Agent Smith Malware Infects 25M Android Phones to Push Rogue Ads

Researchers are warning of a new breed of Android malware, dubbed “Agent Smith,” that they claim has infected 25 million handsets in order to replace legitimate apps with doppelgangers that display rogue ads. The malware is tied to a China-based firm, according to Check Point researchers, and is...

The vulnerability of the Secure Boot function in Cisco microprogramming devices’ network devices relates to errors in code integrity checking. This vulnerability allows attackers to install malicious software onto these devices.

The vulnerability of the Secure Boot function in Cisco microprogramming devices relates to code integrity checks. Exploiting this vulnerability could allow attackers to install malicious software...

The vulnerability of the microprogrammed programmable logic controller Modicon, related to unprocessed exceptions, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed logic controller Modicon is related to unprocessed exceptions. Exploiting this vulnerability could allow a malicious actor to cause malfunctions during integrity checks of Modbus-protocol files with incorrect check sums...

CVE-2019-5587

Lack of root file system integrity checking in Fortinet FortiOS VM application images all versions below 6.0.5 may allow attacker to implant malicious programs into the installing image by reassembling the image through specific methods...

CVE-2019-5300

There is a digital signature verification bypass vulnerability in AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, SRG2300 and SRG3300 Huawei routers. The vulnerability is due to the affected software improperly verifying digital signatures for the software image in the...

CVE-2019-5300

There is a digital signature verification bypass vulnerability in AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, SRG2300 and SRG3300 Huawei routers. The vulnerability is due to the affected software improperly verifying digital signatures for the software image in the...

PT-2019-3149 · Fortinet · Fortimanager

Name of the Vulnerable Software and Affected Versions: FortiManager VM versions 6.2.0, 6.0.6 and below Description: The issue is due to insufficient input validation in the FortiManager VM application. This could allow a remote attacker to execute arbitrary code or commands. Additionally, the lac...

Digital Signature Checksum Bypass Vulnerability in Multiple Huawei Products

The Huawei AR1200, among others, is an enterprise router from Huawei, a Chinese company. A security vulnerability exists in multiple Huawei products, which stems from the program failing to properly verify the digital signature of the mirroring software. A local attacker could use this...

The vulnerability of the systemd daemon in the Astra Linux operating system allows a hacker to circumvent the restrictions imposed by a given security policy.

The vulnerability of the systemd-based Astra Linux operating system is related to the absence of mandate-based integrity control during operations involving systemd. Exploiting this vulnerability allows an attacker to circumvent the restrictions imposed by the specified security policies...

Policy Compliance Adds UDC Support for Cloud Agent

Qualys is extending the Cloud Agent capabilities for users of the Policy Compliance PC application by letting them define controls. Until now, the Cloud Agent could only assess Qualys PC’s “out of the box” controls. By adding support for user defined controls UDC, Qualys PC users now can use Clou...

Binance 1.5.0 Insecure File Permission

Document Title: =============== Binance v1.5.0 - Insecure File Permission Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2135 Release Date: ============= 2018-07-17 Vulnerability Laboratory ID VL-ID: ====================================...

Binance v1.5.0 - Insecure File Permission Vulnerability

Document Title: =============== Binance v1.5.0 - Insecure File Permission Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2135 Release Date: ============= 2018-07-16 Vulnerability Laboratory ID VL-ID: ====================================...

SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure and SoftControl/SafenSoft Enterprise Suite Unauthorized Operation Vulnerabilities

SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite are Russian SAFE'N'SEC's proactive defense-capable malware applications. SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft...

Foxconn FEMTO AP-FC4064-T Weak Password Vulnerability

The Foxconn FEMTO AP-FC4064-T is a home base station device from Foxconn. A security vulnerability exists in the web administration page of the Foxconn FEMTO AP-FC4064-T APGTB385.8.3lb15-W47 LTE Build 15 version, which stems from the admin account using a weak default password: admin, and the...

PHOENIX CONTACT mGuard Unauthorized Modification Vulnerability

Phoenix Contact mGuard is a security device from Phoenix Contact that protects systems from unauthorized access and installation. An unauthorized modification vulnerability exists in the PHOENIX CONTACT mGuard. The mGuard device relies on an internal verification of the integrity of the update...

SuperBeam Injection Vulnerability

SuperBeam is an application that utilizes WiFi networks for file transfer between cell phones. The program uses QR codes or NFC for pairing and can share multiple file formats. A security vulnerability exists in SuperBeam 4.1.3 and earlier versions, which stems from the program's failure to use...

[SECURITY] Fedora 27 Update: optipng-0.7.6-5.fc27

OptiPNG is a PNG optimizer that recompresses image files to a smaller size, without losing any information. This program also converts external formats BMP, GIF, PNM and TIFF to optimized PNG, and performs PNG integrity checks and corrections...

Man-in-the-Middle (MitM)

deis is vulnerable to man-in-the-middle MITM attacks. The vulnerability exists due to the lack of secure connection, as well as the lack of integrity checks...

The vulnerability of the Microsoft Device Guard component in Windows operating systems allows a hacker to inject malicious code into Windows PowerShell sessions.

The vulnerability of the components used to protect the integrity of Microsoft Device Guard’s hardware and software on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating locally, to bypass integrity checks and...

Network Time Protocol Broadcast Mode Poll Interval Enforcement Denial of Service Vulnerability(CVE-2016-7428)

Summary An exploitable denial of service vulnerability exists in the broadcast mode poll interval enforcement functionality of ntpd. To limit abuse, ntpd restricts the rate at which each broadcast association will process incoming packets. ntpd will reject broadcast mode packets that arrive befor...