PT-2022-15216 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a potential memory leak in the modem during the processing of NSA RRC Reconfiguration with an invalid Radio Bearer Config. This affects various Snapdrago...

PT-2022-10427 · Qualcomm · Snapdragon Mobile +1

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Connectivity and Snapdragon Mobile affected versions not specified Description: The issue concerns possible address manipulation from APP-NS while APP-S is configuring an RG where it tries to merge the address ranges in...

PT-2022-15211 · Qualcomm · Snapdragon Connectivity +2

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to out of bounds writing while verifying device IDs due to an improper length check before copying the data. This affects Snapdragon Compute, Snapdragon...

Careless Errors in Hundreds of Apps Could Expose Troves of Data

Researchers found that mobile applications contain keys that could provide access to both user information and private files from unconnected apps...

Interested in Reducing Your Risk Profile? Jamf Has a Solution for That

The threat landscape has changed dramatically over the past decade. While cybercriminals continue to look for new ways to gain access to networks and steal sensitive information, the mobile attack surface is also expanding. Mobile devices are not only becoming more powerful but also more vulnerab...

The vulnerability of the software tools for monitoring and managing the ICONICS Suite, GENESIS64, Hyper Historian, Energy AnalytiX, and MobileHMI processes lies in the fact that passwords are stored in an unencrypted form, allowing attackers to compromise the protected information.

The vulnerability of the software tools for monitoring and managing the ICONICS Suite, GENESIS64, Hyper Historian, Energy AnalytiX, and MobileHMI processes lies in the storage of passwords in an unencrypted form. Exploiting this vulnerability can allow a perpetrator to disclose the protected...

FTC Sues Data Broker Over Selling Location Data for Hundreds of Millions of Phones

The U.S. Federal Trade Commission FTC on Monday said it filed a lawsuit against Kochava, a location data broker, for collecting and selling precise geolocation data gathered from consumers' mobile devices. The complaint alleges that the U.S. company amasses a "wealth of information" about users b...

Razor 跨站脚本漏洞

Razor is a powerful open source mobile analytics system open-sourced by Cobub in China. A security vulnerability exists in Razor version v0.8.0, which originated from the discovery of a cross-site scripting XSS vulnerability via the function uploadchannel...

CVE-2022-35962

Zulip is an open source team chat and Zulip Mobile is an app for iOS and Andriod users. In Zulip Mobile through version 27.189, a crafted link in a message sent by an authenticated user could lead to credential disclosure if a user follows the link. A patch was released in version 27.190...

Information disclosure

Zulip is an open source team chat and Zulip Mobile is an app for iOS and Andriod users. In Zulip Mobile through version 27.189, a crafted link in a message sent by an authenticated user could lead to credential disclosure if a user follows the link. A patch was released in version 27.190...

CVE-2022-35962 Crafted link in Zulip message can cause disclosure of credentials

Zulip is an open source team chat and Zulip Mobile is an app for iOS and Andriod users. In Zulip Mobile through version 27.189, a crafted link in a message sent by an authenticated user could lead to credential disclosure if a user follows the link. A patch was released in version 27.190...

CVE-2022-35962

CVE-2022-35962 affects Zulip Mobile up to version 27.189. A crafted link in a message sent by an authenticated user could disclose credentials when a recipient follows the link. A fix was released in version 27.190. Affected: Zulip Mobile (iOS/Android).

CVE-2022-35962 Crafted link in Zulip message can cause disclosure of credentials

Zulip is an open source team chat and Zulip Mobile is an app for iOS and Andriod users. In Zulip Mobile through version 27.189, a crafted link in a message sent by an authenticated user could lead to credential disclosure if a user follows the link. A patch was released in version 27.190...

PT-2022-23061 · Unknown · Zulip Mobile

Name of the Vulnerable Software and Affected Versions: Zulip Mobile versions 27.189 and earlier Description: A crafted link in a message sent by an authenticated user could lead to credential disclosure if a user follows the link. Recommendations: For Zulip Mobile versions 27.189 and earlier,...

Okta Hackers Behind Twilio and Cloudflare Attacks Hit Over 130 Organizations

The threat actor behind the attacks on Twilio and Cloudflare earlier this month has been linked to a broader phishing campaign aimed at 136 organizations that resulted in a cumulative compromise of 9,931 accounts. The activity has been condemned 0ktapus by Group-IB because the initial goal of the...

CVE-2022-36496

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetMobileAPInfoById...

XSS Vulnerability in Beijing Century Super Star Information Technology Development Limited Liability Company's Mobile Library Public Library Version

Mobile Library Public Library Edition is a mobile application personalized for public library patrons. There is an XSS vulnerability in Beijing Century Super Star Information Technology Development Limited Liability Company's Mobile Library Public Map Edition, which can be exploited by attackers ...

PT-2022-23802 · H3C · H3C H200

Name of the Vulnerable Software and Affected Versions: H3C H200 version H200V100R004 Description: A stack overflow issue was discovered via the function SetMobileAPInfoById. This issue affects the H3C H200 device. Recommendations: For H3C H200 version H200V100R004, consider disabling the...

XSS Vulnerability in the Mobile Library of Beijing Century Super Star Information Technology Development Co.

Mobile Library is a professional mobile reading software specially made for all libraries. There is an XSS vulnerability in Beijing Century Super Star Information Technology Development Limited Liability Company's Mobile Library, which can be exploited by attackers to obtain sensitive information...

H3C H200 缓冲区错误漏洞

H3C H200 is a kind of full Gigabit Home Intelligent Hub from China's Xinhua San H3C. A security vulnerability exists in the H3C H200 H200V100R004 version, which stems from a stack overflow issue in the SetMobileAPInfoById method...