6707 matches found
Ztorg: from rooting to SMS
I've been monitoring Google Play Store for new Ztorg Trojans since September 2016, and have so far found several dozen new malicious apps. All of them were rooting malware that used exploits to gain root rights on the infected device. Then, in the second half of May 2017 I found one that wasn't...
This Week in Security News
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...
CVE-2017-9606
Infotecs ViPNet Client and Coordinator before 4.3.2-42442 allow local users to gain privileges by placing a Trojan horse ViPNet update file in the update folder. The attack succeeds because of incorrect folder permissions in conjunction with a lack of integrity and authenticity checks...
CVE-2017-9606
Infotecs ViPNet Client and Coordinator before 4.3.2-42442 allow local users to gain privileges by placing a Trojan horse ViPNet update file in the update folder. The attack succeeds because of incorrect folder permissions in conjunction with a lack of integrity and authenticity checks...
Design/Logic Flaw
Infotecs ViPNet Client and Coordinator before 4.3.2-42442 allow local users to gain privileges by placing a Trojan horse ViPNet update file in the update folder. The attack succeeds because of incorrect folder permissions in conjunction with a lack of integrity and authenticity checks...
CVE-2017-9606
Infotecs ViPNet Client and Coordinator before 4.3.2-42442 allow local users to gain privileges by placing a Trojan horse ViPNet update file in the update folder. The attack succeeds because of incorrect folder permissions in conjunction with a lack of integrity and authenticity checks...
CVE-2017-9606
Infotecs ViPNet Client and Coordinator before 4.3.2-42442 allow local users to gain privileges by placing a Trojan horse ViPNet update file in the update folder. The attack succeeds because of incorrect folder permissions in conjunction with a lack of integrity and authenticity checks...
CVE-2017-9606
CVE-2017-9606 affects Infotecs ViPNet Client and Coordinator prior to 4.3.2-42442. The vulnerability allows a local attacker to gain privileges by placing a Trojan horse ViPNet update file in the update folder. Root cause is incorrect folder permissions combined with insufficient integrity and au...
CVE-2017-2213
Untrusted search path vulnerability in SemiDynaEXE SemiDynaEXE2008.EXE ver. 1.0.2 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2219
Untrusted search path vulnerability in the Simeji for Windows installer simeji.exe allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2213
Untrusted search path vulnerability in SemiDynaEXE SemiDynaEXE2008.EXE ver. 1.0.2 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2219
Untrusted search path vulnerability in the Simeji for Windows installer simeji.exe allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2212
Untrusted search path vulnerability in TKY2JGD TKY2JGD1379.EXE ver. 1.3.79 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2210
Untrusted search path vulnerability in PatchJGD PatchJGD101.EXE ver. 1.0.1 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2177
Untrusted search path vulnerability in Installer of Shogyo Touki Denshi Ninsho Software Ver 1.7 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2193
Untrusted search path vulnerability in the installer of Tera Term 4.94 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2209
Untrusted search path vulnerability in the installer of Houkokusyo Sakusei Shien Tool ver3.0.2 For the first installation The version which was available on the website from 2017 April 4 to 2017 May 18 and ver2.0 and later For the first installation The versions which were available on the websit...
CVE-2017-2212
Untrusted search path vulnerability in TKY2JGD TKY2JGD1379.EXE ver. 1.3.79 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...