CVE-2021-25432

Information exposure vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O8.1 and below, and 3.9.10.11 in Android P9.0 and above allows untrusted applications to access chat data...

CVE-2021-25431

Improper access control vulnerability in Cameralyzer prior to versions 3.2.1041 in 3.2.x, 3.3.1040 in 3.3.x, and 3.4.4210 in 3.4.x allows untrusted applications to access some functions of Cameralyzer...

CVE-2021-25428

Improper validation check vulnerability in PackageManager prior to SMR July-2021 Release 1 allows untrusted applications to get dangerous level permission without user confirmation in limited circumstances...

Security for AWS Lambda Serverless Applications

Serverless computing is another beautiful cloud-based advancement for developers. But, like all applications, proper security is required to maximize the benefits. Learn more in this article...

CVE-2021-25431: Improper Access Control

Improper access control vulnerability in Cameralyzer prior to versions 3.2.1041 in 3.2.x, 3.3.1040 in 3.3.x, and 3.4.4210 in 3.4.x allows untrusted applications to access some functions of Cameralyzer...

CVE-2021-25426: Exposure of Sensitive Information to an Unauthorized Actor

Improper component protection vulnerability in SmsViewerActivity of Samsung Message prior to SMR July-2021 Release 1 allows untrusted applications to access Message files...

CVE-2021-25428: Improper Privilege Management

Improper validation check vulnerability in PackageManager prior to SMR July-2021 Release 1 allows untrusted applications to get dangerous level permission without user confirmation in limited circumstances...

SAMSUNG Members security vulnerabilities

Samsung Members is a community platform app from Samsung South Korea. An access control error vulnerability exists in Samsung Members. The vulnerability allows untrusted applications to load arbitrary web pages in a webview. No details of the vulnerability are provided at this time...

PT-2021-16622

Name of the Vulnerable Software and Affected Versions: Cameralyzer versions prior to 3.2.1041 in 3.2.x Cameralyzer versions prior to 3.3.1040 in 3.3.x Cameralyzer versions prior to 3.4.4210 in 3.4.x Description: The issue is related to improper access control in Cameralyzer, allowing untrusted...

Bluetooth security vulnerabilities

Bluetooth is a short-range wireless technology standard from the Bluetooth Special Interest Group SIG standards organization for exchanging data between fixed and mobile devices over short distances using UHF radio waves in the ISM band from 2.402 GHz to 2.48 GHz, as well as for constructing...

Samsung Members information leakage vulnerability

Samsung Members is a community platform app from Samsung South Korea. Samsung Members suffers from an information disclosure vulnerability that stems from an affected version of Samsung Members allowing untrusted applications to access chat data. No details of the vulnerability are available at...

CVE-2021-25433: Improper Authorization

Improper authorization vulnerability in Tizen factory reset policy prior to Firmware update JUL-2021 Release allows untrusted applications to perform factory reset using dbus signal...

Bluetooth authorization issue vulnerability

Bluetooth is a Bluetooth Special Interest Group SIG standards organization standard for short-range wireless technology for exchanging data between fixed and mobile devices over short distances using UHF radio waves in the ISM band from 2.402 GHz to 2.48 GHz and for building personal area network...

Samsung Tizen security vulnerabilities

Samsung Tizen is an open source Linux kernel-based mobile operating system from South Korea's Samsung, available for devices including smartphones, tablets, smartwatches, netbooks, in-car messaging and entertainment devices, and smart TVs. Tizen suffers from a security vulnerability that stems fr...

Arbitrary File Write Vulnerability in Panavision OA E-office

Panmicro OA E-office system is a professional collaborative OA software for small and medium-sized organizations, a leading brand in the field of domestic collaborative OA office, dedicated to providing professional OA office system, mobile OA applications and other collaborative OA overall...

Exploit for SQL Injection in Zabbix

This repository is an offensive tool for vulnerability research and exploitation. It contains a collection of vulnerable applications and services, along with exploit modules and tools for testing and demonstrating vulnerabilities. The primary vulnerability being targeted is not explicitly stated...

Spring Security Uncontrolled Resource Consumption

The vulnerability of the Java framework for securing industrial applications using Spring Security is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures by initiating authentication requests, thereby providing...

Users unable to relaunch the published applications, error "Citrix workspace will try to reconnect..."

Users get disconnected from their active published app session When attempting to relaunch the same app, they get a popup saying 'Citrix Workspace app will try to reconnect for xxx more minutes. Click Disconnect if you want to stop'...

ForgeRock AM远程代码执行漏洞（CVE-2021-35464）

Pre-auth RCE in ForgeRock OpenAM CVE-2021-35464 Michael Stepankin Researcher @artsploit Published: 29 June 2021 at 11:23 UTC Updated: 29 June 2021 at 18:15 UTC While participating in one private bug bounty program, I discovered a pre-auth RCE in ForgeRock OpenAM server - a popular access manageme...

vulhub

This repository is an offensive tool for a collection of vulnerable environments and applications, referred to as "Vulhub". It is a collection of Docker images and scripts that simulate various web applications and systems with known vulnerabilities, allowing users to practice and learn about...