569 matches found
Nearly 2,000 Signal users affected by Twilio phishing attack
New findings following the Twilio phishing attack revealed that Signal, one of its high-value clients and a popular encrypted messaging platform, was particularly affected. 1,900 of its users had their phone numbers and SMS registration codes exposed. However, Signal reassured users that the...
Siemens SCALANCE product has an unspecified vulnerability (CNVD-2022-56474)
SCALANCE M-800, MUM-800 and S615 and RUGGEDCOM RM1224 industrial routers are used for secure remote access to plants over mobile networks e.g. GPRS or UMTS with integrated security features of firewalls to prevent unauthorized access, and VPNs to protect data transmission.SCALANCE SC-600 devices...
IBM Spectrum Protect Server 安全特征问题漏洞
IBM Spectrum Protect Server is a spectrum protection system from IBM USA, Inc. providing comprehensive data resiliency for physical file servers, virtual environments, and a wide range of applications.IBM Spectrum Protect Server versions 8.1.0.000 through 8.1.14 have a security feature issue...
Buffer overflow
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack. Prior to version 6.1.11, he USBX DFU UPLOAD functionality may be utilized to introduce a buffer overflow resulting in overwrite of memory contents. In particular cases this may allow an attacker to bypass security features o...
Cisco Issues Patches for 3 New Flaws Affecting Enterprise NFVIS Software
Cisco Systems on Wednesday shipped security patches to contain three flaws impacting its Enterprise NFV Infrastructure Software NFVIS that could permit an attacker to fully compromise and take control over the hosts. Tracked as CVE-2022-20777, CVE-2022-20779, and CVE-2022-20780, the vulnerabiliti...
[SECURITY] Fedora 36 Update: unrealircd-6.0.2-1.fc36
UnrealIRCd is an Open Source IRC server based on the branch of IRCu called Dreamforge, formerly used by the DALnet IRC network. Since the beginning of development on UnrealIRCd in May of 1999, it has become a highly advanced IRCd with a strong focus on modularity, an advanced and highly...
Microsoft Word 安全特征问题漏洞
Microsoft Word is a word processing software in the Office suite from Microsoft Corporation USA. a security bypass vulnerability exists in Microsoft Word. An attacker could exploit the vulnerability to bypass security features, thereby affecting the integrity...
PT-2022-1980
Name of the Vulnerable Software and Affected Versions Microsoft Word affected versions not specified Description The issue is related to errors in security settings of Microsoft Office and Microsoft 365 Apps for Enterprise packages, which can allow an attacker to bypass security features...
Fortinet FortiOS Path Traversal Vulnerability (CNVD-2021-101142)
Fortinet FortiOS is a security operating system dedicated to the FortiGate network security platform from Fortinet, a US-based company. The system provides users with a variety of security features such as firewall, anti-virus, IPSec/SSLVPN, Web content filtering and anti-spam, etc. A path...
The vulnerability of the Android EMUI operating system’s shell, related to the bypassing of security features, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Android EMUI operating system’s shell is related to the bypassing of security features. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
CleanMyMac X: Performance and Security Software for Macbook
We use Internet-enabled devices in every aspect of our lives today—to find information, shop, bank, do homework, play games, and keep in touch with friends and family. As a result, our devices contain much personal information about us. Also, any great device will get a little clunky and slow ove...
ELFXtract - An Automated Analysis Tool Used For Enumerating ELF Binaries
ELFXtract is an automated analysis tool used for enumerating ELF binaries Powered by Radare2 and r2ghidra This is specially developed for PWN challenges and it has many automated features It almost displays every details of the ELF and also decompiles its ASM to C code using r2ghidra Decompiling...
Nanobrok - Web Service For Control And Protect Your Android Device Remotely
Web Service write in Python for control and protect yourandroid device remotely. The official app can be found on the PlayStore: NanobrokPro Nanobrok Community Overview Nanobrok-Server is powerful opensource webservice for control and protect your android device, written in Python, that allow and...
Cybercriminals Target Alibaba Cloud for Cryptomining, Malware
Cybercriminals are targeting Alibaba Elastic Computing Service ECS instances, disabling certain security features to further their cryptomining goals. Alibaba offers a few unique options that make it a highly attractive target for attackers, researchers noted. Register now for our LIVE event!...
Exploit for Missing Authorization in Apple Mac_Os_X
CVE-2021-30657 A simple POC for CVE-2021-30657 affecting MacOS...
Securing SaaS Apps — CASB vs. SSPM
There is often confusion between Cloud Access Security Brokers CASB and SaaS Security Posture Management SSPM solutions, as both are designed to address security issues within SaaS applications. CASBs protect sensitive data by implementing multiple security policy enforcements to safeguard critic...
ZTE MF971R Profile Control Vulnerability
The ZTE MF971R is a Cat 6 LTE mobile Wi-Fi router with download speeds up to 300mbps and upload speeds up to 50mbps.A configuration file control vulnerability exists in the ZTE MF971R. An attacker could exploit the vulnerability to modify the device's configuration parameters, which could result ...
Rucky encryption problem vulnerability
Rucky is an Android application that performs the Usb Hid attack Rubber Duck in multiple ways. Rucky is vulnerable to an encryption issue that stems from the use of weak encryption algorithms RSA/ECB/PKCS1Padding. The issue will be patched in v2.3 for releases and after 426 for nightly releases. ...
Rucky 加密问题漏洞
Rucky is an Android application that performs the Usb Hid attack Rubber Duck in multiple ways. Rucky is vulnerable to an encryption issue that stems from the use of weak encryption algorithms RSA/ECB/PKCS1Padding. The issue will be patched in v2.3 for releases and after 426 for nightly releases. ...
