BouldSpy Android Spyware: Iranian Government's Alleged Tool for Spying on Minority Groups

A new Android surveillanceware possibly used by the Iranian government has been used to spy on over 300 individuals belonging to minority groups. The malware, dubbed BouldSpy, has been attributed with moderate confidence to the Law Enforcement Command of the Islamic Republic of Iran FARAJA...

Qualcomm 芯片代码问题漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuitry mainly semiconductor devices, but also passive components, etc. and is manufactured from time to time on the surface of semiconductor wafers. A security vulnerability exists in some Qualcomm products that ste...

MAL-2023-527 Malicious code in ing-orange-lu-luxtrust-oaw-mobile-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c47e898a8d28683ffbebd031a0d10c1a1d610661c8b876689bdc85931ceda9f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-2397

A vulnerability, which was classified as problematic, has been found in SourceCodester Simple Mobile Comparison Website 1.0. This issue affects some unknown processing of the file classes/Master.php?f=savefield. The manipulation of the argument Field Name leads to cross site scripting. The attack...

CVE-2023-2397

CVE-2023-2397 affects SourceCodester Simple Mobile Comparison Website 1.0. The vulnerability is an XSS issue in the endpoint classes/Master.php?f=save_field where the Field Name parameter can be manipulated to trigger cross-site scripting, potentially exploitable remotely. Public disclosure is no...

CVE-2023-2397 SourceCodester Simple Mobile Comparison Website cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Simple Mobile Comparison Website 1.0. This issue affects some unknown processing of the file classes/Master.php?f=savefield. The manipulation of the argument Field Name leads to cross site scripting. The attack...

Simple Mobile Comparison Website 跨站脚本漏洞

Simple Mobile Comparison Website is a mobile comparison website by Carlo Montero personal developer. It allows users to compare the specifications of smartphones. A cross-site scripting vulnerability exists in version 1.0 of Simple Mobile Comparison Website, which stems from cross-site scripting...

@21cnfe/onekit-mp-cli (2.0.1), @alitajs/aconsole (>=2.8.2, <=2.9.0) +36 more potentially affected by CVE-2023-30363 via vconsole (>=3.2.0, <=3.15.0)

vconsole NPM version =3.2.0, =2.8.2, =2.8.2, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.2, =0.0.8, =0.0.1, =0.1.0, =0.3.3 and more Source cves: CVE-2023-30363 Source advisory: OSV:GHSA-F737-3FH6-JF6W...

MAL-2023-1214 Malicious code in inter-mobile-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7202781ee0df940e4433cfd643ce8bca065164302e9a8ae33e2cda7590a6bdb6 The OpenSSF Package Analysis project identified 'inter-mobile-bridge' @ 1.0.8 npm as malicious. It is considered malicious because: - The packag...

mobile.ems.no Cross Site Scripting vulnerability OBB-3274323

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

4help-shared (>=1.0.8, <=1.0.15), @akalli/components (>=0.0.1, <=0.2.3) +245 more potentially affected by CVE-2023-28131 via expo (>=45.0.0, <=47.0.14)

expo NPM version =45.0.0, =1.0.8, =0.0.1, =0.0.1, =0.0.3, =2.5.0, =0.0.0, =1.2.0, =1.0.0, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.0.7 and more Source cves: CVE-2023-28131 Source advisory: SNYK:JS-EXPO-13559201...

Mitel MiCollab Authentication Error Vulnerability

Mitel MiCollab is a mobile application from Mitel Canada that provides voice, video, messaging, audio conferencing and team collaboration for employees. The Mitel MiCollab suffers from an authentication error vulnerability that stems from a faulty authentication control in the Web conferencing...

Vulnerabilities of operating systems iOS and iPadOS, related to lack of access control, allow attackers to gain unauthorized access to protected information.

The vulnerabilities of operating systems iOS and iPadOS are related to lack of access control. Exploiting these vulnerabilities can allow attackers to gain unauthorized access to protected information through special features...

Introducing the Malwarebytes Admin app: Endpoint security at your fingertips

If youre on the beach sipping piña coladas, the last thing you probably want to do is rush to your desktop and address a critical security issue. And yet, this is the reality for many IT security professionals today. Regardless of the time or current location, security pros are expected to drop...

mobile.internet.ha.cz Cross Site Scripting vulnerability OBB-3267579

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Fortinet FortiClientWindows Elevation of Privilege Vulnerability

Fortinet FortiClientWindows is a Windows-based mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. An elevation of privilege...

CVE-2023-1723

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Veragroup Mobile Assistant allows SQL Injection.This issue affects Mobile Assistant: before 21.S.2343...

CVE-2023-1723

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Veragroup Mobile Assistant allows SQL Injection. This issue affects Mobile Assistant: before 21.S.2343...

CVE-2023-1723

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Veragroup Mobile Assistant allows SQL Injection. This issue affects Mobile Assistant: before 21.S.2343...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Veragroup Mobile Assistant allows SQL Injection.This issue affects Mobile Assistant: before 21.S.2343...