12423 matches found
July 14, 2020—KB4565489 (OS Build 17134.1610)
None None...
Denial Of Service (DoS)
ipfs-bitswap is vulnerable to denial of service DoS. The library does not ignore the unwanted blocks from the block store during the invocation of multiple functions, allowing a malicious user to cause an application crash...
Exclusive: Any Chingari App (Indian TikTok Clone) Account Can Be Hacked Easily
Following vulnerability disclosure in the Mitron app, another viral TikTok clone in India has now been found vulnerable to a critical but easy-to-exploit authentication bypass vulnerability, allowing anyone to hijack any user account and tamper with their information, content, and even upload...
New variant of Joker malware found in Android apps on Play Store
By Sudais Asif The original Joker malware was identified on Play Store back in September 2019. This is a post from HackRead.com Read the original post: New variant of Joker malware found in Android apps on Play Store...
'Undeletable' Malware Shows Up in Yet Another Android Device
Security researchers have identified yet another Android-based mobile device available through the government-funded Lifeline Assistance Program pre-loaded with malware, a discovery adding evidence to the disturbing trend of smartphones infected with undeletable malicious code upon purchase. Hard...
Joker Malware Apps Once Again Bypass Google's Security to Spread via Play Store
Cybersecurity researchers took the wraps off yet another instance of Android malware hidden under the guise of legitimate applications to stealthily subscribe unsuspecting users for premium services without their knowledge. In a report published by Check Point research today, the malware —...
Joker Malware Apps Once Again Bypass Google's Security to Spread via Play Store
Cybersecurity researchers took the wraps off yet another instance of Android malware hidden under the guise of legitimate applications to stealthily subscribe unsuspecting users for premium services without their knowledge. In a report published by Check Point research today, the malware —...
Nasty Cerberus banking trojan found on Google Play Store
By Zara Khan Google's Play Protect mechanism also failed to detect Cerberus banking trojan... This is a post from HackRead.com Read the original post: Nasty Cerberus banking trojan found on Google Play Store...
hw: Vector Register Data Sampling
A flaw was found in Intel processors where a local attacker is able to gain information about registers used for vector calculations by observing register states from other processes running on the system. This results in a race condition where store buffers, which were not cleared, could be read...
CVE-2020-1425 - Windows Codecs Library RCE
A remote code execution in Windows Codecs Library has been fixed by Microsoft with out-of-band patch on 30th June 2020. The vulnerability allows attacker to remotely execute arbitrary code, if the victim opens maliciously crafted media file. Recent assessments: busterb at July 07, 2020 6:42pm UTC...
CVE-2019-2708
Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data...
Microsoft Releases Urgent Windows Update to Patch Two Critical Flaws
Microsoft yesterday quietly released out-of-band software updates to patch two high-risk security vulnerabilities affecting hundreds of millions of Windows 10 and Server editions' users. To be noted, Microsoft rushed to deliver patches almost two weeks before the upcoming monthly 'Patch Tuesday...
Android Apps Stealing Facebook Credentials
Google has removed 25 Android apps from its store because they steal Facebook credentials: Before being taken down, the 25 apps were collectively downloaded more than 2.34 million times. The malicious apps were developed by the same threat group and despite offering different features, under the...
hw: Vector Register Data Sampling
A flaw was found in Intel processors where a local attacker is able to gain information about registers used for vector calculations by observing register states from other processes running on the system. This results in a race condition where store buffers, which were not cleared, could be read...
The vulnerability of the Microsoft Store Runtime component in Microsoft Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the Microsoft Store Runtime operating system for Microsoft Windows involves errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
CVE-2020-12032
Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems store device data with sensitive information in an unencrypted database. This could allow an attacker with network access to view or modify sensitive data including PHI...
hw: Vector Register Data Sampling
A flaw was found in Intel processors where a local attacker is able to gain information about registers used for vector calculations by observing register states from other processes running on the system. This results in a race condition where store buffers, which were not cleared, could be read...
hw: Vector Register Data Sampling
A flaw was found in Intel processors where a local attacker is able to gain information about registers used for vector calculations by observing register states from other processes running on the system. This results in a race condition where store buffers, which were not cleared, could be read...
Shijiazhuang City Zhenghong Network Technology Co., Ltd. Shop7z Online Shopping System Ultimate Edition has a logic flaw vulnerability
Shop7z online shopping system is ASP online store platform software, providing comprehensive application services based on Internet solutions. Shijiazhuang City, Zhenghong Network Technology Co., Ltd Shop7z Online Shopping System Ultimate Edition there is a logic flaw vulnerability, an attacker c...
greekstampstore.com Cross Site Scripting vulnerability OBB-1206256
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...