CVE-2016-0297

IBM Tivoli Endpoint Manager - Mobile Device Management MDM could allow a remote attacker to obtain sensitive information due to a missing HTTP Strict-Transport-Security Header through man in the middle techniques...

CVE-2016-0297

CVE-2016-0297 affects IBM Tivoli Endpoint Manager (Mobile Device Management). The root cause is a missing HTTP Strict-Transport-Security header, which could enable man-in-the-middle attackers to obtain sensitive information. The provided documents do not specify affected versions, exploit details...

CVE-2016-0296

CVE-2016-0296 concerns IBM Tivoli Endpoint Manager (Mobile Device Management). The available documentation states that log files may contain potentially sensitive information and could be accessible to a local user, implying a local information disclosure affecting confidentiality. The NVD entry ...

How to Configure NetScaler Gateway and Microsoft Intune (MDM) for Single Factor Authentication

Background The integration of Microsoft Intune with NetScaler Gateway provides best-of-class application access and data protection solution offered by Citrix NetScaler Gateway and Intune. You get the most complete suite of secure productivity apps, including: email calendar contacts note-taking...

Cumulative Update for Windows 10 Version 1607 and Windows Server 2016: December 9, 2016

None None...

December 9, 2016 — KB3201845 (OS Build 14393.479)

None None...

How to use Rowhammer vulnerability Root Android phone with Video demo+Exploit source code-the vulnerabilities and early warning-the black bar safety net

! Recently, security research experts through research found a root the Android phone to the new method, i.e., by Rowhammer vulnerability to root Android phone. In addition, the attacker can even use this exploit with presently known Android vulnerabilities Bandroid and Stagefright to the target...

How to Safely Remove Android Traybar Icon in XenMobile

This article describes how to safely remove Android traybar icon in XenMobile. Background XenMobile has a lot of great policies to manageyour users' mobile devices. I'm going to discuss one in particular that can be a little tricky. We'll be updating our documentation to cover this in a bit more...

Week Four of National Cyber Security Awareness Month

In partnership with DHS, the National Cyber Security Alliance has released information on Navigating Your Continuously Connected Life which examines our future using Internet of Things IoT devices. The CyberAware Tip of the Week details the infographic on the growing IoT and provides safe computi...

Apple iOS < 10.0 Multiple Vulnerabilities

Binary data 9619.prm...

Uber: Physical Access to Mobile App Allows Local Attribute Updates without Authentication

Physical access to mobile device allows attacker to replace boolean flag to update firstname,lastname, email and mobile number in app only - not changed on backend. If we want to update or changed the profile information in mobile application then It will asks for the password. Using this...

August 23, 2016 — KB3176934 (OS Build 14393.82)

None None...

Disclosure of user actions through JavaScript with motion and orientation sensors — Mozilla

Security researcher Maryam Mehrnezhad of Newcastle University, UK reported an issue discovered by their research team, which also includes Ehsan Toreini, Siamak F. Shahandashti, and Feng Hao. They found vulnerabilities in Firefox for Android using orientation data and motion sensors on a mobile...

InstantCoder v1.0 iOS has multiple vulnerabilities

InstantCoder v1.0 iOS suffers from local file inclusion and directory traversal vulnerabilities. 1 A remote attacker is able to include file/path requests without authentication. An attacker could also execute malicious attacks using persistent injection scripting code. 2 The vulnerability stems...

The vulnerability of the iOS operating system, which allows a perpetrator to replace the trusted profile of the MDM device

The vulnerability of the iOS operating system’s Profiles component exists due to insufficient verification of certificate authenticity. Exploiting this vulnerability allows a malicious actor to replace the trusted profile of the MDM remotely...

Unable to access the Store on the Mobile device if XenMobile is behind firewall

When trying device enrollment in MDM+MAM mode, user was unable to reach the Store...

CVE-2016-1766

The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via unspecified vectors...

Your iPhone will Alert You if You are Being Monitored At Work

Are You an Employee? It's quite possible that someone has been reading your messages, emails, listening to your phone calls, and monitoring your activities at work. No, it's not a spy agency or any hacker… ...Oops! It's your Boss. Recently, European Court had ruled that the Employers can legally...

Barracuda Networks MDM - Persistent Mail Vulnerability

Document Title: =============== Barracuda Networks MDM - Persistent Mail Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1315 Release Date: ============= 2016-02-04 Vulnerability Laboratory ID VL-ID: ==================================== 131...

Barracuda Networks MDM - Persistent Mail Vulnerability

Document Title: =============== Barracuda Networks MDM - Persistent Mail Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1315 Release Date: ============= 2016-02-04 Vulnerability Laboratory ID VL-ID: ==================================== 131...