246 matches found
Tizen bluetooth-frwk 授权问题漏洞
The Samsung Galaxy Gear Series Tizen is a smartwatch from South Korean company Samsung Samsung. The Tizen bluetooth-frwk suffers from a security vulnerability that allows a bluetooth attacker to exploit the vulnerability to take over a user's bluetooth device without the user being aware of it...
Samsung Gear S2 安全漏洞
Samsung Gear S2 is a smartwatch from Samsung South Korea. A security vulnerability exists in the Gear S Plugin version 2.2.05.20122441, which allows untrusted applications to access information about connected BT devices...
Samsung Galaxy Gear Series Tizen 输入验证错误漏洞
Samsung Galaxy Gear Series Tizen is a smartwatch from Samsung South Korea. Samsung Tizen RT RTOS version 3.0.GBB suffers from an input validation error vulnerability that stems from the effects of integer wrapping in the functions calloc and mm zalloc. This incorrect memory allocation could lead ...
Hackers Are Building an Army of Cheap Satellite Trackers
NyanSat is an open source ground station that lets you listen in on low-orbit transmissions for about $100 worth of gear...
Phishing Attack Hits German Coronavirus Task Force
Researchers are warning of an ongoing phishing attack that’s targeting the credentials of more than 100 high-profile executives at a German multinational corporation that’s tasked with procuring coronavirus medical gear for Germany. The company, left unnamed by researchers, is part of a task forc...
Record 0-Second SLA PPS Mitigation
Record-High 312 Mpps Attack Mitigated in 0 Seconds On May 2, 2020, Akamai blocked a large PPS-focused attack against one of our financial services customers in 0 seconds, utilizing a proactive mitigation posture. This was one of the largest PPS levels we have on record, and the biggest mitigated ...
Silent Night Banking Trojan Charges Top Dollar on the Underground
A descendant of the infamous Zeus banking trojan, dubbed Silent Night by the malware’s author, has emerged on the scene, with a host of functionalities available in a spendy malware-as-a-service MaaS model. Custom builds can run as much as $4,000 per month to use, which researchers say is now...
Hackers Exploit Zero-Day Bugs in Draytek Devices to Target Enterprise Networks
Cybersecurity researchers with Qihoo 360's NetLab today unveiled details of two recently spotted zero-day cyberattack campaigns in the wild targeting enterprise-grade networking devices manufactured by Taiwan-based DrayTek. According to the report, at least two separate groups of hackers exploite...
CVE-2019-20591
An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. There is local SQL injection in the Gear VR Service Content Provider. The Samsung ID is SVE-2019-14058 July 2019...
CVE-2019-20591
CVE-2019-20591 affects Samsung mobile devices running N (7.x), O (8.x), and P (9.0) with a local SQL injection in the Gear VR Service Content Provider. The issue, tracked as Samsung Samsung ID SVE-2019-14058, is documented across multiple feeds (NVD, Red Hat, etc.). The connected sources confirm ...
Critical Bugs in Rockwell, Johnson Controls ICS Gear
Security vulnerabilities that require very little skill to exploit have been discovered in industrial control systems ICS gear from Rockwell Automation and Johnson Controls, which anchor a flurry of bug disclosures impacting critical infrastructure. First, a set of critical vulnerabilities in...
Samsung Galaxy Gear series wemail_consumer_service elevation of privilege vulnerability
The Samsung Galaxy Gear series is a smartphone device. A security vulnerability exists in the Samsung Galaxy Gear series wemailconsumerservice system service, which can be exploited by a remote attacker to submit a special application request for unauthorized manipulation of a user's mailbox...
Samsung Galaxy Gear series wpa_supplicant elevation of privilege vulnerability
The Samsung Galaxy Gear series is a smartphone device. Security exists in the Samsung Galaxy Gear series wpasupplicant system service, which allows remote attackers to submit special application requests that can be utilized to elevate privileges and control the WI-FI interface...
CVE-2018-16272
The wpasupplicant system service in Samsung Galaxy Gear series allows an unprivileged process to fully control the Wi-Fi interface, due to the lack of its D-Bus security policy configurations. This affects Tizen-based firmwares including Samsung Galaxy Gear series before build RE2...
CVE-2018-16271
The wemailconsumerservice from the built-in application wemail in Samsung Galaxy Gear series allows an unprivileged process to manipulate a user's mailbox, due to improper D-Bus security policy configurations. An arbitrary email can also be sent from the mailbox via the paired smartphone. This...
CVE-2018-16272
The wpasupplicant system service in Samsung Galaxy Gear series allows an unprivileged process to fully control the Wi-Fi interface, due to the lack of its D-Bus security policy configurations. This affects Tizen-based firmwares including Samsung Galaxy Gear series before build RE2...
CVE-2018-16271
The wemailconsumerservice from the built-in application wemail in Samsung Galaxy Gear series allows an unprivileged process to manipulate a user's mailbox, due to improper D-Bus security policy configurations. An arbitrary email can also be sent from the mailbox via the paired smartphone. This...
CVE-2018-16270
Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path...
CVE-2018-16270
Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path...
Design/Logic Flaw
The wpasupplicant system service in Samsung Galaxy Gear series allows an unprivileged process to fully control the Wi-Fi interface, due to the lack of its D-Bus security policy configurations. This affects Tizen-based firmwares including Samsung Galaxy Gear series before build RE2...