9106 matches found
16 apps on Google Play Store caught distributing Joker malware
By Deeba Ahmed After removing six apps infected with the Joker malware earlier in Sep, Google has now removed 16 more apps from its Play Store. This is a post from HackRead.com Read the original post: 16 apps on Google Play Store caught distributing Joker malware...
Joker Trojans Flood the Android Ecosystem
More variants of the Joker Android malware are cropping up in Google Play as well as third-party app stores, in a trend that researchers say points to a relentless targeting of the Android mobile platform. Researchers at Zscaler have found 17 different samples of Joker being regularly uploaded to...
Android 11 — 5 New Security and Privacy Features You Need to Know
After a long wait and months of beta testing, Google last week finally released Android 11, the latest version of the Android mobile operating system—with features offering billions of its users more control over their data security and privacy. Android security is always a hot topic and almost...
CVE-2020-24373
A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...
USN-4494-1 gupnp vulnerability
It was discovered that GUPnP incorrectly handled certain subscription requests. A remote attacker could possibly use this issue to exfiltrate data or use GUPnP to perform DDoS attacks...
CVE-2020-1598
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play UPnP service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs;...
The vulnerability of the UPnP Device Host service for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the UPnP Device Host service for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
Microsoft Windows Universal Plug and Play (UPnP) Elevation of Privilege Vulnerability
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system.UPnP UPnP is a Universal Plug and Play protocol from the Open Connectivity Foundation. An...
The vulnerability of the UPnP Device Host service for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the UPnP Device Host service for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
Cryptobugs Found in Numerous Google Play Store Apps
Researchers have discovered more than 300 apps on the Google Play Store breaking basic cryptography code using a new tool they developed to dynamically analyze it. Academics from Columbia University developed a custom tool, CRYLOGGER, that analyzes Android applications for unsafe use of...
how-to-play-reggae.com Cross Site Scripting vulnerability OBB-1314870
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
KB4577070: Windows Server 2008 September 2020 Security Update
The remote Windows host is missing security update 4577070 or cumulative update 4577064. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory. CVE-2020-0648 - An elevation of...
PT-2020-4148 · Microsoft · Windows Universal Plug/Play (Upnp) Service +1
Name of the Vulnerable Software and Affected Versions: Windows Universal Plug and Play UPnP service affected versions not specified Description: An elevation of privilege issue exists due to the improper handling of objects in memory by the Windows Universal Plug and Play UPnP service. This could...
KB4577053: Windows 7 and Windows Server 2008 R2 September 2020 Security Update
The remote Windows host is missing security update 4577053 or cumulative update 4577051. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory. CVE-2020-0648 - An elevation of...
Joker Spyware Plagues More Google Play Apps
Google has deleted six apps from its Google Play marketplace that were infecting users with the Joker malware a.k.a. Bread. Together, the apps – which tout functionalities ranging from text messaging to emoji wallpaper – account for nearly 200,000 installs, researchers with Pradeo said in a post...
Android malware through Play Store – How to protect your devices?
By Waqas Google’s reputation has always been questionable in protecting apps from malware... This is a post from HackRead.com Read the original post: Android malware through Play Store - How to protect your devices?...
CVE-2020-15165
Version 1.1.6-free of Chameleon Mini Live Debugger on Google Play Store may have had it's sources or permissions tampered by a malicious actor. The official maintainer of the package is recommending all users upgrade to v1.1.8 as soon as possible. For more information, review the referenced GitHu...
CVE-2020-15165
Version 1.1.6-free of Chameleon Mini Live Debugger on Google Play Store may have had it's sources or permissions tampered by a malicious actor. The official maintainer of the package is recommending all users upgrade to v1.1.8 as soon as possible. For more information, review the referenced GitHu...
Design/Logic Flaw
Version 1.1.6-free of Chameleon Mini Live Debugger on Google Play Store may have had it's sources or permissions tampered by a malicious actor. The official maintainer of the package is recommending all users upgrade to v1.1.8 as soon as possible. For more information, review the referenced GitHu...
CVE-2020-15165
The CVE-2020-15165 entry concerns the Chameleon Mini Live Debugger Android package (Google Play) version 1.1.6-free, where sources or permissions may have been tampered by a malicious actor. Red Hat and OSV records cite the same vulnerability description; ENISA EUVD-2020-7239 notes malware in the...