APSB23-57 : Security update available for Adobe Bridge

Adobe has released a security update for Adobe Bridge. This update addresses moderate vulnerabilities that could lead to memory leak...

Adobe Bridge 13.x < 13.0.5 / 14.x < 14.0.1 Multiple Vulnerabilities (APSB23-57)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 13.0.5 or 14.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb23-57 advisory. - Adobe Bridge versions 13.0.4 and earlier and 14.0.0 and earlier are affected by an Access of...

bridge-salon-baden.at Improper Access Control vulnerability OBB-3779556

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kernel: drm/bridge: it6505: Initialize AUX channel in it6505_i2c_probe

A NULL pointer dereference was found in the IT6505 DisplayPort bridge driver. If an HPD interrupt fires before the DRM bridge registration completes, the driver attempts to access an uninitialized AUX channel, causing a kernel crash...

kernel: drm/bridge: megachips: Fix a null pointer dereference bug

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: megachips: Fix a null pointer dereference bug When removing the module we will get the following warning: 31.911505 i2c-core: driver stdp2690-ge-b850v3-fw unregistered 31.912484 general protection fault, probably for...

Malicious code in counterstake-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 914d424cbe1169a646b4168d95951a3b22819ba21697ff185656c69bd75c1512 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8421 Malicious code in counterstake-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 914d424cbe1169a646b4168d95951a3b22819ba21697ff185656c69bd75c1512 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-20255

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending...

CVE-2023-20255

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending...

Design/Logic Flaw

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending...

CVE-2023-20255

CVE-2023-20255 affects Cisco Meeting Server Web Bridge API. Unable to validate HTTP requests allows an unauthenticated, remote attacker to trigger DoS, causing partial availability and dropped video calls due to invalid packets reaching the Web Bridge. Exploitation details across sources show net...

Cisco Meeting Server Web Bridge Denial of Service Vulnerability

A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending...

PT-2023-8660 · Cisco · Cisco Meeting Server

Name of the Vulnerable Software and Affected Versions: Cisco Meeting Server affected versions not specified Description: The issue is related to insufficient validation of HTTP requests in the Web Bridge feature of Cisco Meeting Server, which could allow an unauthenticated, remote attacker to cau...

Cisco Meeting Server Security Vulnerability

Cisco Meeting Server Acano Conferencing Server is a suite of audio and video conferencing server software from Cisco. A security vulnerability exists in Cisco Meeting Server, which stems from a vulnerability in the API for the Web Bridge feature that could lead to a denial of service...

CVE-2023-41255

The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abusing the lack of authentication of the ‘su’ binary file installed on the device that can be accessed through the ADB Android Debug Bridge protocol exposed on...

CVE-2023-41255

CVE-2023-41255 affects the TPC-110W device (Bosch context appears in sources). The issue allows an unprivileged user with subnet access to obtain a root shell by abusing the lack of authentication of the su binary exposed via ADB (Android Debug Bridge). The connected documents provide this core t...

PT-2023-29729 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue allows a low privileged user with access to the device when locked in Kiosk mode to install an arbitrary Android application. This can be leveraged to access critical device...

Bosch ctrlX HMI Web Panel WR21 Security Vulnerability

Bosch ctrlX HMI Web Panel WR21 is an HMI panel from Bosch Germany. A security vulnerability exists in Bosch ctrlX HMI Web Panel WR21, which originated from a vulnerability that allows a low-privileged attacker to gain root privileges by modifying critical system properties and exposing the ADB...

PT-2023-27872 · Google · Android Debug Bridge

Name of the Vulnerable Software and Affected Versions: TPC-110W device affected versions not specified Description: The issue allows an unprivileged user with access to the subnet of the device to gain a root shell on the device itself by exploiting the lack of authentication of the su binary fil...

PT-2023-28842 · Google · Android Debug Bridge +1

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue allows a low-privileged application to modify a critical system property, enabling the exposure of the Android Debug Bridge ADB protocol on the network. This can be exploited to...