CVE-2022-40760

A Buffer Access with Incorrect Length Value vulnerablity in the TEEMACUpdate function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service DoS by invoking the function TEEMACUpdate with an excessive size value of chunkSize...

PT-2022-25521 · Samsung · Samsung Mtower

Name of the Vulnerable Software and Affected Versions: Samsung mTower versions 0.3.0 and earlier Description: A Buffer Access with Incorrect Length Value issue in the TEE MACUpdate function allows a trusted application to trigger a Denial of Service DoS by invoking the function TEE MACUpdate with...

MacUpdate Hacked to Distribute Mac Cryptocurrency Miner

By Waqas Another day, another cryptocurrency miner targeting users - This time, This is a post from HackRead.com Read the original post: MacUpdate Hacked to Distribute Mac Cryptocurrency Miner...

New Mac cryptominer distributed via a MacUpdate hack

Early this morning, security researcher Arnaud Abbati of SentinelOne tweeted about new Mac malware being distributed via MacUpdate. This malware, which Abbati has named OSX.CreativeUpdate, is a new cryptocurrency miner, designed to sit in the background and use your computer's CPU to mine the...

macupdate.com XSS vulnerability

Vulnerable URL: https://www.macupdate.com/member/login Details: Description| Value ---|--- Patched:| Yes, at 29.11.2016 Latest check for patch:| 29.11.2016 14:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8899 VIP website status:| Yes Coordinated Disclosure...

CoinThief Bitcoin Trojan Found on Popular Download Sites

Phony Bitcoin ticker apps hosted on popular sites Download.com and MacUpdate.com are fronts for the OSX/CoinThief Trojan, which was built to steal Bitcoin wallet credentials and keys, and to date has drained a small number of accounts. SecureMac lead developer Nicholas Ptacek said new variants of...

Unfixed XSS vulnerability at www.macupdate.com

Security researcher Craig Heffner, has submitted on 09/06/2007 a cross-site-scripting XSS vulnerability affecting www.macupdate.com, which at the time of submission ranked 11658 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/06/2007. It is...