CVE-2020-8913 Local arbitrary code execution in splitinstall in Android's Play Core

A local, arbitrary code execution vulnerability exists in the SplitCompat.install endpoint in Android's Play Core Library versions prior to 1.7.2. A malicious attacker could create an apk which targets a specific application, and if a victim were to install this apk, the attacker could perform a...

CVE-2020-8913

CVE-2020-8913 : A local arbitrary code execution vulnerability exists in Android’s Play Core Library (SplitCompat.install) for versions prior to 1.7.2. An attacker could craft an APK targeting a specific app; if installed, this could trigger a directory traversal and execute code with the targete...

PT-2020-20366 · Google · Google Play Core Library

Name of the Vulnerable Software and Affected Versions: Google Play Core Library versions prior to 1.7.2 Description: A local, arbitrary code execution issue exists in the SplitCompat.install endpoint in Android's Play Core Library. This allows a malicious attacker to create an apk that targets a...

bostonplaygoers.co.uk Cross Site Scripting vulnerability OBB-1255929

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

NETGEAR R6700 Buffer Overflow Vulnerability (CNVD-2020-45110)

The NETGEAR R6700 is a wireless router from NETGEAR. A buffer overflow vulnerability exists in the UPnP service in the NETGEAR R6700 version V1.0.4.8410.0.58, which stems from the program failing to properly validate the length of user-submitted data before copying it to a fixed stack-based buffe...

NETGEAR R6700 Code Issue Vulnerability

The NETGEAR R6700 is a wireless router from NETGEAR. A code issue vulnerability exists in the UPnP service in the NETGEAR R6700 version V1.0.4.8410.0.58. The vulnerability stems from an improper design or implementation during code development of a network system or product. An attacker could...

DJI Drone App Riddled With Privacy Issues, Researchers Allege

Leading commercial drone maker DJI is hitting back against researcher allegations that its Android mobile application is riddled with privacy holes. One includes that the app continues to run in the background even after it’s been closed and collects sensitive data from users without consent. The...

Malicious 'Blur' Photo App Campaign Discovered on Google Play

A new campaign of malicious photo apps on Google Play floods Android devices with random ads instead of functioning as advertised. They also elude detection by making its icon disappear from the device home screen soon after it’s downloaded. Researchers at the White Ops Satori Threat Intelligence...

Researchers Reveal New Security Flaw Affecting China's DJI Drones

Cybersecurity researchers on Thursday revealed security issues in the Android app developed by Chinese drone-maker Da Jiang Innovations DJI that comes with an auto-update mechanism that bypasses Google Play Store and could be used to install malicious applications and transmit sensitive personal...

The vulnerability of the UPnP Device Host service for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the UPnP Device Host service for Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

CVE-2020-15893

An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. Universal Plug and Play UPnP is enabled by default on port 1900. An attacker can perform command injection by injecting a payload into the Search Target ST field of the SSDP M-SEARCH discover packet...

PT-2020-5981 · D Link · D-Link Dir-816L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816L versions 2.x before 1.10b04Beta02 Description: An issue exists in the Universal Plug and Play UPnP component of the D-Link DIR-816L device, where UPnP is enabled by default on port 1900. This allows an attacker to perform...

Microsoft Windows UPnP Device Host Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows UPnP Device Host, whic...

Microsoft Windows UPnP Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows UPnP, which arises fro...

CVE-2020-1354

An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows UPnP Device Host Elevation of Privilege Vulnerability'. This CVE ID is unique...

Exclusive: Any Chingari App (Indian TikTok Clone) Account Can Be Hacked Easily

Following vulnerability disclosure in the Mitron app, another viral TikTok clone in India has now been found vulnerable to a critical but easy-to-exploit authentication bypass vulnerability, allowing anyone to hijack any user account and tamper with their information, content, and even upload...

New variant of Joker malware found in Android apps on Play Store

By Sudais Asif The original Joker malware was identified on Play Store back in September 2019. This is a post from HackRead.com Read the original post: New variant of Joker malware found in Android apps on Play Store...

Joker Android Malware Dupes Its Way Back Onto Google Play

A new variant of the infamous Joker malware has once again made it onto Google Play, with Google removing 11 malicious Android applications from its official app marketplace, researchers disclosed Thursday. Malicious apps spreading the Joker have continued to skirt Google Play’s protections since...

Joker Malware Apps Once Again Bypass Google's Security to Spread via Play Store

Cybersecurity researchers took the wraps off yet another instance of Android malware hidden under the guise of legitimate applications to stealthily subscribe unsuspecting users for premium services without their knowledge. In a report published by Check Point research today, the malware —...

Joker Malware Apps Once Again Bypass Google's Security to Spread via Play Store

Cybersecurity researchers took the wraps off yet another instance of Android malware hidden under the guise of legitimate applications to stealthily subscribe unsuspecting users for premium services without their knowledge. In a report published by Check Point research today, the malware —...