Robustel R1510 web_server ajax endpoints OS command injection vulnerabilities

### Summary Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command ...

Continue Reading
Toll fraud malware: How an Android application can drain your wallet

Toll fraud malware, a subcategory of billing fraud in which malicious applications subscribe users to premium services without their knowledge or consent, is one of the most prevalent types of Android ...

Continue Reading
Toll fraud malware: How an Android application can drain your wallet

Toll fraud malware, a subcategory of billing fraud in which malicious applications subscribe users to premium services without their knowledge or consent, is one of the most prevalent types of Android ...

Continue Reading
Using process creation properties to catch evasion techniques

We developed a robust detection method in [Microsoft Defender for Endpoint]() that can catch known and unknown variations of a process execution class used by attackers to evade detection. This class ...

Continue Reading
Using process creation properties to catch evasion techniques

We developed a robust detection method in [Microsoft Defender for Endpoint]() that can catch known and unknown variations of a process execution class used by attackers to evade detection. This class ...

Continue Reading
Robustel R1510 web_server /action/remove/ API data removal vulnerability

### Summary A data removal vulnerability exists in the web_server /action/remove/ API functionality of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary file deletion. An ...

Continue Reading
openSUSE 15 Security Update : chromium (openSUSE-SU-2022:10036-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10036-1 advisory. - Use after free in Base. (CVE-2022-215 ...

Continue Reading
URL previews of unusual or maliciously-crafted pages can crash Synapse media repositories or Synapse monoliths

### Impact URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the request ...

Continue Reading

Back to Main

Subscribe for the latest news: