EUVD-2020-27377

Malware in sbrugna...

CVE-2020-9244

HUAWEI Mate 20 versions Versions earlier than 10.1.0.160C00E160R3P8;HUAWEI Mate 20 Pro versions Versions earlier than 10.1.0.270C431E7R1P5,Versions earlier than 10.1.0.270C635E3R1P5,Versions earlier than 10.1.0.273C636E7R2P4;HUAWEI Mate 20 X versions Versions earlier than...

Honor NTH-AN00 Data Forgery Issue Vulnerability

The Honor NTH-AN00 Honor 50 is a smartphone from the Chinese company Honor. The Honor NTH-AN00 suffers from a security vulnerability that stems from a signature management vulnerability, successful exploitation of which could result in a forged system file overwriting a correct system file...

Honor Magic Ui Data Forgery Issue Vulnerability

Honor Magic Ui is an Android-based mobile operating system developed by Chinese company Honor. A security vulnerability exists in Honor Magic Ui, which stems from a signature management vulnerability that can be successfully exploited to cause a forged system file to overwrite a correct system fi...

Improper Password Signature Verification Vulnerability in Multiple Siemens Products

Siemens SINEMA Remote Connect is a suite of remote network management platforms from Siemens, Germany.SIMIT Simluation Platform allows simulation of plant setups in order to predict failures at an early planning stage.SINEC INS is a web-based application that combines various network services in...

PT-2018-14725 · Go Gitea · Gogs

Name of the Vulnerable Software and Affected Versions: Gogs version 0.11.66 Description: The issue allows remote code execution due to improper validation of session IDs. This can be exploited through a ".." session-file forgery in the file session provider, specifically in the file.go file. The...

CVE-2018-18925: Session Fixation

Gogs 0.11.66 allows remote code execution because it does not properly validate session IDs, as demonstrated by a ".." session-file forgery in the file session provider in file.go. This is related to session ID handling in the go-macaron/session code for Macaron...

Apache jUDDI Security Bypass Vulnerability

Apache jUDDI is the United States Apache Apache Software Foundation of a Java-based , open source follow the UDDI standard application . A security vulnerability exists in versions of Apache jUDDI prior to 2.0. An attacker can exploit the vulnerability to forge entries in log files...

Malware Using White Lists, Forgery, Kernel Attacks To Stay Alive

BARCELONA — Rootkit programs are increasingly mimicking anti virus programs: adopting self protection features and even application whitelists to maintain control over the systems they control, according to a presentation at the annual Virus Bulletin Conference. Rachit Mathur, a research scientis...