OX App Suite through 7.10.3 allows SSRF via the the /ajax/messaging/message message API.
The Vivo V7 device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857:user/release-keys allows any app co-located on the device to set system properties as the com.android.phone user. The com.qualcomm.qti.modemtestmode app (versionCode=25, versionName=7.1.2) that contains an exported service named com.qualcomm.qti.modemtestmode.MbnTestService that allows any app co-located on the device to provide key-value pairs to set certain system properties. Notably, system properties with the…
A vulnerability, which was classified as critical, was found in MONyog Ultimate 6.63. This affects an unknown part of the component Cookie Handler. The manipulation of the argument HasServerEdit/IsAdmin leads to privilege escalation. It is possible to initiate the attack remotely.
Диспетчер задач показывает, какие процессы находятся в «фоновом модерируемом» режиме для экономии заряда батареи. Источник: Microsoft В январе 2017 года с билдом Insider Preview 15002 компания Microsoft начала эксперимент с частичным подавлением активности фоновых приложений. По результатам…