CVE-2021-30328

CVE-2021-30328 describes a possible assertion caused by improper validation of an invalid NR CSI-IM resource configuration in Qualcomm Snapdragon Auto, Compute, Connectivity, Industrial IOT, and Mobile products. Root cause: incorrect validation of NR CSI-IM resource configuration. Impact: network...

CVE-2021-1950

Root cause: improper clearing of secure memory between authenticated users in Qualcomm Snapdragon components. Affected: Snapdragon Auto, Compute, Connectivity, Industrial IOT, Mobile, and Wired Infrastructure/Networking platforms. Impact: face authentication bypass (local access, high confidentia...

SAP Mobile Platform SDK Resource Management Error Vulnerability

SAP Mobile Platform is a user-friendly connectivity platform for building and deploying mobile apps.SAP NetWeaver is an integrated service-oriented application platform from SAP. The platform provides a development and runtime environment for SAP applications. A resource management error...

PT-2022-10424 · Qualcomm · Snapdragon Connectivity +7

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer IOT affected versions not specified Snapdragon Industrial IOT...

PT-2022-9991 · Qualcomm · Snapdragon Connectivity +4

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Industrial IOT affected versions not specified Snapdragon Mobile affected...

The Last Cell Tower in Mariupol

For weeks, a lone mobile base station allowed thousands in the besieged Ukrainian city to stay connected—until Russian troops arrived...

Apple iOS和Apple iPadOS 缓冲区错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. A buffer error vulnerability exists in Apple iOS and Apple iPadOS. A local attacker can run a specially crafted...

CVE-2021-39782

In Telephony, there is a possible unauthorized modification of the PLMN SIM file due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-45490

The client applications in 3CX on Windows, the 3CX app for iOS, and the 3CX application for Android through 2022-03-17 lack SSL certificate validation...

The vulnerability of the access control tool for corporate applications and Microsoft Intune Company Portal for iOS is related to security configuration errors, allowing a perpetrator to circumvent security restrictions.

The vulnerability of the access control mechanism for corporate applications and Microsoft Intune Company Portal for iOS is related to security configuration errors. Exploiting this vulnerability could allow a perpetrator to circumvent security restrictions...

CVE-2021-44751

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website attached with USSD code in JavaScript or iFrame can trigger dialer application from F-Secure browser which can be exploited by an attacker to send unwanted USSD messages or perform unwanted calls. In mos...

Experts Uncover Campaign Stealing Cryptocurrency from Android and iPhone Users

Researchers have blown the lid off a sophisticated malicious scheme primarily targeting Chinese users via copycat apps on Android and iOS that mimic legitimate digital wallet services to siphon cryptocurrency funds. "These malicious apps were able to steal victims' secret seed phrases by...

DuckDuckGo application 安全漏洞

Duckduckgo DuckDuckGo application is a privacy web browser application for mobile by DuckDuckGo Duckduckgo, Inc. A security vulnerability exists in DuckDuckGo browser 7.64.4 on iOS, which stems from incorrect handling of the JavaScript window.open function used to open a secondary browser window...

Trend Micro Virtual Mobile Infrastructure 6.0.1278 Denial Of Service

Exploit Title: Trend Micro Virtual Mobile Infrastructure TMVMI version 6 - Denial of Service PoC Date: 24/03/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://www.trendmicro.com/ Software Link: App Store for iOS devices Version: 6.0.1278 Tested: iPhone 6 iOS 12.4.7 Vulnerability Type:...

Trend Micro Virtual Mobile Infrastructure 6.0.1278 Denial Of Service Vulnerability

Exploit Title: Trend Micro Virtual Mobile Infrastructure TMVMI version 6 - Denial of Service PoC Date: 24/03/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://www.trendmicro.com/ Software Link: App Store for iOS devices Version: 6.0.1278 Tested: iPhone 6 iOS 12.4.7 Vulnerability Type:...

CVE-2020-20093

The Facebook Messenger app for iOS 227.0 and prior and Android 228.1.0.10.116 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages...

CVE-2020-20094

Instagram iOS 106.0 and prior and Android 107.0.0.11 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages...

iRZ Mobile Router - CSRF to RCE

Exploit Title: iRZ Mobile Router - CSRF to RCE Google Dork: intitle:"iRZ Mobile Router" Date: 2022-03-18 Exploit Author: Stephen Chavez & Robert Willis Vendor Homepage: https://en.irz.ru/ Software Link: https://github.com/SakuraSamuraii/ez-iRZ Version: Routers through 2022-03-16 Tested on: RU21,...

iRZ Mobile Router Cross Site Request Forgery / Remote Code Execution

Exploit Title: iRZ Mobile Router - CSRF to RCE Google Dork: intitle:"iRZ Mobile Router" Date: 2022-03-18 Exploit Author: Stephen Chavez & Robert Willis Vendor Homepage: https://en.irz.ru/ Software Link: https://github.com/SakuraSamuraii/ez-iRZ Version: Routers through 2022-03-16 Tested on: RU21,...

iRZ Mobile Router - CSRF to Remote Code Execution Exploit

Exploit Title: iRZ Mobile Router - CSRF to RCE Google Dork: intitle:"iRZ Mobile Router" Exploit Author: Stephen Chavez & Robert Willis Vendor Homepage: https://en.irz.ru/ Software Link: https://github.com/SakuraSamuraii/ez-iRZ Version: Routers through 2022-03-16 Tested on: RU21, RU21w, RL21, RU41...