20563 matches found
WordPress WP Mobile Menu plugin <= 2.8.4.3 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin WP Mobile Menu versions = 2.8.4.3...
WordPress WP Mobile Menu Plugin <= 2.8.4.3 is vulnerable to Cross Site Request Forgery (CSRF)
Software WP Mobile Menu Type Plugin Vulnerable versions = 2.8.4.3 Fixed in 2.8.4.4 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37274 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 83c4bad72872 Credits Dhabaleshwar Das...
New “Snowblind” Android Malware Steals Logins, Bypasses Security Features
New Android Malware "Snowblind" bypasses security! It exploits Linux's seccomp to launch scalable attacks and steal your data. Download safely, update your device, and consider mobile security to stay protected...
CVE-2024-6206
A security vulnerability has been identified in HPE Athonet Mobile Core software. The core application contains a code injection vulnerability where a threat actor could execute arbitrary commands with the privilege of the underlying container leading to complete takeover of the target system...
CVE-2024-6206
A security vulnerability has been identified in HPE Athonet Mobile Core software. The core application contains a code injection vulnerability where a threat actor could execute arbitrary commands with the privilege of the underlying container leading to complete takeover of the target system...
Malicious code in mobile-kohana (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2668 Malicious code in mobile-kohana (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2667 Malicious code in mobile-auth-library-react-native (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mobile-auth-library-react-native (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in icomm-mobile (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2500 Malicious code in icomm-mobile (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in gcommon-ui-mobile (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2413 Malicious code in gcommon-ui-mobile (npm)
--- -= Per source details. Do not edit below this line.=-...
Hewlett Packard Enterprise Athonet Mobile Core Security Vulnerability
Hewlett Packard Enterprise Athonet Mobile Core is a mobile core network technology solution from Hewlett Packard Enterprise. A security vulnerability exists in Hewlett Packard Enterprise Athonet Mobile Core that stems from a code injection vulnerability that could allow an attacker to execute...
PT-2024-37451 · Hewlett Packard · Hpe Athonet Mobile Core
Name of the Vulnerable Software and Affected Versions: HPE Athonet Mobile Core software affected versions not specified Description: A security issue has been identified in the core application of HPE Athonet Mobile Core software, where a code injection vulnerability allows a threat actor to...
A week in security (June 17 – June 23)
Last week on Malwarebytes Labs: Microsoft Recall delayed after privacy and security concerns Almost everything you always wanted to know about cybersecurity, but were too afraid to ask, with Tjitske de Vries: Lock and Code S05E13 43% of couples experience pressure to share logins and locations,...
The vulnerability of the Acrobat Mobile Sign software in handling electronic signatures and document management is related to deficiencies in the authentication process. This allows unauthorized users to circumvent existing security restrictions and gain unauthorized access to protected information.
The vulnerability of the Acrobat Mobile Sign software for working with electronic signatures and document management is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and gain unauthorized acces...
The vulnerability of the Acrobat Mobile Sign software for working with electronic signatures and document management lies in the incorrect restriction on the path to the restricted catalog. This allows attackers to circumvent existing security restrictions and gain unauthorized access to protected information.
The vulnerability of the Acrobat Mobile Sign software for working with electronic signatures and document management is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability could allow a perpetrator to bypass existing security...
CVE-2024-35537
TVS Motor Company Limited TVS Connect Android v4.6.0 and IOS v5.0.0 was discovered to insecurely handle the RSA key pair, allowing attackers to possibly access sensitive information via decryption...
Was T-Mobile compromised by a zero-day in Jira?
A moderator of the notorious data breach trading platform BreachForums is offering data for sale they claim comes from a data breach at T-Mobile. The moderator, going by the name of IntelBroker, describes the data as containing source code, SQL files, images, Terraform data, t-mobile.com...