5 matches found
CVE-2016-20056
CVE-2016-20056 affects Spy Emergency build 23.0.205. An unquoted service path exists in the SpyEmrgHealth and SpyEmrgSrv services, enabling local privilege escalation by placing malicious executables in the service path. Triggering a service restart or system reboot would execute code with LocalS...
PT-2026-3299
Spy Emergency 25.0.650 contains an unquoted service path vulnerability in its Windows service configurations that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted file paths in SpyEmergencyHealth.exe and SpyEmergencySrv.exe to inject malicious co...
ASB-A-256819769
In multiple functions of PhoneAccountRegistrar.java, there is a possible way to prevent an access to emergency services due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
Ukraine's DELTA Military System Users Under Attack from Info Stealing Malware
The Computer Emergency Response Team of Ukraine CERT-UA this week disclosed that users of the Delta situational awareness program received phishing emails from a compromised email account belonging to the Ministry of Defense. The attacks, which have been attributed to a threat cluster dubbed...
Aussie govt emergency service hacked to send fake warning alerts
By Waqas A hacker managed to infiltrate Australian emergency warning system Early Warning Network EWN. The hacker accessed the system and sent countless messages to random citizens informing them that “you’ve been hacked.” However, the warning service’s managing director Kerry Plowright claims th...