EUVD-2021-12369

Malware in sbrugna...

CVE-2021-40094

A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654. If successfully exploited, this vulnerability may allow attackers to inject malicious code into a user's device...

Attacks on 5G Infrastructure From Users’ Devices

Crafted packets from cellular devices such as mobile phones can exploit faulty state machines in the 5G core to attack cellular infrastructure. Smart devices that critical industries such as defense, utilities, and the medical sectors use for their daily operations depend on the speed, efficiency...

macOS Patching Is Here!

In the past few years, many of our customers have seen a sharp increase in the number of Mac devices introduced to their environment. All those new Mac devices introduce new vulnerabilities that must be remediated. To keep up with the new volume of vulnerabilities, organizations had to opt-in, bu...

CVE-2022-41576

The rphone module has a script that can be maliciously modified.Successful exploitation of this vulnerability may cause irreversible programs to be implanted on user devices...

Design/Logic Flaw

The rphone module has a script that can be maliciously modified.Successful exploitation of this vulnerability may cause irreversible programs to be implanted on user devices...

CVE-2022-41576

The rphone module has a script that can be maliciously modified.Successful exploitation of this vulnerability may cause irreversible programs to be implanted on user devices...

CVE-2022-41576

The rphone module has a script that can be maliciously modified.Successful exploitation of this vulnerability may cause irreversible programs to be implanted on user devices...

PT-2022-25949 · Unknown · Rphone Module

Name of the Vulnerable Software and Affected Versions: rphone module affected versions not specified Description: The issue concerns a script in the rphone module that can be maliciously modified, potentially leading to the implantation of irreversible programs on user devices. Recommendations: A...

CVE-2022-41576

CVE-2022-41576 affects Huawei HarmonyOS’s rphone module, where a script can be maliciously modified. Successful exploitation may implant irreversible programs on user devices. The provided documents do not reveal a public fix or affected versions; monitor for updates.

New Zoom vulnerabilities can compromise user devices with a single message

Threat Level Vulnerability Report For a detailed advisory, download the pdf file here Summary Zoom has addressed four security flaws that, one of them if exploited, can compromise a user via chat by sending specially crafted Extensible Messaging and Presence Protocol XMPP messages and executing...

CVE-2021-37192

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.0 SP2. The affected software has an information disclosure vulnerability that could allow an attacker to retrieve a list of network devices a known user can manage...

RAINBOWMIX Apps in Google Play Serve Up Millions of Ad Fraud Victims

Researchers with White Ops have uncovered a scam to deliver millions of out-of-context OOC ads through a group of more than 240 Android applications on the official Google Play store, which the team said were collectively delivering more than 15 million impressions per day at their peak. The apps...

Access Control Error Vulnerability in Multiple Emerson Electric Products

Emerson Electric Wireless 1410 Gateway and others are a smart wireless gateway product from Emerson Electric USA. The Emerson Electric Wireless 1410 Gateway version 4.6.43 through 4.7.84, the Wireless 1420 Gateway version 4.6.43 through 4.7.84, and the Wireless 1552WU Gateway version 4.6.43 throu...

WSD-T13 cloud storage camera suffers from information leakage vulnerability (CNVD-2019-06649)

Ltd. is an enterprise specializing in the research and development, production, sales and service of security monitoring products. WSD-T13 Cloud Storage Camera suffers from an information leakage vulnerability. An attacker can exploit the vulnerability to cause device ID leakage and add other use...