Lucene search
+L

6430 matches found

Prion
Prion
added 2020/12/18 9:15 a.m.18 views

Design/Logic Flaw

An issue was discovered in the GPS daemon on Samsung mobile devices with O8.x, P9.0, and Q10.0 non-Qualcomm chipsets software. Attackers can obtain sensitive location information because the configuration file is incorrect. The Samsung ID is SVE-2020-18678 December 2020...

5CVSS5.3AI score0.00336EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/12/18 8:44 a.m.25 views

CVE-2020-35552

An issue was discovered in the GPS daemon on Samsung mobile devices with O8.x, P9.0, and Q10.0 non-Qualcomm chipsets software. Attackers can obtain sensitive location information because the configuration file is incorrect. The Samsung ID is SVE-2020-18678 December 2020...

5.3AI score0.00336EPSS
SaveExploits0References1
CVE
CVE
added 2020/12/18 8:44 a.m.46 views

CVE-2020-35552

CVE-2020-35552 involves the GPS daemon on Samsung mobile devices with non-Qualcomm chipsets (O 8.x, P 9.0, Q 10.0). The vulnerability arises from an incorrect configuration file in the GPS service, allowing an attacker to obtain sensitive location information. Connected records confirm the affect...

5.3CVSS5.2AI score0.00336EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2020/12/18 12:0 a.m.11 views

Multiple Samsung Products Default Configuration Issue Vulnerability

Samsung mobile devices O are products of Samsung Corporation in South Korea.Samsung mobile devices O is a series of cell phones.Samsung mobile devices P is a series of mobile hard drives.Samsung mobile devices Q is a series of TVs.Samsung mobile devices Q is a series of TVs. Samsung mobile device...

5.3CVSS6AI score0.00336EPSS
SaveExploits0References2
Packet Storm
Packet Storm
added 2020/12/18 12:0 a.m.572 views

Pulse Secure VPN Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Pulse Secure VPN gzip RCE', 'Description' = %q The Pulse Connect Secure appliance before 9.1R9 suffers from an uncontrolled gzip extraction...

6.5CVSS7.3AI score0.9648EPSS
SaveExploits4
ThreatPost
ThreatPost
added 2020/12/16 4:16 p.m.68 views

Sextortionist Campaign Targets iOS, Android Users with New Spyware

New spyware is targeting iOS and Android frequenters of adult mobile sites by posing as a secure messaging application in yet another twist on sextortionist scams. The spyware, dubbed Goontact, targets users of escort-service sites and other sex-oriented services – particularly in Chinese-speakin...

6.1AI score
SaveExploits0References9
The Hacker News
The Hacker News
added 2020/12/16 2:0 p.m.37 views

New 5G Network Flaws Let Attackers Track Users' Locations and Steal Data

As 5G networks are being gradually rolled out in major cities across the world, an analysis of its network architecture has revealed a number of potential weaknesses that could be exploited to carry out a slew of cyber assaults, including denial-of-service DoS attacks to deprive subscribers of...

0.4AI score
SaveExploits0
The Hacker News
The Hacker News
added 2020/12/16 1:41 p.m.35 views

What is Geocoding? — How to Find Coordinates of An Address

How can your app hook into a geocoding service that offers forward and reverse geocoding and an auto-completion facility? Geocoding turns a location name or address into geocoordinates. The service gets used by thousands of applications like Uber and Grubhub to track and plot their map data. Yet,...

6.5AI score
SaveExploits0
OSV
OSV
added 2020/12/15 5:15 p.m.7 views

CVE-2020-27053

In broadcastWifiCredentialChanged of ClientModeImpl.java, there is a possible location permission bypass due to a missing permission check. This could lead to local information disclosure of the WiFi network name with System execution privileges needed. User interaction is not needed for...

4.4CVSS6AI score0.00133EPSS
SaveExploits0References1
NVD
NVD
added 2020/12/15 5:15 p.m.25 views

CVE-2020-27053

In broadcastWifiCredentialChanged of ClientModeImpl.java, there is a possible location permission bypass due to a missing permission check. This could lead to local information disclosure of the WiFi network name with System execution privileges needed. User interaction is not needed for...

4.4CVSS5.2AI score0.00133EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2020/12/15 5:15 p.m.3 views

CVE-2020-27053

In broadcastWifiCredentialChanged of ClientModeImpl.java, there is a possible location permission bypass due to a missing permission check. This could lead to local information disclosure of the WiFi network name with System execution privileges needed. User interaction is not needed for...

4.4CVSS5.6AI score0.00133EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2020/12/15 4:6 p.m.32 views

CVE-2020-27053

In broadcastWifiCredentialChanged of ClientModeImpl.java, there is a possible location permission bypass due to a missing permission check. This could lead to local information disclosure of the WiFi network name with System execution privileges needed. User interaction is not needed for...

5.2AI score0.00133EPSS
SaveExploits0References1
Apple
Apple
added 2020/12/15 5:58 a.m.96 views

About the security content of tvOS 13.4.8 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

10CVSS0.4AI score0.0779EPSS
SaveExploits15Affected Software1
NVD
NVD
added 2020/12/14 10:15 p.m.24 views

CVE-2020-0468

In listen and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS5.2AI score0.00143EPSS
SaveExploits0References1
OSV
OSV
added 2020/12/14 10:15 p.m.7 views

CVE-2020-0468

In listen and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS6.2AI score0.00143EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2020/12/14 10:15 p.m.3 views

CVE-2020-0468

In listen and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS5.6AI score0.00143EPSS
SaveExploits0References2
Prion
Prion
added 2020/12/14 10:15 p.m.13 views

Authentication flaw

In listen and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

2.1CVSS5.8AI score0.00143EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/12/14 9:51 p.m.33 views

CVE-2020-0468

In listen and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5AI score0.00143EPSS
SaveExploits0References1
HackRead
HackRead
added 2020/12/10 8:49 p.m.33 views

Apple, Google to ban X-Mode’s location tracking apps from stores

By Deeba Ahmed The decision came after a media outlet reported about data gathering tactics of location data collection firm X-Mode Social. Find out why. This is a post from HackRead.com Read the original post: Apple, Google to ban X-Modes location tracking apps from stores...

2.3AI score
SaveExploits0
Kitploit
Kitploit
added 2020/12/10 11:30 a.m.67 views

DarkSide - Tool Information Gathering And Social Engineering

Features: Hacker Dashboard Hacker News thehackernews.com/ New Exploits Exploit-db.com Hacking Tutorials Video youtube.com The Latest Prices OF Digital Currencies Rials , Usd Information Gathering Bypass Cloud Flare Cms Detect Trace Toute Reverse IP Port Scan IP location Finder Show HTTP Header Fi...

7.4AI score
SaveExploits0References1
Rows per page
Query Builder