Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that stems from a configuration issue in some cell phone products. An attacker exploited the...

BEApps Mobile PC Keyboard 访问控制错误漏洞

BEApps Mobile PC Keyboard is an application from BEApps Mobile. Type what you want on your phone and it will automatically type it on your computer. A security vulnerability exists in versions prior to BEApps Mobile PC Keyboard v30, which stems from a vulnerability that allows an unauthenticated...

BEApps Mobile PC Keyboard 安全漏洞

BEApps Mobile PC Keyboard is an application from BEApps Mobile. Type what you want on your phone and it will automatically type it on your computer. A security vulnerability exists in BEApps Mobile PC Keyboard, which stems from the fact that its cleartext allows an attacker to view all data via a...

Implementing Zero Trust access to business data on BYOD with Trustd MTD and Microsoft Entra

This blog post is part of the Microsoft Intelligent Security Association guest blog series. Learn more about MISA. As more employees work remotely on a variety of devices and networks, businesses need a security model that supports this new operational efficiency. An expanding perimeter poses...

Implementing Zero Trust access to business data on BYOD with Trustd MTD and Microsoft Entra

This blog post is part of the Microsoft Intelligent Security Association guest blog series. Learn more about MISA. As more employees work remotely on a variety of devices and networks, businesses need a security model that supports this new operational efficiency. An expanding perimeter poses...

Drop What You're Doing and Update iOS, Android, and Windows

Plus: Major patches dropped this month for Chrome, Firefox, VMware, Cisco, Citrix, and SAP...

U.S. Govt. Apps Bundled Russian Code With Ties to Mobile Malware Developer

A recent scoop by Reuters revealed that mobile apps for the U.S. Army and the Centers for Disease Control and Prevention CDC were integrating software that sends visitor data to a Russian company called Pushwoosh, which claims to be based in the United States. But that story omitted an important...

CVE-2022-41732

IBM Maximo Mobile 8.7 and 8.8 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 237407...

CVE-2022-41732

IBM Maximo Mobile 8.7 and 8.8 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 237407...

Code injection

IBM Maximo Mobile 8.7 and 8.8 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 237407...

CVE-2022-41732

IBM Maximo Mobile 8.7 and 8.8 are affected by CVE-2022-41732 due to storing user credentials in plaintext, enabling local reading of credentials. Affected products include IBM Maximo Mobile in the Maximo Application Suite (MAS) versions 8.7 and 8.8, and IBM Maximo Mobile for EAM in MAS 8.7 and 8....

IBM Maximo Mobile 安全漏洞

IBM Maximo Mobile is a generation of mobile application platform from International Business Machines IBM. A security vulnerability exists in IBM Maximo Mobile versions 8.7 and 8.8 that stems from storing user credentials in plaintext...

PT-2022-26048 · Ibm · Ibm Maximo Mobile

Name of the Vulnerable Software and Affected Versions: IBM Maximo Mobile versions 8.7 through 8.8 Description: The issue allows a local user to read user credentials stored in plain clear text. Recommendations: For IBM Maximo Mobile versions 8.7 through 8.8, update to a version that stores user...

mobile-shop.co.il Cross Site Scripting vulnerability OBB-3069446

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

IT threat evolution in Q3 2022. Mobile statistics

IT threat evolution in Q3 2022 IT threat evolution in Q3 2022. Non-mobile statistics IT threat evolution in Q3 2022. Mobile statistics These statistics are based on detection verdicts of Kaspersky products received from users who consented to providing statistical data. Quarterly figures Accordin...

CVE-2022-3980

An XML External Entity XEE vulnerability allows server-side request forgery SSRF and potential code execution in Sophos Mobile managed on-premises between versions 5.0.0 and 9.7.4...

CVE-2022-3980

An XML External Entity XEE vulnerability allows server-side request forgery SSRF and potential code execution in Sophos Mobile managed on-premises between versions 5.0.0 and 9.7.4...

Server side request forgery (ssrf)

An XML External Entity XEE vulnerability allows server-side request forgery SSRF and potential code execution in Sophos Mobile managed on-premises between versions 5.0.0 and 9.7.4...

CVE-2022-3980

An XML External Entity XEE vulnerability allows server-side request forgery SSRF and potential code execution in Sophos Mobile managed on-premises between versions 5.0.0 and 9.7.4...

Sophos Mobile 代码问题漏洞

Sophos Mobile is a secure Unified Endpoint Management UEM solution from Sophos UK. A security vulnerability exists in Sophos Mobile versions 5.0.0 through 9.7.4, which stems from an XML External Entity XEE issue that allows server-side request forgery SSRF and potential code execution...