724 matches found
Uber: Physical Access to Mobile App Allows Local Attribute Updates without Authentication
Physical access to mobile device allows attacker to replace boolean flag to update firstname,lastname, email and mobile number in app only - not changed on backend. If we want to update or changed the profile information in mobile application then It will asks for the password. Using this...
August 23, 2016 — KB3176934 (OS Build 14393.82)
None None...
Disclosure of user actions through JavaScript with motion and orientation sensors — Mozilla
Security researcher Maryam Mehrnezhad of Newcastle University, UK reported an issue discovered by their research team, which also includes Ehsan Toreini, Siamak F. Shahandashti, and Feng Hao. They found vulnerabilities in Firefox for Android using orientation data and motion sensors on a mobile...
InstantCoder v1.0 iOS has multiple vulnerabilities
InstantCoder v1.0 iOS suffers from local file inclusion and directory traversal vulnerabilities. 1 A remote attacker is able to include file/path requests without authentication. An attacker could also execute malicious attacks using persistent injection scripting code. 2 The vulnerability stems...
The vulnerability of the iOS operating system, which allows a perpetrator to replace the trusted profile of the MDM device
The vulnerability of the iOS operating system’s Profiles component exists due to insufficient verification of certificate authenticity. Exploiting this vulnerability allows a malicious actor to replace the trusted profile of the MDM remotely...
Unable to access the Store on the Mobile device if XenMobile is behind firewall
When trying device enrollment in MDM+MAM mode, user was unable to reach the Store...
CVE-2016-1766
The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via unspecified vectors...
Your iPhone will Alert You if You are Being Monitored At Work
Are You an Employee? It's quite possible that someone has been reading your messages, emails, listening to your phone calls, and monitoring your activities at work. No, it's not a spy agency or any hacker… ...Oops! It's your Boss. Recently, European Court had ruled that the Employers can legally...
Barracuda Networks MDM - Persistent Mail Vulnerability
Document Title: =============== Barracuda Networks MDM - Persistent Mail Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1315 Release Date: ============= 2016-02-04 Vulnerability Laboratory ID VL-ID: ==================================== 131...
Barracuda Networks MDM - Persistent Mail Vulnerability
Document Title: =============== Barracuda Networks MDM - Persistent Mail Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1315 Release Date: ============= 2016-02-04 Vulnerability Laboratory ID VL-ID: ==================================== 131...
SAP Afaria product exposed a series of serious vulnerabilities that affect a large number of mobile device-bug warning-the black bar safety net
Afaria is the German SAP software company developed a mobile device management MDM solutions that are currently on the market the most popular MDM solutions, there are about 6 3 0 0 a enterprise which manages 1 billion 3 0 0 million of the mobile device. ERPScan is specifically responsible for th...
Apple iOS < 9.0 Multiple Vulnerabilities
Binary data appleios90check.nbin...
iOS sandboxing vulnerabilities increase the enterprise data risk level-vulnerability warning-the black bar safety net
Appthority researchers found a present in the iOS sandboxed application vulnerabilities in the iOS 8.4.1 the following version of the system will be affected, anyone can use this vulnerability to access the System Management Application Configuration. Sandbox vulnerability-QuickSand Due to this...
Details Surface on Patched Sandbox Violation Vulnerability in iOS
Apple patched an issue last week in iOS that could have allowed attackers to bypass the third-party app-sandbox protection mechanism on devices and read arbitrary managed preferences via a special app. The issue, which was present in versions of iOS prior to 8.4.1, stems from a vulnerability with...
Mobile Device Fingerprinting
Binary data 7178.pasl...
Initiate--Stagefright vulnerability of the century-vulnerability and early warning-the black bar safety net
0x00 sequence Last night shocked Stagefright broke significant vulnerabilities can result in remote code execution, even clockwork MMS, it is possible the invasion of the user mobile device. This sounds but a rare case of a large vulnerability., as security personnel, nature good steak with a ste...
The vulnerability of the SAP Afaria mobile device management program allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the SAP Afaria mobile device management program arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to cause service failures or execute arbitrary code using a specially crafted request...
Citrix GoToMyPC Server Detection
Binary data 8794.prm...
SAP Afaria XComms Process Remote Buffer Overflow Vulnerability
SAP Afaria is a mobile device management solution. The solution supports the effective management of mobile devices, applications, and data lifecycles and ensures their security during transmission and storage. A remote buffer overflow vulnerability exists in SAP Afaria, which allows remote...