Google Android has an unspecified vulnerability (CNVD-2022-54479)

Google Android is a Linux-based open-source operating system from the U.S. company Google Google. Google Android has a security vulnerability that could be exploited by attackers to delete Fdn contacts...

U.S. Dept Of Defense: IDOR Lead To VIEW & DELETE & Create api_key [HtUS]

Hi Dod & Hackerone Team i hope you are Doing Well Today : Explaining: i found That a User With a Member Permission in a Organization Can Create & View & DELETE APIKEYS Step To Reproduce: 1 First Create 2 Accounts From Here https://███ 2 Log in With The Victim User and Create New Group From Here...

U.S. Dept Of Defense: IDOR on ███████ [HtUS]

Hello, I have found an endpoint in ███ is vulnerable to IDOR which leads an attacker to brute-force an delete Companies Steps to reproduce: 1. Nevgaite to https://███████/████/Reception/Vendor and create account 2. Once you created an account go to https://████/████/Vendor/Companies 3. Regsiter a...

Pro-China Group Uses Dragonbridge Campaign to Target Rare Earth Mining Companies

A pro-China influence campaign singled out rare earth mining companies in Australia, Canada, and the U.S. with negative messaging in an unsuccessful attempt to manipulate public discourse to China's benefit. Targeted firms included Australia's Lynas Rare Earths Ltd, Canada's Appia Rare Earths &...

U.S. Dept Of Defense: .git folder exposed [HtUS]

Heyy there, I have found a exposed .git folder on https://█████ https://████████/.git/config core repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true remote "origin" url = https://████ fetch = +refs/heads/:refs/remotes/origin/ Using gitdumper...

U.S. Dept Of Defense: LOGJ4 VUlnerability [HtUS]

Description: Hi team, log4 shell is recent 0-day exploit it's Java package vulnerable. █████ is vulnerable Impact RCE System Hosts ██████ Affected Products and Versions CVE Numbers CVE-2021-44228 Steps to Reproduce 1. Go to this url =...

TikTok Assures U.S. Lawmakers it's Working to Safeguard User Data From Chinese Staff

Following heightened worries that U.S. users' data had been accessed by TikTok engineers in China between September 2021 and January 2022, the company sought to assuage U.S. lawmakers that it's taking steps to "strengthen data security." The admission that some China-based employees can access...

Microsoft Warns of Cryptomining Malware Campaign Targeting Linux Servers

A cloud threat actor group tracked as 8220 has updated its malware toolset to breach Linux servers with the goal of installing crypto miners as part of a long-running campaign. "The updates include the deployment of new versions of a crypto miner and an IRC bot," Microsoft Security Intelligence...

Google Android elevation of privilege vulnerability (CNVD-2022-50272)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability. An attacker can exploit this vulnerability to gain elevated privileges on the system...

Google Android elevation of privilege vulnerability (CNVD-2022-50273)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability. An attacker can exploit this vulnerability to elevate privileges...

Google Android elevation of privilege vulnerability (CNVD-2022-50271)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges on the system...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-52263)

Google Android is a Linux-based open-source operating system from the U.S. company Google Android has an elevation of privilege vulnerability that stems from a window flag error when processing user input, which could lead to an eavesdropping attack that could be exploited by an attacker to cause...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-52264)

Google Android is a Linux-based open source operating system from the U.S. company Google Google. Google Android is vulnerable to an elevation of privilege vulnerability, which can be exploited by attackers to cause a local privilege escalation that requires the user to execute privileges...

Google Android Information Disclosure Vulnerability (CNVD-2022-53372)

Google Android is a Linux-based open source operating system from the U.S. company Google Google. Google Android has an information disclosure vulnerability, which can be exploited by attackers to obtain sensitive information...

Google Android out-of-bounds write vulnerability (CNVD-2022-53369)

Google Android is a Linux-based open source operating system from the U.S. company Google Google. Google Android is vulnerable to an out-of-bounds write vulnerability, which can be exploited by attackers to cause remote privilege elevation...

Google Android has an unspecified vulnerability (CNVD-2022-53374)

Google Android is a Linux-based open-source operating system from the U.S. company Google Google. Google Android has a security vulnerability. No detailed vulnerability details are available...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-52270)

Google Android is a Linux-based open-source operating system from the U.S. company Google. Google Android has an elevation of privilege vulnerability that could be exploited by attackers to cause a local privilege escalation that requires the user to execute the privilege...

Google Android Competition Condition Issue Vulnerability (CNVD-2022-53379)

Google Android is a Linux-based open-source operating system from the U.S. company Google Google. Google Android is vulnerable to a competitive condition issue that could be exploited by an attacker to cause a local privilege escalation without additional executive privileges...

IBM QRadar WinCollect Agent Information Disclosure Vulnerability

BM QRadar WinCollect Agent is an agent program for collecting and sending Windows event logs from IBM, U.S. An information disclosure vulnerability exists in BM QRadar WinCollect Agent, which stems from a lack of best practices and can be exploited by attackers to gain access to sensitive...

Adobe InCopy heap buffer overflow vulnerability

Adobe InCopy is a text editing software for authoring from Adobe U.S. A heap buffer overflow vulnerability exists in Adobe InCopy, which could be exploited by an attacker to execute arbitrary code in the context of the current user...