641 matches found
PT-2022-21849 · Samsung · Samsung Dex For Pc
Name of the Vulnerable Software and Affected Versions: Samsung Dex for PC versions prior to SMR Aug-2022 Release 1 Description: The issue is related to improper access control, allowing local attackers to scan and connect to a PC by making an unprotected binder call. Recommendations: For versions...
PT-2022-21847 · Samsung · Samsung Dex For Pc
Name of the Vulnerable Software and Affected Versions: Samsung Dex for PC versions prior to SMR Aug-2022 Release 1 Description: A heap-based buffer overflow issue allows arbitrary code execution by physical attackers. Recommendations: For Samsung Dex for PC versions prior to SMR Aug-2022 Release ...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices DeX for PC module SMR Aug-2022 Release 1 prior to Release 1, which arises from a...
SAMSUNG Mobile devices 缓冲区错误漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. SAMSUNG Mobile devices A security vulnerability exists in Samsung Dex for PC SMR Aug-2022 Release 1 prior to Release 1, which stems from a...
PT-2022-21838 · Samsung · Dex For Pc
Name of the Vulnerable Software and Affected Versions: DeX for PC versions prior to SMR Aug-2022 Release 1 Description: A vulnerability using PendingIntent in DeX for PC allows attackers to access files with system privilege. Recommendations: For DeX for PC versions prior to SMR Aug-2022 Release ...
GHSA-7943-82JG-WMW5 Argo CD certificate verification is skipped for connections to OIDC providers
Impact All versions of Argo CD starting with v0.4.0 are vulnerable to an improper certificate validation bug which could cause Argo CD to trust a malicious or otherwise untrustworthy OIDC provider. Note: external OIDC provider support was added in v0.11.0. Before that version, the notes below app...
zeroswap/UniswapV2Pair.sol Token reserves per lp token can be manipulated due to lack of MINIMUM_LIQUIDITY when minting the first liquidity with migrator
Lines of code Vulnerability details if totalSupply == 0 address migrator = IUniswapV2Factoryfactory.migrator; if msg.sender == migrator liquidity = IMigratormigrator.desiredLiquidity; requireliquidity 0 && liquidity != uint256-1, "Bad desired liquidity"; else requiremigrator == address0, "Must no...
MAL-2022-1578 Malicious code in binance-dex-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38e724eb3901d2efd19182bd0951e32ab732cb375bedc61c0a559e0cef533d8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Samsung DeX Home Information Disclosure Vulnerability
Samsung DeX Home is a Samsung DeX application for PCs and Macs from Samsung South Korea.An information disclosure vulnerability exists in Samsung DeX Home, which stems from the lack of proper access authentication logic in Samsung DeX Home, and could be exploited to gain unauthorized access to...
CVE-2022-27576
Information exposure vulnerability in Samsung DeX Home prior to SMR April-2022 Release 1 allows to access currently launched foreground app information without permission...
CVE-2022-27576
Information exposure vulnerability in Samsung DeX Home prior to SMR April-2022 Release 1 allows to access currently launched foreground app information without permission...
CVE-2022-27576
Information exposure vulnerability in Samsung DeX Home prior to SMR April-2022 Release 1 allows to access currently launched foreground app information without permission...
Information disclosure
Information exposure vulnerability in Samsung DeX Home prior to SMR April-2022 Release 1 allows to access currently launched foreground app information without permission...
CVE-2022-27576
Information exposure vulnerability in Samsung DeX Home prior to SMR April-2022 Release 1 allows to access currently launched foreground app information without permission...
CVE-2022-27576
Samsung DeX Home Information Disclosure (CVE-2022-27576) affects Samsung DeX Home prior to the SMR April-2022 Release 1. Root cause: lack of proper access authentication logic that can reveal information about the currently launched foreground application. Impact: information exposure with access...
Samsung DeX Home 安全漏洞
Samsung DeX Home is a Samsung DeX application for PCs and Macs from Samsung South Korea.An information disclosure vulnerability exists in Samsung DeX Home, which stems from the lack of proper access authentication logic in Samsung DeX Home, and could be exploited to gain unauthorized access to...
All swapping functions lack checks for returned tokens
Lines of code Vulnerability details Impact Every function that stems from the GenericSwapFacet lacks checks to ensure that some tokens have been returned via the swaps. In LibSwap.sol in the swap function, the swap call is sent to the target DEX. A return of success is required, otherwise the...
in thexxturboxx/dex2jar
Description This vulnerability is originally reported to pxb1988/dex2jar, but re-sending it again for maintained fork repository as requested. dex2jar is a set of tools to work with android .dex and java .class files. In these tools, there is a tool called "dex2smali", and this tool allows a...