded request for slots via syzkaller, causing memory allocation failure in input_mt_init_slots. The fix limits the allowed number of slots to 100 (extendable if devices require more). Consequences described in the...
CVE-2024-46745 Input: uinput - reject requests with unreasonable number of slots
In the Linux kernel, the following vulnerability has been resolved: Input: uinput - reject requests with unreasonable number of slots When exercising uinput interface syzkaller may try setting up device with a really large number of slots, which causes memory allocation failure in inputmtinitslot...