Major Security Flaws Expose Keystrokes of Over 1 Billion Chinese Keyboard App Users

Security vulnerabilities uncovered in cloud-based pinyin keyboard apps could be exploited to reveal users' keystrokes to nefarious actors. The findings come from the Citizen Lab, which discovered weaknesses in eight of nine apps from vendors like Baidu, Honor, iFlytek, OPPO, Samsung, Tencent, Viv...

Apple 多款产品安全漏洞

Apple Safari and others are products of Apple Inc. Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. apple iOS is an operating system developed for mobile devices. apple tvOS is a smart TV operating system. A security vulnerability...

Apple iOS 和 iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS prior to 17.3 and iPadOS prior to 17.3, which arises from the contents of a...

The vulnerability in the service for creating a Wi-Fi access point for Windows Mobile Hotspot operating systems allows attackers to expose protected information.

The vulnerability of the service for creating a Wi-Fi access point on Windows Mobile Hotspot operating systems is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to disclose protected information...

Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp.

...

PT-2024-12705 · Orbic · Orbic Maui

Name of the Vulnerable Software and Affected Versions: Orbic Maui device version ORB545L V1.4.2 BVZPP Description: A certain software build for the Orbic Maui device leaks the IMEI and the ICCID to system properties that can be accessed by any local app on the device without any permissions or...

TCL 20XE 安全漏洞

TCL 20XE is a cell phone from TCL. A security vulnerability exists in the Boost Mobile TCL 20XE that originates from the fact that certain software versions of the device contain vulnerable pre-installed applications com.tct.gcs.hiddenmenuproxy that allow a local third-party application to...

PYSEC-2024-250

Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbufferloader.cpp...

Fortinet FortiClient Code Injection Vulnerability

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A code injection vulnerability exists in Fortinet...

Ivanti Avalanche 安全漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche prior to version 6.4.3, which stems from a path traversal...

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche allows a hacker to disclose protected information.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche relates to memory-walking attacks. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by the system...

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche allows a hacker to disclose protected information.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche relates to memory-walking attacks. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by the system...

The vulnerability of the WLAvalancheService component in the Avalanche mobile device management system allows a attacker to execute arbitrary commands with SYSTEM privileges.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands with SYSTEM privileges...

The vulnerability of the Avalanche mobile device management system’s web component allows a hacker to execute arbitrary code.

The vulnerability of the Avalanche mobile device management web component is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the SYSTEM context remotely...

The vulnerability of the WLAvalancheService component in the Avalanche mobile device management system allows a hacker to trigger a service failure.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche is related to pointer assignment errors. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche allows a hacker to execute arbitrary commands.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche relates to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the Firebase Database Check framework in the Mobile Security Framework (MobSF) allows a attacker to perform an SSRF attack.

The vulnerability of the Firebase Database Check framework used in the Mobile Security Framework MobSF for security research in mobile applications is related to insufficient validation of incoming requests. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack remotely...

The vulnerability in the Avalanche mobile device management web component allows a hacker to execute arbitrary commands with SYSTEM privileges.

The vulnerability of the Avalanche mobile device management web component is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with SYSTEM privileges remotely...

The vulnerability in the Avalanche mobile device management web component allows a hacker to execute arbitrary commands with SYSTEM privileges.

The vulnerability of the Avalanche mobile device management web component is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with SYSTEM privileges remotely...

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche allows a hacker to disclose protected information.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche relates to memory-walking attacks. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by the system...