Cisco Data Center Network Manager Privilege Escalation

The vulnerability of the Web interface of the Cisco Data Center Network Manager DCNM system is related to the use of pre-installed credentials. Exploiting this vulnerability could allow a malicious actor to increase their privileges by using a static encryption key...

'Undeletable' Malware Shows Up in Yet Another Android Device

Security researchers have identified yet another Android-based mobile device available through the government-funded Lifeline Assistance Program pre-loaded with malware, a discovery adding evidence to the disturbing trend of smartphones infected with undeletable malicious code upon purchase. Hard...

libreoffice: Insufficient URL encoding flaw in allowed script location check

LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc. Access is intended to be restricted to scripts under the share/Scripts/python, user/Scripts/python sub-directories of the LibreOffice...

Unspecified Vulnerability in Samsung A7

The Samsung A7 is a smartphone from the South Korean company Samsung Samsung. A security vulnerability in the Samsung A7 build fingerprint: samsung/a7y17ltexx/a7y17lte:8.0.0/R16NW/A720FXXU7CSC2:user/release-keys in the com.samsung.android. A security vulnerability exists in the themecenter app. A...

Unspecified Vulnerability in Evercoss U6

Evercoss U6 is a smartphone. Evercoss U6 has a security vulnerability. An attacker can exploit the vulnerability to gain signatureOrSystem privileges with a pre-installed application on the device...

Samsung A8+ has an unspecified vulnerability

Samsung A8+ is a smartphone from Samsung South Korea. A security vulnerability in the Samsung A8+ build fingerprint: samsung/jackpot2ltexx/jackpot2lte:8.0.0/R16NW/A730FXXS4BSC2:user/release-keys in the com.samsung.android. A security vulnerability exists in the themecenter app. An attacker could...

New Flaw Lets Rogue Android Apps Access Camera Without Permission

An alarming security vulnerability has been discovered in several models of Android smartphones manufactured by Google, Samsung, and others that could allow malicious apps to secretly take pictures and record videos — even when they don't have specific device permissions to do so. You must alread...

Samsung A3 has an unspecified vulnerability

The Samsung A3 is a smartphone from the South Korean company Samsung Samsung. A security vulnerability exists in the Samsung A3 build fingerprint: samsung/a3y17ltedx/a3y17lte:8.0.0/R16NW/A320YDXU4CSB3:user/release-keys in the com.samsung.android. A security vulnerability exists in the themecenter...

146 New Vulnerabilities All Come Preinstalled on Android Phones

The dozens of flaws across 29 Android smartphone makers show just how insecure the devices can be, even brand-new...

Mysterious malware that re-installs itself infected over 45,000 Android Phones

Over the past few months, hundreds of Android users have been complaining online of a new piece of mysterious malware that hides on the infected devices and can reportedly reinstall itself even after users delete it, or factory reset their devices. Dubbed Xhelper , the malware has already infecte...

LibreOffice Input Validation Error Vulnerability (CNVD-2019-39681)

LibreOffice is an open source office software suite from The Document Foundation TDF. The product includes applications such as Writer text documents, Calc spreadsheets and Impress presentations. LibreOffice suffers from a security-mode bypass vulnerability that can be exploited by an attacker to...

UBUNTU-CVE-2019-9852

LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc. Access is intended to be restricted to scripts under the share/Scripts/python, user/Scripts/python sub-directories of the LibreOffice...

Your device, your choice: AdwCleaner now detects preinstalled software

For years, Malwarebytes has held firm to a core belief about you, the user: You should be able to decide for yourself which apps, programs, browsers, and other software end up on your computer, tablet, or mobile phone. Basically, it’s your device, your choice. With the latest update to Malwarebyt...

Alpine Linux Docker Empty Password Account

The vulnerability of the Alpine Linux Docker distribution stems from the use of a empty password for the pre-installed root account. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Security Flaw in Pre-Installed Dell Support Software Affects Million of Computers

Dell's SupportAssist utility that comes pre-installed on millions of Dell laptops and PCs contains a security vulnerability that could allow malicious software or rogue logged-in users to escalate their privileges to administrator-level and access sensitive information. Discovered by security...

Siemens LOGO!8 BM Encryption Keys Decryption

The vulnerability of Siemens LOGO!8 BM programmable logic controller’s microprogramming software is related to the presence of pre-installed encryption keys. Exploiting this vulnerability allows an attacker to decrypt project data using port 10005/TCP...

Scanner-VS Remote Execution Superuser Privilege

The vulnerability of the remote execution service of the “Scanner-VS” security scanner is related to the presence of a pre-installed administrative account, whose information is not available in the documentation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to...

Preinstalled Mobile Security App on Xiaomi Handsets Delivered Vulnerabilities, Not Protection

Preinstalled apps on mobile phones can be just as annoying as crapware found on new PCs. Now a report from security experts at Check Point Research suggest those preinstalled mobile apps may be more than just annoying – they can also be a security risk. Check Point found that a security app calle...

Cisco Aironet Active Sensor DoS

The vulnerability of the microprogrammed software of the Cisco Aironet Active Sensor wireless client sensor lies in the use of pre-installed registration data. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

CNC11 TITANIUM mini Execution

The vulnerability of the embedded software in the CNC11 TITANIUM mini system is related to the absence of a mechanism for controlling the execution of external applications. Exploiting this vulnerability allows an attacker to execute existing applications within the system by accessing the...