Category: Advisories

In Settings, there is a possible way to determine whether an app is installed without query permissions, due to side channel information disclosure. This could...

In PackageManager, there is a possible way to get information about installed packages ignoring limitations introduced in Android 11 due to a missing permission check....

In USB Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This...

Improper Input Validation vulnerability in the project upload mechanism in B&R Automation Studio version >=4.0 may allow an unauthenticated network attacker to execute code. Read...

Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix. Read More

An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for...

An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for...

The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory leak. Read More

Microsoft has released 141 security fixes for this month's August 2022 release. Besides the usual security fixes, there was a zero-day of note:CVE-2022-34713: This is...

FortiGuard Labs is aware of a report that Roadsweep ransomware was used against the Albanian government. Other malware Chimneysweep backdoor and ZeroCleare wiper malware were...