CVE-2024-49414

Authentication Bypass Using an Alternate Path in Dex Mode prior to SMR Dec-2024 Release 1 allows physical attackers to temporarily access to recent app list...

PT-2024-33525 · Samsung · Samsung Mobile Devices +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue allows physical attackers to temporarily access the recent app list through an authentication bypass using an alternate path in Dex Mode. This is possible prior to the SMR Dec-20...

CVE-2024-34675

Improper access control in Dex Mode prior to SMR Nov-2024 Release 1 allows physical attackers to temporarily access to unlocked screen...

CVE-2024-34675

Improper access control in Dex Mode prior to SMR Nov-2024 Release 1 allows physical attackers to temporarily access to unlocked screen...

CVE-2024-34675

CVE-2024-34675 describes an improper access control in Dex Mode, prior to SMR Nov-2024 Release 1, that could allow a physical attacker to temporarily access an unlocked screen. The issue affects Dex Mode versions before the SMR Nov-2024 Release 1. Remediation per PT-2024-26096 and related advisor...

CVE-2024-34675

Improper access control in Dex Mode prior to SMR Nov-2024 Release 1 allows physical attackers to temporarily access to unlocked screen...

CVE-2024-34675

Improper access control in Dex Mode prior to SMR Nov-2024 Release 1 allows physical attackers to temporarily access to unlocked screen...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability previously existed in SAMSUNG Mobile devices SMR Nov-2024 Release 1, which stemmed from Dex Mode containing an improper acces...

PT-2024-26096 · Dex Mode · Dex Mode

Name of the Vulnerable Software and Affected Versions: Dex Mode versions prior to SMR Nov-2024 Release 1 Description: The issue is related to improper access control in Dex Mode, allowing physical attackers to temporarily access an unlocked screen. Recommendations: For Dex Mode versions prior to...

CVE-2024-34649

Improper access control in new Dex Mode in multitasking framework prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access an unlocked screen...

CVE-2024-34649

Improper access control in new Dex Mode in multitasking framework prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access an unlocked screen...

CVE-2024-34649

Improper access control in new Dex Mode in multitasking framework prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access an unlocked screen...

CVE-2024-34649

Improper access control in new Dex Mode in multitasking framework prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access an unlocked screen...

CVE-2024-34649

CVE-2024-34649 describes an improper access control flaw in the Dex Mode of Samsung’s multitasking framework, before SMR Sep-2024 Release 1. The issue could allow a physical attacker to temporarily access an unlocked screen. Affected context is limited to Samsung Mobile devices with the Dex Mode/...

GO-2024-2476 Dex discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers in github.com/dexidp/dex

Dex discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers in github.com/dexidp/dex. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports...

OPENSUSE-SU-2024:12410-1 dex-oidc-2.35.3-1.1 on GA media

These are all security issues fixed in the dex-oidc-2.35.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10714-1 dex-oidc-2.28.1-1.3 on GA media

These are all security issues fixed in the dex-oidc-2.28.1-1.3 package on the GA media of openSUSE Tumbleweed...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: kwok, prometheus-elasticsearch-exporter-fips, dex, secrets-store-csi-driver-provider-gcp, kubewatch, vault-k8s-fips, nri-prometheus, render-template, certificate-transparency, fuse-overlayfs-snapshotter, direnv, harbor-scanner-trivy, terraform-docs, tfsec,...

Dexalot Announces Launch of Its Central Limit Order Book DEX on Arbitrum

By Owais Sultan Central limit order book CLOB decentralized exchange Dexalot has announced it is launching on Arbitrum. The move marks… This is a post from HackRead.com Read the original post: Dexalot Announces Launch of Its Central Limit Order Book DEX on Arbitrum...

CVE-2024-32653 Insufficient input filtering of "package name" allows command execution in the device with shell privileges

jadx is a Dex to Java decompiler. Prior to version 1.5.0, the package name is not filtered before concatenation. This can be exploited to inject arbitrary code into the package name. The vulnerability allows an attacker to execute commands with shell privileges. Version 1.5.0 contains a patch for...