9447 matches found
Google Bans 158,000 Malicious Android App Developer Accounts in 2024
Google said it blocked over 2.36 million policy-violating Android apps from being published to the Google Play app marketplace in 2024 and banned more than 158,000 bad developer accounts that attempted to publish such harmful apps. The tech giant also noted it prevented 1.3 million apps from...
Opera for Android has received Google Play’s Independent Security Review badge. Here’s what this means for your security
Security Opera for Android has received Google Play’s Independent Security Review badge. Here’s what this means for your security Share January 30th, 2025 Hey Opera users! You might have seen that Opera for Android has achieved a new security-focused milestone: If you search for Opera for Android...
CVE-2025-21389
Uncontrolled resource consumption in Windows Universal Plug and Play UPnP Device Host allows an unauthorized attacker to deny service over a network...
CVE-2025-21300
Windows Universal Plug and Play UPnP Device Host Denial of Service Vulnerability...
Microsoft Windows UPnP 资源管理错误漏洞
Microsoft Windows UPnP is a device agent from Microsoft Corporation USA. Providing a proxy allows Windows network connections to recognize the IP address of ZoneDirector. A resource management error vulnerability exists in Microsoft Windows UPnP. An attacker could exploit this vulnerability to...
CVE-2025-21300: Uncontrolled Resource Consumption
Windows Universal Plug and Play UPnP Device Host Denial of Service Vulnerability...
CVE-2025-21389: Uncontrolled Resource Consumption
Uncontrolled resource consumption in Windows Universal Plug and Play UPnP Device Host allows an unauthorized attacker to deny service over a network...
CVE-2024-5743
An attacker could exploit the 'Use of Password Hash With Insufficient Computational Effort' vulnerability in EveHome Eve Play to execute arbitrary code. This issue affects Eve Play: through 1.1.42...
CVE-2024-5743 Command Injection Vulnerability
An attacker could exploit the 'Use of Password Hash With Insufficient Computational Effort' vulnerability in EveHome Eve Play to execute arbitrary code. This issue affects Eve Play: through 1.1.42...
CVE-2024-5743 Command Injection Vulnerability
An attacker could exploit the 'Use of Password Hash With Insufficient Computational Effort' vulnerability in EveHome Eve Play to execute arbitrary code. This issue affects Eve Play: through 1.1.42...
CVE-2024-5743
CVE-2024-5743 affects Eve Play (EveHome) up to version 1.1.42. Root cause: use of a password hash with insufficient computational effort, enabling an attacker to execute arbitrary code. Impact is high across confidentiality, integrity, and availability per the CVE metrics. Remediation: upgrade to...
CVE-2024-5743: Use of Password Hash With Insufficient Computational Effort
An attacker could exploit the 'Use of Password Hash With Insufficient Computational Effort' vulnerability in EveHome Eve Play to execute arbitrary code. This issue affects Eve Play: through 1.1.42...
EveHome Eve Play 安全漏洞
EveHome Eve Play is an audio streaming interface from EveHome, Inc. A security vulnerability exists in EveHome Eve Play version 1.1.42 and earlier, which stems from the presence of a cryptographic hash vulnerability using insufficient computational effort that can be exploited by an attacker to...
PT-2025-3438 · Evehome · Eve Play
Name of the Vulnerable Software and Affected Versions: Eve Play versions through 1.1.42 Description: An attacker could exploit the issue of using a password hash with insufficient computational effort in EveHome Eve Play to execute arbitrary code. Recommendations: For versions through 1.1.42,...
PT-2025-2032 · WordPress · Unlimited Elements For Elementor
Name of the Vulnerable Software and Affected Versions: Unlimited Elements For Elementor plugin for WordPress versions up to, and including, 1.5.135 Description: The issue is related to Stored Cross-Site Scripting via multiple widgets due to insufficient input sanitization and output escaping on...
Android Security Bulletin-January 2025Stay organized with collectionsSave and categorize content based on your preferences.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2025-01-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...
PT-2025-52660
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Comedi low-level driver "c6xdigio" has a flaw related to parallel port Plug and Play PNP resource management. The driver incorrectly handles PNP driver registration and unregistratio...
PT-2025-36328
Name of the Vulnerable Software and Affected Versions podman versions 4.0.0 through 5.6.1 Description A vulnerability exists in podman where an attacker can use the kube play command to overwrite host files. This occurs when the kube file contains a Secret or a ConfigMap volume mount, and that...
PT-2024-10862 · Huawei · Huawei Products
Name of the Vulnerable Software and Affected Versions: Huawei products affected versions not specified Description: A buffer error vulnerability exists in some Huawei products, allowing an unauthenticated attacker to send a special UPNP message to the affected products. Due to insufficient input...
