CVE-2024-6364

A vulnerability in Absolute Persistence® versions before 2.8 exists when it is not activated. This may allow a skilled attacker with both physical access to the device, and full hostile network control, to initiate OS commands on the device. To remediate this vulnerability, update the device...

CVE-2024-6364 Server Identity Validation Bypass in Absolute Persistence®

A vulnerability in Absolute Persistence® versions before 2.8 exists when it is not activated. This may allow a skilled attacker with both physical access to the device, and full hostile network control, to initiate OS commands on the device. To remediate this vulnerability, update the device...

Microsoft Windows Codecs Library RCE (January 2022)

The Windows 'HEVC Video Extensions' or 'HEVC from Device Manufacturer' app installed on the remote host is affected by a remote code execution vulnerability. An attacker who successfully exploited the vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a...

Android patches for 4 in-the-wild bugs are out, but when will you get them?

In the Android Security Bulletin of May 2021, published at the beginning of this month, you can find a list of roughly 40 vulnerabilities in several components that might concern Android users. According to info provided by Googles Project Zero team, four of those Android security vulnerabilities...

Microsoft Windows Codecs Library Multiple Vulnerabilities (January 2021)

The Windows 'HEVC Video Extensions' or 'HEVC from Device Manufacturer' app installed on the remote host is affected by multiple remote code execution vulnerabilities: - A remote code execution vulnerability exists in the Microsoft Windows Codecs Library HEVC Extension. An attacker who successfull...

Microsoft Windows Codecs Library RCE (October 2020)

The Windows 'HEVC Video Extensions' or 'HEVC from Device Manufacturer' app installed on the remote host is affected by a remote code execution vulnerability : - A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who...

Microsoft Windows Codecs Library Multiple Vulnerabilities (June 2020)

The Windows 'HEVC Video Extensions' or 'HEVC from Device Manufacturer' app installed on the remote host is affected by two code execution vulnerabilities. An authenticated, local attacker can exploit either of these vulnerabilities to bypass additional authentication and execute arbitrary command...

Android vulnerability detection kit-vulnerability warning-the black bar safety net

Android Vulnerability Test Suite Android vulnerability detection kit, to encourage the open to collect data, help communities work together to maintain Android security. NowSecure has brought an App to check your Android device in the presence of vulnerabilities. ! Overview This tool is meant to ...

Clear iSpot/Clearspot 2.0.0.0 - CSRF Vulnerabilities

No description provided by source. Trustwave's SpiderLabs Security Advisory TWSL2010-008: Clear iSpot/Clearspot CSRF Vulnerabilities https://www.trustwave.com/spiderlabs/advisories/TWSL2010-008.txt Published: 2010-12-10 Version: 1.0 Vendor: Clear http://www.clear.com http://www.clear.com/ Product...

Clear iSpot/Clearspot 2.0.0.0 - Cross-Site Request Forgery

Trustwave's SpiderLabs Security Advisory TWSL2010-008: Clear iSpot/Clearspot CSRF Vulnerabilities https://www.trustwave.com/spiderlabs/advisories/TWSL2010-008.txt Published: 2010-12-10 Version: 1.0 Vendor: Clear http://www.clear.com Products: iSpot / ClearSpot 4G http://www.clear.com/devices...