CVE-2022-40785

Unsanitized input when setting a locale file leads to shell injection in mIPC camera firmware 5.3.1.2003161406. This allows an attacker to gain remote code execution on cameras running the firmware when a victim logs into a specially crafted mobile app...

mIPC camera 安全漏洞

The mIPC camera is a series of cameras from mIPC. A security vulnerability exists in mIPC camera firmware version 5.3.1.2003161406. An attacker exploiting this vulnerability could obtain remote code execution on the camera while the victim is logged into a specially crafted mobile application...

CVE-2022-30124

An improper authentication vulnerability exists in Rocket.Chat Mobile App 4.14.1.22788 that allowed an attacker with physical access to a mobile device to bypass local authentication PIN code...

CVE-2022-30124

An improper authentication vulnerability exists in Rocket.Chat Mobile App 4.14.1.22788 that allowed an attacker with physical access to a mobile device to bypass local authentication PIN code...

Authentication flaw

An improper authentication vulnerability exists in Rocket.Chat Mobile App 4.14.1.22788 that allowed an attacker with physical access to a mobile device to bypass local authentication PIN code...

CVE-2022-30124

An improper authentication vulnerability exists in Rocket.Chat Mobile App 4.14.1.22788 that allowed an attacker with physical access to a mobile device to bypass local authentication PIN code...

CVE-2022-30124

An improper authentication vulnerability exists in Rocket.Chat Mobile App 4.14.1.22788 that allowed an attacker with physical access to a mobile device to bypass local authentication PIN code...

CVE-2022-30124

Rocket.Chat Mobile App prior to version 4.14.1.22788 has an improper authentication vulnerability that allows an attacker with physical access to bypass local authentication (PIN). The issue stems from incorrect authentication logic and can be exploited by manipulating the device’s system time to...

Iran’s Internet Shutdown Hides a Deadly Crackdown

Amid protests against the killing of Mahsa Amini, authorities have cut off mobile internet, WhatsApp, and Instagram. The death toll continues to rise...

Fake Indian Banking Rewards Apps Targeting Android Users with Info-stealing Malware

An SMS-based phishing campaign is targeting customers of Indian banks with information-stealing malware that masquerades as a rewards application. The Microsoft 365 Defender Research Team said that the messages contain links that redirect users to a sketchy website that triggers the download of t...

Rocket.Chat 授权问题漏洞

Rocket.Chat is an open source team chat software. A security vulnerability exists in Rocket.Chat Mobile App versions prior to 4.14.1.22788, which stems from incorrect authentication and can be exploited by an attacker to bypass local authentication...

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2022-66020)

Adobe Experience Manager AEM is a content management solution from Adobe that can be used to build websites, mobile applications and forms. The solution supports mobile content management, marketing and sales campaign management, and multi-site management, etc. Adobe Experience Manager is...

PT-2022-20014 · Rocket.Chat · Rocket.Chat Mobile

Name of the Vulnerable Software and Affected Versions: Rocket.Chat Mobile App versions prior to 4.14.1.22788 Description: An issue exists where an attacker with physical access to a mobile device can bypass local authentication, such as a PIN code, due to improper authentication. Recommendations:...

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2022-66019)

Adobe Experience Manager AEM is a content management solution from Adobe that can be used to build websites, mobile applications and forms. The solution supports mobile content management, marketing and sales campaign management, and multi-site management, etc. Adobe Experience Manager is...

PT-2022-23690 · Whatsapp · Whatsapp

Name of the Vulnerable Software and Affected Versions: WhatsApp affected versions not specified Description: An integer overflow in WhatsApp could result in remote code execution in an established video call. The issue affects WhatsApp mobile apps. Recommendations: At the moment, there is no...

mobileweldingservices.org Cross Site Scripting vulnerability OBB-2940440

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Huawei EMUI and Magic UI buffer overflow vulnerability

Huawei EMUI/Magic UI is an Android-based mobile operating system developed by Huawei China.Huawei EMUI/Magic UI is vulnerable to a buffer overflow vulnerability that originates from a boundary error in the video framework when handling untrusted input. A remote attacker could exploit the...

Mobile Mouse RCE

This module utilizes the Mobile Mouse Server by RPA Technologies, Inc protocol to deploy a payload and run it from the server. This module will only deploy a payload if the server is set without a password default. Tested against 3.6.0.4, current at the time of module writing Module Options msf u...

Huawei EMUI and Huawei Magic UI Out-of-Bounds Write Vulnerability

Huawei EMUI is a mobile operating system based on Android development.Huawei Magic UI is a smart device operating system. Huawei EMUI and Magic UI have an out-of-bounds write vulnerability that can be exploited by an attacker to cause the system to reboot...

Mobile Mouse 3.6.0.4 - Remote Code Execution (RCE)

Exploit Title: Mobile Mouse 3.6.0.4 - Remote Code Execution RCE Date: Aug 09, 2022 Exploit Author: Chokri Hammedi Vendor Homepage: https://mobilemouse.com/ Software Link: https://www.mobilemouse.com/downloads/setup.exe Version: 3.6.0.4 Tested on: Windows 10 Enterprise LTSC Build 17763 !/usr/bin/e...