‘StrandHogg’ Vulnerability Allows Malware to Pose as Legitimate Android Apps

Researchers have discovered a new Android vulnerability that could allow malware to pose as popular apps and ask for various permissions, potentially allowing hackers to listen in on users, take photos, read and send SMS messages, and basically take over various functions as if they are the...

The vulnerability of the UPnP service in Windows operating systems allows a hacker to increase their privileges or execute arbitrary code.

The vulnerability of the UPnP service in Windows operating systems is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges or execute arbitrary code...

CVE-2019-5309

Honor play smartphones with versions earlier than 9.1.0.333C00E333R1P1T8 have an information disclosure vulnerability in certain Huawei . An attacker could view certain information after a series of operation without unlock the screen lock. Successful exploit could cause an information disclosure...

CVE-2019-5309

Honor play smartphones with versions earlier than 9.1.0.333C00E333R1P1T8 have an information disclosure vulnerability in certain Huawei . An attacker could view certain information after a series of operation without unlock the screen lock. Successful exploit could cause an information disclosure...

Information disclosure

Honor play smartphones with versions earlier than 9.1.0.333C00E333R1P1T8 have an information disclosure vulnerability in certain Huawei . An attacker could view certain information after a series of operation without unlock the screen lock. Successful exploit could cause an information disclosure...

CVE-2019-5309

CVE-2019-5309 affects Huawei Honor Play smartphones (pre-9.1.0.333). The vulnerability is an information-disclosure flaw in Huawei devices, where an attacker could view certain data after a sequence of operations without unlocking the screen. Impact ranges from partial confidentiality loss (NVD C...

CVE-2019-5309

Honor play smartphones with versions earlier than 9.1.0.333C00E333R1P1T8 have an information disclosure vulnerability in certain Huawei . An attacker could view certain information after a series of operation without unlock the screen lock. Successful exploit could cause an information disclosure...

Huawei Honor Play Information Disclosure Vulnerability

Huawei Honor Play is a smartphone product from Chinese company Huawei Huawei. An information disclosure vulnerability exists in previous versions of Huawei Honor Play 9.1.0.333 C00E333R1P1T8. The vulnerability can be exploited by an attacker to view some information on the phone without unlocking...

Google Will Award $1M-Plus to People Who Can Hack Titan M Security Chip

Google is willing to award up to $1.5 million to hackers who can successfully hack its Titan M security chip on the company’s Pixel devices as part of an expansion of its Android bug-bounty program unveiled this week. The company revealed increased payouts to its Android Security Rewards in a blo...

Popular Apps on Google Play Store Remain Unpatched

Most people think if they keep their mobile apps updated to the latest version, they also are patching for critical vulnerabilities. Not so, said researchers from Check Point Software, which discovered that outdated code—including known vulnerabilities—are still present in hundreds of popular app...

Microsoft Windows Multiple Vulnerabilities (KB4525236)

This host is missing a critical security update according to Microsoft KB4525236 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4525232)

This host is missing a critical security update according to Microsoft KB4525232 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4525237)

This host is missing a critical security update according to Microsoft KB4525237 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4523205)

This host is missing a critical security update according to Microsoft KB4523205 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

CVE-2019-5213

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321C00E320R1P1T8 have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of...

CVE-2019-5213

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321C00E320R1P1T8 have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of...

Authentication flaw

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321C00E320R1P1T8 have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of...

CVE-2019-5213

CVE-2019-5213 affects Huawei Honor Play Cornell-AL00A devices running versions earlier than 9.1.0.321 (C00E320R1P1T8). The issue stems from a logic judgment error that enables an attacker to modify alarm clock settings without unlocking the screen. Huawei PSIRT notes the vulnerability and has rel...

CVE-2019-5213

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321C00E320R1P1T8 have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of...

CVE-2019-1405

An elevation of privilege vulnerability exists when the Windows Universal Plug and Play UPnP service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'...