CVE-2024-20871

Improper authorization vulnerability in Samsung Keyboard prior to version One UI 5.1.1 allows physical attackers to partially bypass the factory reset protection...

PT-2024-18782 · Samsung · Samsung Keyboard

Name of the Vulnerable Software and Affected Versions: Samsung Keyboard versions prior to One UI 5.1.1 Description: The issue is related to an improper authorization vulnerability that allows physical attackers to partially bypass the factory reset protection. This vulnerability can be exploited ...

Samsung One UI 安全漏洞

SAMSUNG One UI Home is the official Samsung launcher for one Galaxy from the South Korean company Samsung SAMSUNG. It is used to open apps and adjust components of the home screen, such as widgets and themes. A security vulnerability previously existed in Samsung One UI version 5.1.1, which stemm...

CVE-2024-20871: Undefined Security Weakness

Improper authorization vulnerability in Samsung Keyboard prior to version One UI 5.1.1 allows physical attackers to partially bypass the factory reset protection...

Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link - Device Config Disclosure

Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link Device Config Vendor: Elber S.r.l. Product web page: https://www.elber.it Affected version: 0.01 Revision 0 Summary: The REBLE610 features an accurate hardware design, absence of internal cabling and full modularity. The unit is composed by a...

CVE-2023-35731

D-Link DAP-2622 DDP Reset Factory Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

tftpy 安全漏洞

tftpy is a Python library by the individual developer Michael P. Soulier. A security vulnerability exists in tftpy. A remote attacker can exploit this vulnerability to cause a denial of service via a parser function in the TftpPacketFactory class...

Palo Alto Networks Outlines Remediation for Critical PAN-OS Flaw Under Attack

Palo Alto Networks has shared remediation guidance for a recently disclosed critical security flaw impacting PAN-OS that has come under active exploitation. The vulnerability, tracked as CVE-2024-3400 CVSS score: 10.0, could be weaponized to obtain unauthenticated remote shell command execution o...

CVE-2024-30939

An issue discovered in Yealink VP59 Teams Editions with firmware version 91.15.0.118 allows a physically proximate attacker to gain control of an account via a flaw in the factory reset procedure...

CVE-2024-30939

An issue discovered in Yealink VP59 Teams Editions with firmware version 91.15.0.118 allows a physically proximate attacker to gain control of an account via a flaw in the factory reset procedure...

Yealink VP59 安全漏洞

YeaLink VP59 is a flagship smart video phone from China-based YeaLink. A security vulnerability exists in the Yealink VP59 Teams Editions version 91.15.0.118, which stems from a flaw that allows an attacker to take control of an account via the factory reset process...

PT-2024-23683 · Yealink · Yealink Vp59 Teams Editions

Name of the Vulnerable Software and Affected Versions: Yealink VP59 Teams Editions version 91.15.0.118 Description: An issue in the factory reset procedure of Yealink VP59 Teams Editions allows a physically proximate attacker to gain control of an account. Recommendations: For Yealink VP59 Teams...

CVE-2024-30939

An issue discovered in Yealink VP59 Teams Editions with firmware version 91.15.0.118 allows a physically proximate attacker to gain control of an account via a flaw in the factory reset procedure...

CVE-2024-30939

The Yealink VP59 Teams Editions with firmware version 91.15.0.118 is vulnerable to an account takeover due to a flaw in the factory reset procedure . A physically proximate attacker can exploit this issue to gain control of an account. As a remediation, it is recommended to perform a secure reset...

CVE-2024-30939

An issue discovered in Yealink VP59 Teams Editions with firmware version 91.15.0.118 allows a physically proximate attacker to gain control of an account via a flaw in the factory reset procedure...

CVE-2024-30939: Improper Authentication

An issue discovered in Yealink VP59 Teams Editions with firmware version 91.15.0.118 allows a physically proximate attacker to gain control of an account via a flaw in the factory reset procedure...

CVE-2023-38297

An issue was discovered in a third-party com.factory.mmigroup component, shipped on devices from multiple device manufacturers. Certain software builds for various Android devices contain a vulnerable pre-installed app with a package name of com.factory.mmigroup versionCode='3', versionName='2.1...

CVE-2023-38292

Certain software builds for the TCL 20XE Android device contain a vulnerable, pre-installed app with a package name of com.tct.gcs.hiddenmenuproxy versionCode='2', versionName='v11.0.1.0.0201.0' that allows local third-party apps to programmatically perform a factory reset due to inadequate acces...

com.factory.mmigroup 安全漏洞

SAMSUNG com.factory.mmigroup is a component of Samsung South Korea. A security vulnerability exists in com.factory.mmigroup, which originates from third-party software that contains a security vulnerability that allows local third-party applications to perform various operations. The following...

CVE-2023-38292

Certain software builds for the TCL 20XE Android device contain a vulnerable, pre-installed app with a package name of com.tct.gcs.hiddenmenuproxy versionCode='2', versionName='v11.0.1.0.0201.0' that allows local third-party apps to programmatically perform a factory reset due to inadequate acces...