Input validation

Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker to identify the device...

Samsung Find My Mobile 安全特征问题漏洞

Samsung Find My Mobile is a free service from Samsung in South Korea that makes it easy to locate, ring or erase your device from the network. A security feature issue vulnerability exists in versions prior to Samsung Find My Mobile 7.2.24.12, which can easily locate, ring or erase your device fr...

CVE-2022-33707

Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker to identify the device...

CVE-2022-33707

CVE-2022-33707 affects Samsung Find My Mobile before version 7.2.24.12. The vulnerability stems from improper identifier creation logic, enabling an attacker to identify a target device. The issue is documented across multiple feeds (NVD, Red Hat, CNVD, CVE records) with the same description. No ...

PT-2022-21823

Name of the Vulnerable Software and Affected Versions Find My Mobile versions prior to 7.2.24.12 Description The issue is related to improper identifier creation logic, which allows an attacker to identify a device. Recommendations For versions prior to 7.2.24.12, update to version 7.2.24.12 or...

CVE-2022-33707: Small Space of Random Values

Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker to identify the device...

PT-2022-5381

Name of the Vulnerable Software and Affected Versions Cairo affected versions not specified Description The issue is related to a buffer overflow in the Cairo graphics library, specifically in the find name function. This could allow a remote attacker to cause a denial of service. Recommendations...

vim: buffer over-read in function find_next_quote

A flaw was found in vim, where it is vulnerable to a buffer over-read in the findnextquote function. This flaw allows a specially crafted file to crash software, modify memory and possibly perform remote execution when opened in vim...

PT-2022-21720 · Typeorm · Typeorm

Name of the Vulnerable Software and Affected Versions: TypeORM versions prior to 0.3.0 Description: The findOne function in TypeORM can be supplied with either a string or a FindOneOptions object. When the input to the function is a user-controlled parsed JSON object, supplying a crafted...

vim: buffer over-read in function find_next_quote

A flaw was found in vim, where it is vulnerable to a buffer over-read in the findnextquote function. This flaw allows a specially crafted file to crash software, modify memory and possibly perform remote execution when opened in vim...

vim: heap buffer overflow in vim_strncpy

A flaw was found in vim, where it is vulnerable to a heap buffer overflow in the vimstrncpy findword function. This flaw allows a specially crafted file to crash software, modify memory and possibly perform remote execution when opened in vim...

PT-2022-37060

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read error. The crash state indicates involvement of functions such as sc asn1 read tag, sc asn1 find tag,...

PT-2022-32007

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to the fast find migrateblock function in the memory management compaction code. It is noted that this function should return the page frame number pfn in the target zone...

PT-2022-31569

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to the fast find migrateblock function in the memory management compaction code. It is noted that this function should return the page frame number pfn in the target zone...

PT-2022-31273

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to the fast find migrateblock function in the memory management compaction code. It is noted that this function should return the page frame number pfn in the target zone...

find-ip-address.org Cross Site Scripting vulnerability OBB-2686982

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-37048

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ crash occurred, involving the functions pdfi dict get no store R inner, pdfi dict get no store R key, and pdfi find resource...

WordPress Better Find and Replace plugin SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. versions prior to WordPress Better Find and Replace plugin 1.3.6 contain a SQL injection...

Malicious code in amazon-s3-find-and-forget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbd98702f102af95fe423652401d4b74a3f550cd99ad34ffad5f9a4e47659cce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-958 Malicious code in amazon-s3-find-and-forget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbd98702f102af95fe423652401d4b74a3f550cd99ad34ffad5f9a4e47659cce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...