China's Massistant Tool Secretly Extracts SMS, GPS Data, and Images From Confiscated Phones

Cybersecurity researchers have shed light on a mobile forensics tool called Massistant that's used by law enforcement authorities in China to gather information from seized mobile devices. The hacking tool, believed to be a successor of MFSocket, is developed by a Chinese company named SDIC...

New Mobile Phone Forensics Tool

The Chinese have a new tool called Massistant. Massistant is the presumed successor to Chinese forensics tool, "MFSocket", reported in 2019 and attributed to publicly traded cybersecurity company, Meiya Pico. The forensics tool works in tandem with a corresponding desktop software. Massistant gai...

CVE-2025-7703

Authentication vulnerability in the mobile application（tech.palm.id）may lead to the risk of information leakage...

Minor update(2) for Vivaldi iOS Browser 7.5

Head to the App Store and download the browser. Your rating for our browser matters. ⭐️ ⭐️ ⭐️ ⭐️ ⭐️ Enjoy! Changelog The following is a list of changes since the first 7.5 minor update: Crash Translate panel crashes for certain languages VIB-1332 Chromium Update to 138.0.7204.162: includes fix for...

CVE-2025-30744

Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite component: Multiplatform Sync Errors. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobi...

Enterprise Security Incident Analysis and Countermeasures Based on the T-Mobile Data Breach

This paper presents a comprehensive analysis of T-Mobile's critical data breaches in 2021 and 2023, alongside a full-spectrum security audit targeting its systems, infrastructure, and publicly exposed endpoints. By combining case-based vulnerability assessments with active ethical hacking...

The vulnerability of the Multiplatform Sync Errors component of the Oracle Mobile Field Service management platform, a system for automating business operations within the Oracle E-Business Suite. This component allows attackers to gain access to read, modify, and delete information.

The vulnerability of the Multiplatform Sync Errors component in the Oracle Mobile Field Service management platform, part of the Oracle E-Business Suite enterprise automation system, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to...

CVE-2025-7612

A vulnerability was found in code-projects Mobile Shop 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2025-7703

Authentication vulnerability in the mobile application（tech.palm.id）may lead to the risk of information leakage...

CVE-2025-7703

Technical details for CVE-2025-7703 are not publicly disclosed in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2025-7703

Authentication vulnerability in the mobile application（tech.palm.id）may lead to the risk of information leakage...

CVE-2025-7703

Authentication vulnerability in the mobile application（tech.palm.id）may lead to the risk of information leakage...

TECNO tech.palm.id 安全漏洞

TECNO tech.palm.id is a mobile application from TECNO Corporation in China. A security vulnerability exists in TECNO tech.palm.id, which stems from an authentication flaw that could lead to information disclosure...

PT-2025-29712 · Unknown · Tech.Palm.Id

Name of the Vulnerable Software and Affected Versions: tech.palm.id affected versions not specified Description: An authentication issue exists in the mobile application that may result in information disclosure. Recommendations: At the moment, there is no information about a newer version that...

CVE-2025-30744

Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite component: Multiplatform Sync Errors. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobi...

CVE-2025-30744

Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite component: Multiplatform Sync Errors. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobi...

MAL-2025-6214 Malicious code in ecinc-cloud-moaxmpp (npm)

Package exhibits multiple malicious behaviors: Office doc access/encryption, DB interaction, local storage clearing, arbitrary code execution, /dev/shm ref. The code includes a native bridge that allows it to execute arbitrary SQL queries on a mobile device’s database when used within a specific...

Malicious code in ecinc-cloud-moaxmpp (npm)

Package exhibits multiple malicious behaviors: Office doc access/encryption, DB interaction, local storage clearing, arbitrary code execution, /dev/shm ref. The code includes a native bridge that allows it to execute arbitrary SQL queries on a mobile device’s database when used within a specific...

Malicious code in @indigo-mobile/material (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2503d344724b3360dc4c2d74aa730e700f9555ffddba341a9d7fc88361b184a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Mobile Field Service for Oracle...