EUVD-2015-4660

Malware in sbrugna...

EUVD-2015-4659

Malware in sbrugna...

EUVD-2014-5609

Malware in sbrugna...

EUVD-2024-41623

Malicious code in bioql PyPI...

Privacy-Preserving Transformers: SwiftKey'S Differential Privacy Implementation

In this paper we train a transformer using differential privacy DP for language modeling in SwiftKey. We run multiple experiments to balance the trade-off between the model size, run-time speed and accuracy. We show that we get small and consistent gains in the next-word-prediction and accuracy...

CVE-2024-45833

Mattermost Mobile Apps versions =2.18.0 fail to disable autocomplete during login while typing the password and visible password is selected, which allows the password to get saved in the dictionary when the user has Swiftkey as the default keyboard, the masking is off and the password contains a...

CVE-2024-45833

Mattermost Mobile Apps versions =2.18.0 fail to disable autocomplete during login while typing the password and visible password is selected, which allows the password to get saved in the dictionary when the user has Swiftkey as the default keyboard, the masking is off and the password contains a...

CVE-2024-45833 Mobile password gets saved in dictionary under conditions

Mattermost Mobile Apps versions =2.18.0 fail to disable autocomplete during login while typing the password and visible password is selected, which allows the password to get saved in the dictionary when the user has Swiftkey as the default keyboard, the masking is off and the password contains a...

CVE-2024-45833

Mattermost Mobile Apps <= 2.18.0 exposes passwords: the login autocomplete is not disabled when the password is typed and the visible password is selected, allowing the password to be saved in SwiftKey’s dictionary when a special character is used and masking is off. Affected: Mattermost Mobil...

CVE-2024-45833 Mobile password gets saved in dictionary under conditions

Mattermost Mobile Apps versions =2.18.0 fail to disable autocomplete during login while typing the password and visible password is selected, which allows the password to get saved in the dictionary when the user has Swiftkey as the default keyboard, the masking is off and the password contains a...

PT-2024-31799 · Mattermost +1 · Mattermost Mobile Apps +1

Name of the Vulnerable Software and Affected Versions: Mattermost Mobile Apps versions =2.18.0 Description: The issue arises when the Mattermost Mobile Apps fail to disable autocomplete during login while typing the password and the visible password option is selected. This allows the password to...

iOS 13 Bug Lets 3rd-Party Keyboards Gain 'Full Access' — Even When You Deny

Following the release of iOS 13 and iPadOS earlier this week, Apple has issued an advisory warning iPhone and iPad users of an unpatched security bug impacting third-party keyboard apps. On iOS, third-party keyboard extensions can run entirely standalone without access to external services and...

iOS 13 Bug Lets 3rd-Party Keyboards Gain 'Full Access' — Even When You Deny

Following the release of iOS 13 and iPadOS earlier this week, Apple has issued an advisory warning iPhone and iPad users of an unpatched security bug impacting third-party keyboard apps. On iOS, third-party keyboard extensions can run entirely standalone without access to external services and...

SwiftKey Keyboard - BSD license, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SwiftKey Keyboard published at the 'play' market has multiple vulnerabilities...

SwiftKey Beta - BSD license, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application SwiftKey Beta published at the 'play' market has multiple vulnerabilities...

Man-in-the-middle attack vulnerability in multiple Samsung Galaxy devices

The Samsung Galaxy S4 and others are smart mobile devices released by the South Korean company Samsung Samsung. A security vulnerability exists in the SwiftKey language-pack upgrade implementation process for several Samsung Galaxy devices. As the program uses HTTP to connect to the...

Directory Traversal Vulnerability in Multiple Samsung Galaxy Devices

The Samsung Galaxy S4 and others are smart mobile devices released by the South Korean company Samsung Samsung. A directory traversal vulnerability exists in the SwiftKey language-pack upgrade implementation of multiple Samsung Galaxy devices. A remote attacker can leverage the control privileges...

Samsung mobile phone was traced to memory Safety vulnerabilities can be exploited by hackers to control the phone-vulnerability warning-the black bar safety net

Us network security firm NowSecure released the latest report, Samsung mobile phone keyboard application the vulnerability exists, the user a lot of information may therefore be compromised. And this vulnerability in a large number of Samsung mobile devices in the not yet been repaired, including...

Samsung Galaxy S Mobile Phone Remote Code Execution Vulnerability

Samsung Galaxy is a series of mid-range and high-end smartphones from Samsung.Swiftkey keyboard is a keyboard application that comes pre-installed with system privileges on Galaxy S series phones. Samsung Galaxy S4 Mini, S4, S5, S6 series smartphones fail to validate Swiftkey language pack...

CVE-2015-4641

Directory traversal vulnerability in the SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices allows remote web servers to write to arbitrary files, and consequently execute arbitrary code in a privileged context, by leveraging control of the...