‼ CVE-2023-30683 ‼
📖 Read
via "National Vulnerability Database".
Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call endCall API without permission.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30701 ‼
📖 Read
via "National Vulnerability Database".
PendingIntent hijacking in WifiGeofenceManager prior to SMR Aug-2023 Release 1 allows local attacker to arbitrary file access.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30684 ‼
📖 Read
via "National Vulnerability Database".
Improper access control in Samsung Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call acceptRingingCall API without permission.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30693 ‼
📖 Read
via "National Vulnerability Database".
Out-of-bounds Write in DoOemFactorySendFactoryBypassCommand of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30705 ‼
📖 Read
via "National Vulnerability Database".
Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.56.6?allows local attackers to access privileged content providers as Galaxy Store permission.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30702 ‼
📖 Read
via "National Vulnerability Database".
Stack overflow vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" in Windows Update for Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go and Galaxy book2 Pro 360 allows local attacker to execute arbitrary code.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30696 ‼
📖 Read
via "National Vulnerability Database".
An improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30686 ‼
📖 Read
via "National Vulnerability Database".
Out-of-bounds Write in ReqDataRaw of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30703 ‼
📖 Read
via "National Vulnerability Database".
Improper URL validation vulnerability in Samsung Members prior to version 14.0.07.1 allows attackers to access sensitive information.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30687 ‼
📖 Read
via "National Vulnerability Database".
Out-of-bounds Write in RmtUimApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30681 ‼
📖 Read
via "National Vulnerability Database".
An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30691 ‼
📖 Read
via "National Vulnerability Database".
Parcel mismatch in AuthenticationConfig prior to SMR Aug-2023 Release 1 allows local attacker to privilege escalation.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30700 ‼
📖 Read
via "National Vulnerability Database".
PendingIntent hijacking vulnerability in SemWifiApTimeOutImpl in framework prior to SMR Aug-2023 Release 1 allows local attackers to access ContentProvider without proper permission.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30688 ‼
📖 Read
via "National Vulnerability Database".
Out-of-bounds Write in MakeUiccAuthForOem of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.📖 Read
via "National Vulnerability Database".
🦿 Quick Glossary: Cybersecurity Attack Response and Mitigation 🦿
📖 Read
via "Tech Republic".
Your computer network is under constant attack. The hard reality is that one of those cyberattacks will succeed, and you had better be prepared. This quick glossary from TechRepublic Premium explains the terminology used by security experts as they attempt to reduce the damage caused by a successful attack. From the glossary: EVIDENCE COLLECTION POLICY ...📖 Read
via "Tech Republic".
TechRepublic
Quick Glossary: Cybersecurity Attack Response and Mitigation | TechRepublic
Your computer network is under constant attack. The hard reality is that one of those cyberattacks will succeed, and you had better be prepared. This
🕴 'MoustachedBouncer' APT Spies on Embassies, Likely via ISPs 🕴
📖 Read
via "Dark Reading".
Diplomats who didn't use VPNs may have lost sensitive state information to a Belarusian threat actor that wields the "Disco" and "Nightclub" malware.📖 Read
via "Dark Reading".
Dark Reading
'MoustachedBouncer' APT Spies on Embassies, Likely via ISPs
Diplomats who didn't use VPNs may have lost sensitive state information to a Belarusian government-aligned threat actor, which wields the "Disco" and "Nightclub" malware.
📢 Veritas targets mutual growth with new MSP partner program 📢
📖 Read
via "ITPro".
The revamped initiative will help MSPs capitalize on the growing demand for cloud-native cyber resilience solutions, vendor says 📖 Read
via "ITPro".
channelpro
Veritas targets mutual growth with new MSP partner program
The revamped initiative will help MSPs capitalize on the growing demand for cloud-native cyber resilience solutions, vendor says
‼ CVE-2023-26309 ‼
📖 Read
via "National Vulnerability Database".
A remote code execution vulnerability in the webview component of OnePlus Mall app.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-4277 ‼
📖 Read
via "National Vulnerability Database".
The Realia plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.4.0. This is due to missing nonce validation on the 'process_change_profile_form' function. This makes it possible for unauthenticated attackers to change user email via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-4276 ‼
📖 Read
via "National Vulnerability Database".
The Absolute Privacy plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1. This is due to missing nonce validation on the 'abpr_profileShortcode' function. This makes it possible for unauthenticated attackers to change user email and password via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31209 ‼
📖 Read
via "National Vulnerability Database".
Improper neutralization of active check command arguments in Checkmk < 2.1.0p32, < 2.0.0p38, < 2.2.0p4 leads to arbitrary command execution for authenticated users.📖 Read
via "National Vulnerability Database".