Lucene search
+L

6430 matches found

RustSec
RustSec
added 2020/11/02 12:0 p.m.13 views

crate has been renamed to `sn_bindgen`

This crate has been renamed from safebindgen to snbindgen. The new repository location is:...

6.9AI score
SaveExploits0
OSV
OSV
added 2020/11/02 12:0 p.m.14 views

RUSTSEC-2020-0076 crate has been renamed to `sn_routing`

This crate has been renamed from routing to snrouting. The new repository location is:...

7.1AI score
SaveExploits0References3
ThreatPost
ThreatPost
added 2020/10/30 8:29 p.m.48 views

Firestarter Android Malware Abuses Google Firebase Cloud Messaging

An APT group is starting fires with a new Android malware loader, which uses a legitimate Google messaging service to bypass detection. The malware, dubbed “Firestarter,” is used by an APT threat group called “DoNot.” DoNot uses Firebase Cloud Messaging FCM, which is a cross-platform cloud soluti...

0.4AI score
SaveExploits0References14
Gitee
Gitee
added 2020/10/28 9:44 p.m.5 views

bettercap-proxy-modules

This is a collection of HTTP proxy modules for the BetterCap framework, a tool for performing network attacks and penetration testing. The modules are designed to be used with the BetterCap proxy server, which can be configured to intercept and modify HTTP traffic between a client and a server. T...

7AI score
SaveExploits0
ThreatPost
ThreatPost
added 2020/10/27 4:1 p.m.29 views

Researchers: Instagram, LinkedIn Vulnerable to Preview-Link RCE Security Woes

UPDATE Link previews in popular chat apps on iOS and Android are a firehose of security and privacy issues, researchers have found. At risk are Facebook Messenger, LINE, Slack, Twitter Direct Messages, Zoom and many others. In the case of Instagram and LinkedIn, it’s even possible to execute remo...

7.3AI score
SaveExploits0References7
Akamai Blog
Akamai Blog
added 2020/10/27 2:0 p.m.32 views

Akamai Edge Cloud: Scaling IoT, Part 1

The Internet of Things IoT ecosystem is an exciting emerging market that is disrupting the way we design infrastructure to support businesses. Smart devices, homes, cities, cars, and automation supporting the Industry 4.0 industrial revolution are all placing new demands on existing internet...

0.3AI score
SaveExploits0
OSV
OSV
added 2020/10/22 7:15 p.m.6 views

CVE-2020-9986

A file access issue existed with certain home folder files. This was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.7. A malicious application may be able to read sensitive location information...

3.3CVSS6.9AI score0.00932EPSS
SaveExploits0References2
HackRead
HackRead
added 2020/10/20 7:5 p.m.34 views

Waze app vulnerability allowed users’ real-time location tracking

By Waqas Waze app has more than 130 million active monthly users globally and that makes it a lucrative target for hackers. Here's what happened. This is a post from HackRead.com Read the original post: Waze app vulnerability allowed users real-time location tracking...

3.7AI score
SaveExploits0
ThreatPost
ThreatPost
added 2020/10/20 10:48 a.m.43 views

Google’s Waze Can Allow Hackers to Identify and Track Users

A security researcher has discovered a vulnerability in Google’s Waze app that can allow hackers to identify people using the popular navigation app and track them by their location. Security DevOps engineer Peter Gasper discovered an API flaw in the navigation software that allowed him to track...

1.5AI score
SaveExploits0References8
NVD
NVD
added 2020/10/16 11:15 p.m.18 views

CVE-2020-16910

A security feature bypass vulnerability exists when Microsoft Windows fails to handle file creation permissions, which could allow an attacker to create files in a protected Unified Extensible Firmware Interface UEFI location. To exploit this vulnerability, an attacker could run a specially craft...

6.2CVSS0.02787EPSS
SaveExploits0References1
Prion
Prion
added 2020/10/16 11:15 p.m.17 views

Security feature bypass

A security feature bypass vulnerability exists when Microsoft Windows fails to handle file creation permissions, which could allow an attacker to create files in a protected Unified Extensible Firmware Interface UEFI location. To exploit this vulnerability, an attacker could run a specially craft...

4.3CVSS6.9AI score0.02787EPSS
SaveExploits0References1Affected Software2
OSV
OSV
added 2020/10/16 5:15 p.m.1 views

CVE-2020-9933

An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8. A malicious application may be able to read sensitive location information...

3.3CVSS6.6AI score0.0084EPSS
SaveExploits0References3
NVD
NVD
added 2020/10/16 5:15 p.m.15 views

CVE-2020-9933

An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8. A malicious application may be able to read sensitive location information...

4.3CVSS0.0084EPSS
SaveExploits0References3
Prion
Prion
added 2020/10/16 5:15 p.m.16 views

Authorization

An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8. A malicious application may be able to read sensitive location information...

4.3CVSS4.5AI score0.0084EPSS
SaveExploits0References3Affected Software4
Cvelist
Cvelist
added 2020/10/16 4:50 p.m.28 views

CVE-2020-9933

An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8. A malicious application may be able to read sensitive location information...

4.8AI score0.0084EPSS
SaveExploits0References3
CNVD
CNVD
added 2020/10/16 12:0 a.m.32 views

Microsoft Windows and Windows Server Security Feature Bypass Vulnerability (CNVD-2021-08828)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A security feature bypass vulnerability exists in Microsoft Windows and Windows Server. Th...

6.2CVSS8.9AI score0.02787EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2020/10/16 12:0 a.m.4 views

PT-2020-20876 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.6 iPadOS versions prior to 13.6 tvOS versions prior to 13.4.8 watchOS versions prior to 6.2.8 Description: An authorization issue was addressed with improved state management. A malicious application may be able to re...

4.3CVSS4.5AI score0.0084EPSS
SaveExploits0References4
OSV
OSV
added 2020/10/15 12:0 p.m.10 views

RUSTSEC-2020-0058 crate has been renamed to `cipher`

This crate has been renamed from stream-cipher to cipher. The new repository location is at:...

7.1AI score
SaveExploits0References3
OSV
OSV
added 2020/10/14 2:15 p.m.7 views

CVE-2020-0378

In onWnmFrameReceived of PasspointManager.java, there is a missing permission check. This could lead to local information disclosure of location data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10...

5.5CVSS6.7AI score0.00165EPSS
SaveExploits0References1
NVD
NVD
added 2020/10/14 2:15 p.m.20 views

CVE-2020-0378

In onWnmFrameReceived of PasspointManager.java, there is a missing permission check. This could lead to local information disclosure of location data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10...

5.5CVSS0.00165EPSS
SaveExploits0References1
Rows per page
Query Builder