CVE-2020-28190

TerraMaster TOS = 4.2.06 was found to check for updates of both system and applications via an insecure channel HTTP. Man-in-the-middle attackers are able to intercept these requests and serve a weaponized/infected version of applications or updates...

The vulnerability of the Microsoft AutoUpdate (MAU) for Mac application, which involves defects in the process of checking updates before they are installed, allows a malicious individual to escalate their privileges.

The vulnerability of the Microsoft AutoUpdate MAU for Mac application relates to deficiencies in the process of checking updates before they are installed. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2019-19463

The Anhui Huami Mi Fit application before 4.0.11 for Android has an Unencrypted Update Check...

Sogou Input Method Exe Hijacking Vulnerability

Sogou Input Method is a Chinese character input method tool. Sogou Input Method suffers from an exe hijacking vulnerability, which can be exploited by attackers to run malicious files during update checks...

CVE-2016-6564

Android devices with code from Ragentek contain a privileged binary that performs over-the-air OTA update checks. Additionally, there are multiple techniques used to hide the execution of this binary. This behavior could be described as a rootkit. This binary, which resides as /system/bin/debugs,...

CVE-2016-6564

CVE-2016-6564 concerns Ragentek Android firmware that embeds a privileged OTA update binary (/system/bin/debugs) which communicates with three HTTP hosts over an unencrypted channel. The rootkit-like binary runs with root privileges and can execute arbitrary root commands in responses from the se...

The vulnerability of the ServerProtect security tool, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code with root privileges or modify any files as desired.

The vulnerability of the ServerProtect security tool exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to modify arbitrary files or execute arbitrary code with root privileges, by exploiting the absence of software update checks...

Acronis True Image Man-in-the-Middle Bypass Security Vulnerability

Acronis True Image is a disaster backup and recovery solution from Acronis Switzerland. The solution supports backing up, synchronizing, sharing and storing various types of files. A security vulnerability exists in Acronis True Image that stems from the program's failure to securely detect and...