CVE-2023-43135

There is an unauthorized access vulnerability in TP-LINK ER5120G 4.0 2.0.0 Build 210817 Rel.80868n, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...

The vulnerability of the AcSELerator QuickSet SEL-5030 device management tool, related to incorrect data processing based on the Unicode encoding standard, allows a perpetrator to execute arbitrary codes.

The vulnerability of the AcSELerator QuickSet SEL-5030 device management tool is related to incorrect data processing based on the Unicode encoding standard. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary codes...

Logic flaw vulnerability in LiveGBS of Anhui Green Persimmon Information Technology Co., Ltd (CNVD-2023-72138)

LiveGBS is a national standard GB28181 streaming media service software , can provide to provide user management and Web visualization page management , open source front-end page source code ; to provide device status management , you can real-time view of whether the device is offline and other...

CVE-2023-41034

Eclipse Leshan is a device management server and client Java implementation. In affected versions DDFFileParser and DefaultDDFFileValidator and so ObjectLoader are vulnerable to XXE Attacks. A DDF file is a LWM2M format used to store LWM2M object description. Leshan users are impacted only if the...

CVE-2023-41034 DDFFileParser in eclipse leshan is vulnerable to XXE Attacks

Eclipse Leshan is a device management server and client Java implementation. In affected versions DDFFileParser and DefaultDDFFileValidator and so ObjectLoader are vulnerable to XXE Attacks. A DDF file is a LWM2M format used to store LWM2M object description. Leshan users are impacted only if the...

CVE-2023-41034

The CVE-2023-41034 issue affects Eclipse Leshan: DDFFileParser, DefaultDDFFileValidator (and ObjectLoader) are vulnerable to XXE Attacks when parsing untrusted DDF files. The root cause is exposure to XML External Entities. Remediation is to upgrade to fixed versions 1.5.0 or 2.0.0-M13; upgrades ...

The vulnerability of Windows Mobile Device Management for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of Windows Mobile Device Management for Windows operating systems relates to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2023-38186

Windows Mobile Device Management Elevation of Privilege Vulnerability...

CVE-2023-38186

Windows Mobile Device Management Elevation of Privilege Vulnerability...

CVE-2023-38186

CVE-2023-38186 refers to a Windows Mobile Device Management elevation of privilege vulnerability. The vulnerability is discussed in multiple sources (NVD, CVE list, MSRC). Affected software is Windows Mobile Device Management components; underlying root cause details are not fully disclosed in th...

CVE-2023-38186 Windows Mobile Device Management Elevation of Privilege Vulnerability

...

CVE-2023-38186 Windows Mobile Device Management Elevation of Privilege Vulnerability

...

PT-2023-4387 · Microsoft · Windows Mobile Device Management +1

Name of the Vulnerable Software and Affected Versions: Windows Mobile Device Management affected versions not specified Description: The issue is related to insecure privilege management in Windows Mobile Device Management, which can allow an attacker to elevate their privileges. This could...

Microsoft Windows Mobile Device Management Security Vulnerability

Microsoft Windows Mobile Device Management is a software service from Microsoft Corporation USA for Windows devices to support interaction with mobile devices. A security vulnerability exists in Microsoft Windows Mobile Device Management. An attacker could exploit the vulnerability to elevate...

Microsoft Windows Multiple Vulnerabilities (KB5010386)

This host is missing an important security update according to Microsoft KB5010386 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Malicious Apps Use Sneaky Versioning Technique to Bypass Google Play Store Scanners

Threat actors are leveraging a technique called versioning to evade Google Play Store's malware detections and target Android users. "Campaigns using versioning commonly target users' credentials, data, and finances," Google Cybersecurity Action Team GCAT said in its August 2023 Threat Horizons...

Threat Actors Exploiting Ivanti EPMM Vulnerabilities

SUMMARY The Cybersecurity and Infrastructure Security Agency CISA and the Norwegian National Cyber Security Centre NCSC-NO are releasing this joint Cybersecurity Advisory CSA in response to active exploitation of CVE-2023-35078 and CVE-2023-35081. Advanced persistent threat APT actors exploited...

HCL Technologies BigFix Mobile Command Injection Vulnerability

HCL Technologies BigFix Mobile is a Mobile Device Management MDM solution from HCL Technologies. It is designed to help businesses and organizations effectively manage and secure mobile devices, including smartphones, tablets and other mobile devices. HCL Technologies BigFix Mobile suffers from a...

HCL Technologies BigFix Mobile Cross-Site Scripting Vulnerability

HCL Technologies BigFix Mobile is a Mobile Device Management MDM solution from HCL Technologies. It is designed to help businesses and organizations effectively manage and secure mobile devices, including smartphones, tablets and other mobile devices. A cross-site scripting vulnerability exists i...

HCL Technologies BigFix Mobile 命令注入漏洞

HCL Technologies BigFix Mobile is a Mobile Device Management MDM solution from HCL Technologies. It is designed to help businesses and organizations effectively manage and secure mobile devices, including smartphones, tablets and other mobile devices. HCL Technologies BigFix Mobile suffers from a...