350 matches found
CVE-2022-26147
CVE-2022-26147 affects the Quectel RG502Q-EA modem. The issue is OS command injection arising from the OTA download process, allowing an attacker to execute arbitrary commands with root privileges on the device. The public descriptions consistently note the vulnerability exists before 2022-02-23....
CVE-2022-26147
The Quectel RG502Q-EA modem before 2022-02-23 allow OS Command Injection...
CVE-2022-26147: Improper Neutralization of Special Elements used in an OS Command
The Quectel RG502Q-EA modem before 2022-02-23 allow OS Command Injection...
Quectel RG502Q-EA 操作系统命令注入漏洞
The Quectel RG502Q-EA is a 5G Sub-6 GHz LGA module from China Mobile Communications Quectel optimized for IoT and M2M applications. The Quectel RG502Q-EA suffers from a security vulnerability that stems from a security issue in the way the OTA download process operates, which can be exploited by ...
Malicious code in mock-ea-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d913b2fd6105fcbc7d3b383008930640e91dfe852de474a79c618e6aa1962d8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ea-factories (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05d4e364be0cc8e615b27e0a04d2c1e4aa7798dee444377feadbc7313b0d698e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ea-test-helpers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89163a7bdbf2f6e653e9dd91720264a796f81282412739eeb5070368696e1f68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ea-reference-data-reader (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b1df94f349ca2de08769e8ca17d6fb5dc0392f05cddfc38645de666a34b1b94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2644 Malicious code in ea-factories (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05d4e364be0cc8e615b27e0a04d2c1e4aa7798dee444377feadbc7313b0d698e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2645 Malicious code in ea-reference-data-reader (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b1df94f349ca2de08769e8ca17d6fb5dc0392f05cddfc38645de666a34b1b94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2646 Malicious code in ea-test-helpers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89163a7bdbf2f6e653e9dd91720264a796f81282412739eeb5070368696e1f68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
FIFA 22 phishers tackle customer support with social engineering
Players of smash hit gaming title FIFA 22 have become the target of a wave of attacks focused on account compromise. Up to 50 “high profile” accounts were hijacked by what may have been the same group. FIFA games are, traditionally, a big draw for scammers and phishers. Many sports titles offer...
Phishers Rip Off High-Profile EA Gamers
Electronic Arts EA has attributed a recent series of takeovers of high-profile accounts of FIFA Ultimate Team players to “human error” within its customer experience team, some of whom apparently fell prey to a socially engineered phishing attack. After a number of top traders of FIFA’s Ultimate...
java-11-openjdk security update
1:11.0.13.0.8-1 - Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz2012333 1:11.0.13.0.7-0.1.ea - Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Update...
java-1.8.0-openjdk security and bug fix update
1:1.8.0.312.b07-1 - Update to aarch64-shenandoah-jdk8u312-b07 EA - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz2011826 1:1.8.0.312.b05-0.4.ea - Allow plain key import to be disabled with...
java-1.8.0-openjdk security and bug fix update
1:1.8.0.312.b07-1 - Update to aarch64-shenandoah-jdk8u312-b07 EA - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz2011826 1:1.8.0.312.b05-0.3.ea - Add patch to improve performance of common separato...
libiff buffer overflow vulnerability
libiff is a portable and extensible parser library for EA-IFF 85 implemented in ANSI C. A global buffer overflow vulnerability exists in the IFFerrorId function in error.c in libiff 20190123 and earlier versions. An attacker could exploit this vulnerability to execute code...
java-1.8.0-openjdk security update
1:1.8.0.302.b08-0 - Update to aarch64-shenandoah-jdk8u302-b08 EA - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz1972395 1:1.8.0.302.b07-0.0.ea - Update to aarch64-shenandoah-jdk8u302-b07 EA - Upda...
A week in security (June 7 – June 13)
Last week on Malwarebytes Labs: Amazon SIdewalk starts sharing your WiFi data tomorrow, thanks White hat, black hat, grey hat hackers: what’s the difference? Can two VPN “wrongs” make a right? Lock and Code S02E10 DOJ recovers pipeline ransom, signals more aggressive approach to cybercrime 800...
