2913 matches found
CVE-2020-0052
In smsSelected of AnswerFragment.java, there is a way to send an SMS from the lock screen due to a permissions bypass. This could lead to local escalation of privilege on the lock screen with no additional execution privileges needed. User interaction is needed for exploitation.Product:...
CVE-2020-0052
CVE-2020-0052 affects Android 10 where In smsSelected of AnswerFragment.java an elevation-of-privilege vulnerability exists due to a permissions bypass that allows sending an SMS from the lock screen. The issue enables local privilege escalation with no extra execution privileges required; exploi...
Logic Flaw Vulnerability in JEECG-BOOT System of Beijing Guo Torch Information Technology Co.
Jeecg-Boot is a code generator based rapid development platform that can be used to develop backend management systems such as ERP, CRM and applets. A logic flaw exists in the JEECG-BOOT system of Beijing Guo Torch Information Technology Co., Ltd, which can be exploited by an attacker to modify t...
SMS Attack Spreads Emotet, Steals Bank Credentials
Attackers are sending SMS messages purporting to be from victims’ banks – but once they click on the links in the text messages, they are asked to hand over their banking credentials and download a file that infects their systems with the Emotet malware. Emotet has continued to evolve since its...
SMS Phishing Campaign Targets Mobile Bank App Users in North America
A mobile phishing campaign that targeted customers of more than a dozen North American banks, including Chase, Royal Bank of Canada and TD Bank, managed to hook nearly 4,000 victims. The attacks used an automated SMS tool to blast bogus security text messages to mobile phone users between June an...
Security Update for Adobe Flash Player: February 11, 2020
None None...
A week in security (January 27 – February 2)
Last week on Malwarebytes Labs, we looked at the strengths and weaknesses of the Zero Trust model, gave you the low-down on spear phishing, and took a delve into the world of securing the managed service provider MSP. Other cybersecurity news UN compromised via Sharepoint hack: An extraordinary...
Mobile Carrier Customer Service Ushers in SIM-Swap Fraud
Mobile carriers have left the door wide open to SIM-swap attacks, particularly when it comes to prepaid accounts, researchers have found. SIM swapping is a form of fraud that allows crooks to bypass SMS-based two-factor authentication 2FA and crack online banking or other high-value accounts...
Mail.ru: Account TakeOver at my.33slona.ru
Logon via SMS code validation was not sufficiently protected against bruteforce in my.33slona.ru Common flaws of SMS auth: https://blog.deteact.com/common-flaws-of-sms-auth/...
TikTok vulnerability allowed hackers to send SMS with malware
By Sudais How to hack the TikTok account with a malicious link in a text message? Well, it's possible as researchers noticed. This is a post from HackRead.com Read the original post: TikTok vulnerability allowed hackers to send SMS with malware...
Researchers Demonstrate How to Hack Any TikTok Account by Sending SMS
TikTok, the 3rd most downloaded app in 2019, is under intense scrutiny over users' privacy, censoring politically controversial content and on national-security grounds—but it's not over yet, as the security of billions of TikTok users would be now under question. The famous Chinese viral...
Researchers Demonstrate How to Hack Any TikTok Account by Sending SMS
TikTok , the 3rd most downloaded app in 2019, is under intense scrutiny over users' privacy, censoring politically controversial content and on national-security grounds—but it's not over yet, as the security of billions of TikTok users would be now under question. The famous Chinese viral...
CVE-2013-4763
Samsung Galaxy S3/S4 exposes an unprotected component allowing arbitrary SMS text messages without requesting permission...
CVE-2013-4764
Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbitrary destinations without permission...
Code injection
Samsung Galaxy S3/S4 exposes an unprotected component allowing arbitrary SMS text messages without requesting permission...
Code injection
Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbitrary destinations without permission...
CVE-2013-4764
Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbitrary destinations without permission...
CVE-2013-4764
CVE-2013-4764 describes a vulnerability in Samsung Galaxy S3/S4 where a built-in component (sCloudBackupProvider.apk) exposes unprotected components that an unprivileged app can abuse to send arbitrary SMS texts to arbitrary destinations without permission. The root cause involves triggering a se...
CVE-2013-4763
CVE-2013-4763 affects Samsung Galaxy S3/S4 and involves a pre-loaded component (sCloudBackupProvider.apk) that exposes unprotected components. An unprivileged app can trigger a restore operation to write arbitrary SMS messages to the system SMS database (mmssms.db) via these components, enabling ...