1905 matches found
Samsung mobile 日志信息泄露漏洞
Samsung Find My Mobile is an application to find a cell phone by the South Korean company Samsung Samsung. An information disclosure vulnerability exists in Samsung Find My Mobile prior to version 7.2.24.12, FmmExtraOperation. A local attacker with log access could exploit the vulnerability to...
The vulnerability in the implementation of the vim_strncpy find_word() function in the Vim text editor allows a hacker to cause a service failure or execute arbitrary code.
The vulnerability of the vimstrncpy findword function in the Vim text editor is related to the execution of the operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a system failure or execute arbitrary code by loading a specially...
Better Find and Replace < 1.3.6 - Admin+ SQLi
The plugin does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection...
How iPhones can run malware even when they’re off
Most people think that turning off their iPhone - or letting the battery die - means that the phone is, well, off. The thing is, this isnt quite true. In reality, most of the phones functionality has ended, but there are components that mindlessly continue a zombie-like existence, for the most pa...
Your iPhone Is Vulnerable to a Malware Attack Even When It’s Off
Researchers found a way to exploit the tech that enables Apple’s Find My feature, which could allow attackers to track location when a device is powered down...
AirTag stalking: What is it, and how can I avoid it?
More voices are being raised against the use of everyday technology repurposed to attack and stalk people. Most recently, its reported that Ohio has proposed a new bill in relation to electronic tagging devices. The bill, aimed at making short work of a loophole allowing people with no stalking o...
Heap buffer overflow in vim_strncpy find_word in vim/vim
...
Buffer Over-read in function find_next_quote in vim/vim
...
Attackers can Install Malware on iPhone When it is Powered Off – Research
By Deeba Ahmed The iOS Find My feature has a safety loophole that can lead to infecting the iPhone even if… This is a post from HackRead.com Read the original post: Attackers can Install Malware on iPhone When it is Powered Off - Research...
Researchers Find Potential Way to Run Malware on iPhone Even When it's OFF
A first-of-its-kind security analysis of iOS Find My function has identified a novel attack surface that makes it possible to tamper with the firmware and load malware onto a Bluetooth chip that's executed while an iPhone is "off." The mechanism takes advantage of the fact that wireless chips...
GHSA-CCMR-QJ26-845G Improper Restriction of XML External Entity Reference in Elasticsearch
Elasticsearch Security versions 6.5.0 and 6.5.1 contain an XXE flaw in Machine Learning's findfilestructure API. If a policy allowing external network access has been added to Elasticsearch's Java Security Manager then an attacker could send a specially crafted request capable of leaking content ...
DEBIAN-CVE-2022-1629
Buffer Over-read in function findnextquote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution...
ALPINE-CVE-2022-1629
Buffer Over-read in function findnextquote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution...
UBUNTU-CVE-2022-1629
Buffer Over-read in function findnextquote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution...
ntfs-3g: Out-of-bounds reads in ntfs_attr_find() and ntfs_external_attr_find()
The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS image, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...
Vim 缓冲区错误漏洞
Vim is a cross-platform text editor. A security vulnerability exists in versions prior to Vim 8.2.4925 that stems from a buffer over-read in the findnextquote function, which can lead to a software crash, memory modification, and remote execution...
Vim 缓冲区错误漏洞
Vim is a cross-platform text editor. A security vulnerability exists in Vim prior to version 8.2.4919, which stems from a vimstrncpy findword heap buffer overflow, which can cause software crashes, bypass protection mechanisms, modify memory, and remote execution...
What Are Dark Web Search Engines and How to Find Them?
By Waqas Let’s take a closer look at what a dark web search engine is, how to find them and… This is a post from HackRead.com Read the original post: What Are Dark Web Search Engines and How to Find Them?...
WordPress Better Find and Replace plugin <= 1.3.4 - SQL Injection (SQLi) vulnerability
SQL Injection SQLi vulnerability discovered in WordPress Better Find and Replace plugin versions = 1.3.4. Solution Update the WordPress Better Find and Replace plugin to the latest available version at least 1.3.5...
Sourcecodester Baby Care System SQL注入漏洞
Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability, which originates from the lack of validation of external input SQL statements in the find= parameter of...