20626 matches found
Command injection
There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SETDEVICELED interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands...
CVE-2023-25649
The CVE-2023-25649 entry concerns the ZTE MF286R mobile internet router. A command injection exists in the SET_DEVICE_LED interface due to insufficient validation of the input parameter, allowing an authenticated attacker to execute arbitrary commands. Public sources describe that the vulnerabili...
CVE-2023-25649 OS Command Injection Vulnerability in a Mobile Internet Product of ZTE
There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SETDEVICELED interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands...
Malwarebytes acquires Cyrus Security
Today, I am absolutely thrilled to share some exciting news: Malwarebytes is officially welcoming Cyrus Security into our family. This acquisition signifies an exciting chapter in our journey, and I wanted to share why this development is so special, and what it means for the millions who trust...
The Internet Is Turning Into a Data Black Box. An ‘Inspectability API’ Could Crack It Open
Unlike web browsers, mobile apps increasingly make it difficult or impossible to see what companies are really doing with your data. The answer? An inspectability API...
How to bypass EPA check on mobile device using nfactor Authentication
This article describe how to bypass EPA check on Mobile device using nFactor Authentication.Mobile devices will not run the EPA scan if you configure Pre-authentication for EPA scan. Mobile device can always hit policy and it will fail...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices. No information about this vulnerability is available at this time, so please stay tuned to...
Part III: Implementing Effective Cyber Security Metrics that Reduce Risk Realistically
We outlined some critical cybersecurity metrics in Part I of this three-part blog series. In the final blog post, we will delve into three crucial aspects outlined in Josh’s article: tactical metrics for operational teams, strategic metrics for leadership, and the metrics addressing the...
Improper access control
There is a permission and access control vulnerability in some ZTE mobile phones. Due to improper access control, applications in mobile phone could monitor the touch event...
CVE-2023-25647 Permission and Access Control Vulnerability in Some ZTE Mobile Phones
There is a permission and access control vulnerability in some ZTE mobile phones. Due to improper access control, applications in mobile phone could monitor the touch event...
CVE-2023-25647
CVE-2023-25647 affects ZTE mobile phones where improper access control allows apps on the device to monitor touch events. Affected software/hardware: ZTE mobile phones (details not specifying models/versions). Root cause: permission and access control flaw enabling touch-event observation by appl...
The vulnerability of Windows Mobile Device Management for Windows operating systems allows attackers to escalate their privileges.
The vulnerability of Windows Mobile Device Management for Windows operating systems relates to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...
ZTE mobile phones 安全漏洞
The ZTE cell phone is a network device from China's ZTE Corporation ZTE. ZTE's cell phone devices. A security vulnerability exists in ZTE mobile phones that stems from the presence of improper access control. An attacker could exploit the vulnerability to monitor events through an application in...
PT-2023-20207 · Zte · Zte Mobile Phones
Name of the Vulnerable Software and Affected Versions: ZTE mobile phones affected versions not specified Description: There is a permission and access control issue in some ZTE mobile phones, allowing applications to monitor touch events due to improper access control. Recommendations: At the...
HPE Aruba Networking Virtual Intranet Access 安全漏洞
Hewlett Packard Enterprise Aruba Networking Virtual Intranetxa0Access is part of a remote networking solution for remote workers and mobile users from Hewlett Packard Enterprise USA. A security vulnerability exists in HPE Aruba Networking Virtual Intranet Access that originated from a vulnerabili...
Eliminate Advanced Endpoint Analysis scans on Mobile devices/iOS.
We have a pre-epa + ldap as the authentication method. Since we have EPA as pre-authentication when we try to access via the mobile devices such as Android/iPhone or iOS and other devices we won’t be able to access. As we know that EPA scan is not supported on mobile devices or iOS, therefore we...
Apple iOS and iPadOS Security Vulnerabilities
Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 16.4 and iPadOS version 16.4, which originates from a visit to a...
Private Mobile Connectivity: More Visibility, Security, and Control
...
