Aggregator

A vulnerability was found in Huawei HarmonyOS and EMUI. It has been rated as critical. Affected by this issue is some unknown functionality of the component DownloadProviderMain Module. The manipulation leads to improper access controls. This vulnerability is handled as CVE-2024-45442. Local access is required to approach this attack. There is no exploit available.

A vulnerability was found in Huawei HarmonyOS and EMUI. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component System Service Module. The manipulation leads to denial of service. This vulnerability is known as CVE-2024-45441. An attack has to be approached locally. There is no exploit available.

A vulnerability was found in Huawei HarmonyOS and EMUI. It has been classified as problematic. Affected is an unknown function of the component SystemUI Module. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2024-42039. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Huawei HarmonyOS and EMUI and classified as problematic. This issue affects some unknown processing of the component Camera Framework Module. The manipulation leads to information disclosure. The identification of this vulnerability is CVE-2024-45447. The attack may be initiated remotely. There is no exploit available.

Editor’s note: The current article is authored by Mostafa ElSheimy, a malware reverse engineer and threat intelligence analyst. You can find Mostafa on X and LinkedIn. In this malware analysis report, we conduct an in-depth examination of AZORult, a sophisticated credential and payment card information stealer. Our walk-through covers the malware’s evolution, including its transition from Delphi to […]

The post AZORult Malware: Technical Analysis appeared first on ANY.RUN's Cybersecurity Blog.

A vulnerability has been found in Huawei HarmonyOS and EMUI and classified as problematic. This vulnerability affects unknown code of the component Camera Driver Module. The manipulation leads to denial of service. This vulnerability was named CVE-2024-45446. Attacking locally is a requirement. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Huawei HarmonyOS and EMUI. This affects an unknown part of the component WMS Module. The manipulation leads to permission issues. This vulnerability is uniquely identified as CVE-2024-45444. Local access is required to approach this attack. There is no exploit available.

A vulnerability, which was classified as critical, has been found in Huawei HarmonyOS up to 4.2.0. Affected by this issue is some unknown functionality of the component Cust Module. The manipulation leads to path traversal. This vulnerability is handled as CVE-2024-45443. It is possible to launch the attack on the physical device. There is no exploit available.

A vulnerability classified as problematic was found in Huawei HarmonyOS and EMUI. Affected by this vulnerability is an unknown functionality of the component Memory Management Module. The manipulation leads to information disclosure. This vulnerability is known as CVE-2024-8298. The attack needs to be approached locally. There is no exploit available.

A vulnerability classified as critical has been found in Huawei HarmonyOS and EMUI. Affected is an unknown function of the component Ringtone Setting Module. The manipulation leads to improper access controls. This vulnerability is traded as CVE-2024-45449. It is possible to launch the attack on the local host. There is no exploit available.

A vulnerability was found in Huawei HarmonyOS and EMUI. It has been rated as problematic. This issue affects some unknown processing of the component Page Table Protection Configuration. The manipulation leads to information disclosure. The identification of this vulnerability is CVE-2024-45448. Attacking locally is a requirement. There is no exploit available.

A vulnerability was found in Huawei HarmonyOS and EMUI. It has been declared as problematic. This vulnerability affects unknown code of the component Keystore Module. The manipulation leads to incomplete cleanup. This vulnerability was named CVE-2024-45445. Local access is required to approach this attack. There is no exploit available.

A vulnerability was found in IDEC FC6A MICROSmart All-in-One CPU Module, FC6B MICROSmart All-in-One CPU Module, FC6A MICROSmart Plus CPU Module, FC6B MICROSmart Plus CPU Module, FT1A SmartAXIS Pro and FT1A SmartAXIS Pro Lite. It has been classified as problematic. This affects an unknown part. The manipulation leads to cleartext transmission of sensitive information. This vulnerability is uniquely identified as CVE-2024-41927. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in IDEC WindLDR and WindO I-NV4 and classified as problematic. Affected by this issue is some unknown functionality of the component Project File Handler. The manipulation leads to cleartext storage of sensitive information. This vulnerability is handled as CVE-2024-41716. The attack may be launched remotely. There is no exploit available.

A vulnerability has been found in Fsas Technologies IPCOM EX2 and IPCOM VE2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Encrypted Pages Handler. The manipulation leads to observable timing discrepancy. This vulnerability is known as CVE-2024-39921. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in Recentha Pi Camera project 1.0. Affected is an unknown function of the file tilt.php. The manipulation of the argument position leads to Privilege Escalation. This vulnerability is traded as CVE-2024-44809. It is possible to launch the attack remotely. There is no exploit available.

A new malware campaign is spoofing Palo Alto Networks' GlobalProtect VPN software to deliver a variant of the WikiLoader (aka WailingCrab) loader by means of a search engine optimization (SEO) campaign. The malvertising activity, observed in June 2024, is a departure from previously observed tactics wherein the malware has been propagated via traditional phishing emails, Unit 42 researchers

在巴西屏蔽 X 后，Bluesky 四天增加了逾 200 万新用户。由于大量新用户涌入，Bluesky 的服务短暂出现了错误。Bluesky 成为巴西地区下载量最多的应用，超过了 Meta 的 Threads。Appfigures 的数据显示，Bluesky 上周末的下载量相比前一个周末飙升了 10,584%，而在巴西更达到了惊人的 1,018,952%。这一光环效应也推动了 Bluesky 在其它地区的增长，巴西之外的下载量增长了 584%。Bluesky 工程师表示，过去四天该社交网络的点赞数从一周前的 1300 万增长到 1.046 亿，关注数从 140 万增长到 1.008 亿，转发数从 130 万增长到 1100 万。截至周一，Bluesky 表示过去四天新增用户数 211 万，而前一周仅为 2.6 万。日活跃用户数增幅也超过了 100%。Bluesky 周二表示新增用户数达到了 240 万。

随着信息技术的飞速发展，数据安全问题日益凸显，商用密码技术作为保护数据安全的重要手段，其应用和推广受到了广泛关 […]

新闻速览 •《汽车整车信息安全技术要求》等3项智能网联汽车强制性国家标准发布 •世界互联网大会召开推动构建网络 […]