Aggregator

Qilin

Dark Feed IO
3 months 1 week ago

You must login to view this content

cohenido

Qilin

Dark Feed IO
3 months 1 week ago

You must login to view this content

cohenido

Samsung Mobile Flaw Exploited as Zero-Day to Deploy LANDFALL Android Spyware

The Hackers News
3 months 1 week ago
A now-patched security flaw in Samsung Galaxy Android devices was exploited as a zero-day to deliver a "commercial-grade" Android spyware dubbed LANDFALL in targeted attacks in the Middle East. The activity involved the exploitation of CVE-2025-21042 (CVSS score: 8.8), an out-of-bounds write flaw in the "libimagecodec.quram.so" component that could allow remote attackers to execute arbitrary
The Hacker News

Herodotus Android Banking Malware Takes Full Control Of Device Evading Antivirus

Cyber Security News
3 months 1 week ago

A sophisticated banking trojan named Herodotus has emerged as a significant threat to Android users worldwide. Operating as Malware-as-a-Service, this malicious application disguises itself as a legitimate tool to trick users into downloading and installing an APK file outside the official Play Store. Once installed on a device, the trojan gains access to critical system […]

The post Herodotus Android Banking Malware Takes Full Control Of Device Evading Antivirus appeared first on Cyber Security News.

Tushar Subhra Dutta

CVE-2023-53060 | Linux Kernel up to 6.2.8 igb rtnl_lock deadlock (Nessus ID 241966)

Vuldb Updates
3 months 1 week ago
A vulnerability described as critical has been identified in Linux Kernel up to 6.2.8. This vulnerability affects the function rtnl_lock of the component igb. The manipulation results in deadlock. This vulnerability is known as CVE-2023-53060. Access to the local network is required for this attack. No exploit is available. Upgrading the affected component is recommended.
vuldb.com

CVE-2023-53058 | Linux Kernel up to 5.10.176/5.15.104/6.1.21/6.2.8 null pointer dereference (Nessus ID 241966)

Vuldb Updates
3 months 1 week ago
A vulnerability was found in Linux Kernel up to 5.10.176/5.15.104/6.1.21/6.2.8. It has been classified as critical. Impacted is an unknown function. The manipulation leads to null pointer dereference. This vulnerability is referenced as CVE-2023-53058. The attack needs to be initiated within the local network. No exploit is available. Upgrading the affected component is recommended.
vuldb.com

CVE-2023-53061 | Linux Kernel up to 5.15.104/6.1.21/6.2.8 ksmbd smb2_open reference count

Vuldb Updates
3 months 1 week ago
A vulnerability was found in Linux Kernel up to 5.15.104/6.1.21/6.2.8. It has been declared as critical. The affected element is the function smb2_open of the component ksmbd. The manipulation results in improper update of reference count. This vulnerability is identified as CVE-2023-53061. The attack can only be performed from the local network. There is not any exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-43878 | F5 F5OS-A/F5OS-C Appliance Mode quoting syntax (K000139502)

Vuldb Updates
3 months 1 week ago
A vulnerability was found in F5 F5OS-A and F5OS-C. It has been rated as problematic. The affected element is an unknown function of the component Appliance Mode. This manipulation causes improper neutralization of quoting syntax. This vulnerability is handled as CVE-2025-43878. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is advised.
vuldb.com

CVE-2025-2915 | HDF5 up to 1.14.6 src/H5Faccum.c H5F__accum_free overlap_size heap-based overflow (Issue 5380 / EUVD-2025-8640)

Vuldb Updates
3 months 1 week ago
A vulnerability was found in HDF5 up to 1.14.6. It has been classified as problematic. This vulnerability affects the function H5F__accum_free of the file src/H5Faccum.c. Performing manipulation of the argument overlap_size results in heap-based buffer overflow. This vulnerability is reported as CVE-2025-2915. The attack requires a local approach. Moreover, an exploit is present.
vuldb.com

CVE-2024-9444 | ElementsReady Addons for Elementor Plugin up to 6.4.3 on WordPress SVG File Upload cross site scripting

Vuldb Updates
3 months 1 week ago
A vulnerability classified as problematic was found in ElementsReady Addons for Elementor Plugin up to 6.4.3 on WordPress. This affects an unknown part of the component SVG File Upload Handler. Executing manipulation can lead to cross site scripting. This vulnerability is handled as CVE-2024-9444. The attack can be executed remotely. There is not any exploit available.
vuldb.com

CVE-2025-39748 | Linux Kernel up to 6.12.42/6.15.10/6.16.1 bpf is_branch_taken memory corruption (Nessus ID 264755 / WID-SEC-2025-2040)

Vuldb Updates
3 months 1 week ago
A vulnerability described as critical has been identified in Linux Kernel up to 6.12.42/6.15.10/6.16.1. Affected by this vulnerability is the function is_branch_taken of the component bpf. The manipulation results in memory corruption. This vulnerability is cataloged as CVE-2025-39748. The attack must originate from the local network. There is no exploit available. Upgrading the affected component is recommended.
vuldb.com

CVE-2025-64173 | apollographql router up to 1.61.11/2.8.0 authentication bypass (EUVD-2025-38036)

Vuldb Updates
3 months 1 week ago
A vulnerability categorized as critical has been discovered in apollographql router up to 1.61.11/2.8.0. The affected element is an unknown function. The manipulation results in authentication bypass using alternate channel. This vulnerability was named CVE-2025-64173. The attack may be performed from remote. There is no available exploit. It is advisable to upgrade the affected component.
vuldb.com

Managed ad