CVE-2023-5522

Mattermost Mobile is affected by CVE-2023-5522, where the app fails to limit the maximum number of Markdown elements in a post. This allows an attacker to send a post containing hundreds of emojis to a channel, freezing the mobile app for users viewing that channel. Root cause: excessive Markdown...

PT-2023-32152 · Mattermost · Mattermost Mobile

Name of the Vulnerable Software and Affected Versions: Mattermost Mobile affected versions not specified Description: The issue allows an attacker to send a post with hundreds of emojis to a channel, which can freeze the mobile app of users when viewing that particular channel. This occurs becaus...

Mattermost Security Vulnerabilities

Mattermost is an open source collaboration platform from US-based Mattermost. Mattermost Mobile suffers from a security vulnerability that stems from a failure to limit the maximum number of Markdown elements in a post, allowing an attacker to send a post containing hundreds of emojis to a...

NLB mKlik Makedonija 3.3.12 SQL Injection Vulnerability

NLB mKlik Makedonija 3.3.12 SQL Injection Vendor: NLB Banka AD Skopje Product web page: https://www.nlb.mk Google Play: https://play.google.com/store/apps/details?id=hr.asseco.android.jimba.tutunskamk.production Affected version: 3.3.12 Summary: NLB mKlik е мобилна апликација наменета за физички...

NLB mKlik Makedonija 3.3.12 SQL Injection

NLB mKlik Makedonija 3.3.12 SQL Injection Vendor: NLB Banka AD Skopje Product web page: https://www.nlb.mk Google Play: https://play.google.com/store/apps/details?id=hr.asseco.android.jimba.tutunskamk.production Affected version: 3.3.12 Summary: NLB mKlik е мобилна апликација наменета за физички...

The vulnerability of the MobileStorageMounter component for operating systems such as tvOS, iOS, iPadOS, and watchOS allows attackers to escalate their privileges.

The vulnerability of the MobileStorageMounter component for operating systems such as tvOS, iOS, iPadOS, and watchOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Introducing the Microsoft AI Bug Bounty Program featuring the AI-powered Bing experience

Today at BlueHat we announced the new Microsoft AI bug bounty program with awards up to $15,000. This new bounty program features the AI-powered Bing experience as the first in scope product. The following products and integrations are eligible for bounty awards: AI-powered Bing experiences on...

Biltay Technology Scienta SQL Injection Vulnerability

Biltay Technology Scienta is a mobile application from Biltay Technology designed for enterprise management. A SQL injection vulnerability exists in versions prior to Biltay Technology Scienta v.1390 that stems from incorrect neutralization of special elements used in SQL commands...

Line Trust management vulnerabilities

Line is the instant messaging platform of Line Corporation. A security vulnerability exists in Line prior to version 13.16.0 iOS, which stems from a lack of TLS certificate validation for log transfers in the Finance module of the Line Client...

The vulnerability of the software implementation of the GTP protocol (GPRS Tunneling Protocol) for Open5GS mobile communication networks lies in the lack of authentication for a critical function, allowing attackers to access confidential information.

The vulnerability of the software implementation of the GTP protocol GPRS Tunneling Protocol for mobile communication networks based on Open5GS is related to the absence of authentication for the critical function. Exploiting this vulnerability can allow a malicious actor to gain access to...

Mobile Address Bar Changer <= 3.0 - Settings Update via CSRF

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

Biltay Technology Scienta SQL Injection Vulnerability

Biltay Technology Scienta is a mobile application from Biltay Technology designed for enterprise management. A SQL injection vulnerability exists in versions prior to Biltay Technology Scienta v.1390 that stems from incorrect neutralization of special elements used in SQL commands...

IoT Secure Development Guide

Introduction This guide deals with threat modelling and early stages of development so that security issues and controls are identified before committing to manufacturing. Current attack methods, and the pitfalls we find in embedded designs, have been highlighted so that a finished product is as...

The vulnerability of the AppleMobileFileIntegrity component in operating systems such as iPadOS, tvOS, iOS, and watchOS allows attackers to circumvent existing security restrictions.

The vulnerability of the AppleMobileFileIntegrity component in operating systems such as iPadOS, tvOS, iOS, and watchOS is related to the lack of protection for service data. It is also associated with deficiencies in access control. Exploiting this vulnerability could allow attackers to circumve...

Spoofing Attack

chromium is vulnerable to Spoofing Attack. The vulnerability exists due to the inappropriate implementation in Custom Mobile Tabs in the library, which allows an attacker to spoof security UI via a maliciously crafted HTML page...

Information disclosure

HP LIFE Android Mobile application is potentially vulnerable to escalation of privilege and/or information disclosure...

CVE-2023-5365

Technical details about CVE-2023-5365 are not publicly available in the provided documents. Please monitor for updates from HP, Red Hat, and CVE lists for affected components, impact, and fixes.

CVE-2023-5365 HP LIFE Android Mobile – Potential Escalation of Privilege, Information Disclosure

HP LIFE Android Mobile application is potentially vulnerable to escalation of privilege and/or information disclosure...

HP LIFE Android Mobile – Potential Escalation of Privilege, Information Disclosure

HP LIFE Android Mobile application is potentially vulnerable to escalation of privilege and/or information disclosure. Update your application...

Researchers Link DragonEgg Android Spyware to LightSpy iOS Surveillanceware

New findings have identified connections between an Android spyware called DragonEgg and another sophisticated modular iOS surveillanceware tool named LightSpy. DragonEgg, alongside WyrmSpy aka AndroidControl, was first disclosed by Lookout in July 2023 as a strain of malware capable of gathering...