20626 matches found
CVE-2023-41356
CVE-2023-41356 concerns the ManageEngine Mobile Device Manager (MDM) APP and describes a path traversal vulnerability in a special function. An unauthenticated remote attacker can bypass authentication and read arbitrary system files. The NVD entry lists a CVSSv3.1 base score of 6.5 (Medium) with...
CVE-2023-41344 NCSIST ManageEngine MDM - Path Traversal
NCSIST ManageEngine Mobile Device ManagerMDM APP's special function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and read arbitrary system files...
Ivanti Avalanche security breach
Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche, which stems from a lack of authentication local lifting...
Ivanti Avalanche security breach
Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche that stems from an incorrect default privilege allowing local...
Ivanti Avalanche security breach
Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets, and barcode scanners. A security vulnerability exists in Ivanti Avalanche that stems from a lack of authentication local privilege...
NCSIST ManageEngine Mobile Device Manager Security Vulnerability
NCSIST ManageEngine Mobile Device Manager NCSIST ManageEngine MDM is a mobile device manager organized by China's National Institute of Zhongshan Science and Technology NCSIST. A security vulnerability exists in NCSIST ManageEngine Mobile Device Manager that stems from a path traversal...
Ivanti Avalanche security breach
Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets, and barcode scanners. A security vulnerability exists in Ivanti Avalanche, which is caused by an Unrestricted File Upload Local Privileg...
PT-2023-27924 · Zoho · Manageengine Mobile Device Manager
Name of the Vulnerable Software and Affected Versions: ManageEngine Mobile Device ManagerMDM APP affected versions not specified Description: The issue is related to a path traversal vulnerability in a special function of the ManageEngine Mobile Device ManagerMDM APP. This vulnerability can be...
PT-2023-27917 · Zoho · Manageengine Mobile Device Manager
Name of the Vulnerable Software and Affected Versions: NCSIST ManageEngine Mobile Device ManagerMDM APP affected versions not specified Description: The issue is related to a path traversal vulnerability in a special function of the NCSIST ManageEngine Mobile Device ManagerMDM APP. This...
Arid Viper disguising mobile spyware as updates for non-malicious Android applications
Since April 2022, Cisco Talos has been tracking a malicious campaign operated by the espionage-motivated Arid Viper advanced persistent threat APT group targeting Arabic-speaking Android users. In this campaign, the actors leverage custom mobile malware, also known as Android Package files APKs, ...
CVE-2023-21390
In Sim, there is a possible way to evade mobile preference restrictions due to a permission bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-21390
In Sim, there is a possible way to evade mobile preference restrictions due to a permission bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-21390
In Sim, there is a possible way to evade mobile preference restrictions due to a permission bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-21390
CVE-2023-21390 is described across multiple sources as a permission bypass in the Android environment related to a component labeled as Sim, allowing evasion of mobile-preference restrictions and enabling local privilege escalation without requiring extra execution privileges. Exploitation is rep...
This Cryptomining Tool Is Stealing Secrets
Plus: Details emerge of a US government social media-scanning tool that flags “derogatory” speech, and researchers find vulnerabilities in the global mobile communications network...
Researchers Uncover Wiretapping of XMPP-Based Instant Messaging Service
New findings have shed light on what's said to be a lawful attempt to covertly intercept traffic originating from jabber.ru aka xmpp.ru, an XMPP-based instant messaging service, via servers hosted on Hetzner and Linode a subsidiary of Akamai in Germany. "The attacker has issued several new TLS...
The vulnerability of the web page rendering modules in Safari’s WebKit browser for iOS, watchOS, tvOS, iPadOS operating systems allows attackers to execute arbitrary code.
The vulnerability of the Web page rendering modules in WebKit of Safari browsers for iOS, watchOS, tvOS, and iPadOS lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
mobile-witten.de Improper Access Control vulnerability OBB-3766245
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
How to catch a wild triangle
In the beginning of 2023, thanks to our Kaspersky Unified Monitoring and Analysis Platform KUMA SIEM system, we noticed suspicious network activity that turned out to be an ongoing attack targeting the iPhones and iPads of our colleagues. The moment we understood that there was a clear pattern in...